Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/26b619-55cf-4489-a9b3-58a20f34f2ec/1/TkJGYHD_jDzJZ9pI4U2hLfcbJnE.mft
File: TkJGYHD_jDzJZ9pI4U2hLfcbJnE.mft (raw, json)
Hash identifier: X9CMSzE2IpagYbtz6ycRxwhsqNHwKYRHkkupOG2rHyw=
Subject key identifier: 9A:E8:61:39:22:17:4C:44:CA:5F:AD:EE:20:38:72:9D:56:7E:B0:54
Authority key identifier: 4E:42:46:60:70:FF:8C:3C:C9:67:DA:48:E1:4D:A1:2D:F7:1B:26:71
Certificate issuer: /CN=4e42466070ff8c3cc967da48e14da12df71b2671
Certificate serial: 0198835749027C298E27319D376E6EB98730
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TkJGYHD_jDzJZ9pI4U2hLfcbJnE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/26b619-55cf-4489-a9b3-58a20f34f2ec/1/TkJGYHD_jDzJZ9pI4U2hLfcbJnE.mft
Manifest number: 1620
Signing time: Thu 07 Aug 2025 07:03:12 +0000
Manifest this update: Thu 07 Aug 2025 07:03:12 +0000
Manifest next update: Fri 08 Aug 2025 07:03:12 +0000
Files and hashes: 1: TkJGYHD_jDzJZ9pI4U2hLfcbJnE.crl (hash: 2DEte27jiJ0UcnqXHtoYqqmfe5p0S7qjRiNwzT7r2Wg=)
2: Vn0PoWq91day6d--kuy39s7CP5U.roa (hash: daOIdL4b5N4GukWwie8JBBD3OBe/sdcGSiKd1pWKhtI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/26b619-55cf-4489-a9b3-58a20f34f2ec/1/TkJGYHD_jDzJZ9pI4U2hLfcbJnE.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/26b619-55cf-4489-a9b3-58a20f34f2ec/1/TkJGYHD_jDzJZ9pI4U2hLfcbJnE.mft
rsync://rpki.ripe.net/repository/DEFAULT/TkJGYHD_jDzJZ9pI4U2hLfcbJnE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 07:03:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:83:57:49:02:7c:29:8e:27:31:9d:37:6e:6e:b9:87:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e42466070ff8c3cc967da48e14da12df71b2671
Validity
Not Before: Aug 7 07:03:12 2025 GMT
Not After : Aug 8 07:03:12 2025 GMT
Subject: CN=9ae8613922174c44ca5fadee2038729d567eb054
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c3:d6:53:e8:c9:e6:ca:ee:c6:6f:ad:83:29:
5a:fd:9a:f8:f2:b7:cd:f3:0e:06:1e:fb:e6:9a:2c:
bc:96:3e:cf:dd:84:62:90:de:60:b5:d9:10:be:06:
9a:8c:9b:a6:03:89:db:b8:56:65:ef:4b:d3:10:b2:
11:fa:13:58:fb:90:46:df:ff:5f:a7:d5:cf:7d:df:
20:95:fd:12:45:bd:2f:d9:dc:10:33:16:44:66:cb:
93:28:05:95:85:f7:4f:a9:32:a7:f0:1b:76:c6:01:
85:05:fc:d5:e0:70:9e:42:2b:43:c6:b6:e3:b7:2b:
ec:fd:a3:67:88:a3:d2:16:cd:63:1b:b2:18:8f:d1:
96:aa:17:37:fe:ee:94:9c:9b:d3:f8:99:f0:93:41:
a0:28:2d:84:50:ae:04:a0:f2:40:80:55:dc:da:de:
f2:31:5f:d3:d7:f6:89:8d:7e:a7:34:74:b2:20:3d:
f8:dc:c2:4f:6b:f7:d1:af:73:08:ea:5a:63:1c:bc:
53:b8:7a:69:b1:b3:0d:72:f2:91:20:5b:b5:51:5d:
08:7b:31:f2:2e:27:56:b3:64:4c:7f:af:26:43:bb:
83:7f:ea:21:71:c2:aa:d6:ab:a7:59:6c:d8:76:26:
0d:2a:d5:f3:3b:02:34:ad:7e:6a:79:a6:9b:c1:a6:
c5:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:E8:61:39:22:17:4C:44:CA:5F:AD:EE:20:38:72:9D:56:7E:B0:54
X509v3 Authority Key Identifier:
keyid:4E:42:46:60:70:FF:8C:3C:C9:67:DA:48:E1:4D:A1:2D:F7:1B:26:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TkJGYHD_jDzJZ9pI4U2hLfcbJnE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/26b619-55cf-4489-a9b3-58a20f34f2ec/1/TkJGYHD_jDzJZ9pI4U2hLfcbJnE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/26b619-55cf-4489-a9b3-58a20f34f2ec/1/TkJGYHD_jDzJZ9pI4U2hLfcbJnE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:16:d8:09:5f:be:66:75:45:d8:bd:fb:2f:e5:5d:c8:bb:a4:
70:c6:37:29:3e:68:4b:1d:31:5b:b2:62:13:f4:d5:8a:23:8d:
56:43:fe:7a:5c:fc:0a:19:9f:8f:ae:9a:26:b5:67:8a:b2:c8:
d4:5f:8b:51:f7:07:51:fc:68:b6:bb:5f:2f:b9:dc:37:5a:16:
56:26:91:c7:ac:a2:0c:a8:ef:c2:24:e5:34:d8:fa:88:20:c5:
32:02:4d:30:7d:14:59:c9:42:67:fd:b9:3c:0f:12:2b:f1:38:
40:8a:df:c3:3a:48:f6:f9:be:08:9d:06:3e:80:61:b2:36:5b:
e9:be:0c:c9:68:bb:e7:5e:63:bc:e6:2b:74:03:bd:c7:d3:19:
52:50:bd:c5:b8:12:91:aa:8f:5b:d5:b1:be:6d:7b:7f:e9:79:
a7:f2:5b:a3:5c:f2:85:dc:03:b4:e3:d4:7f:2d:28:5a:09:20:
ca:0a:b7:df:58:c4:66:af:fb:f4:01:cb:6c:a8:f8:0e:b9:c0:
54:79:c6:13:66:71:eb:62:c1:eb:ac:be:58:b0:ef:8d:f3:5d:
2f:f8:4e:ab:26:b4:30:3a:85:ef:fd:f5:31:f4:9c:b1:ec:6b:
33:92:9c:ec:0c:85:b9:eb:9e:06:b1:4f:51:44:5c:2a:32:a5:
2c:03:4b:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 17:33:29 2025 by rpki-client