
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/82225d-040a-4d9b-a33b-88d8234a6d3e/1/TkMMADsADTVe0WnlXYzPOTg34go.mft
File: TkMMADsADTVe0WnlXYzPOTg34go.mft (raw, json)
Hash identifier: HWrZC74k3H/qAxee08dZdyW2kBbmlzjwCMHxUBhWyDo=
Subject key identifier: 4A:F6:7B:A0:82:D4:2D:BD:BC:F7:9B:19:47:5E:CB:22:97:B8:3A:2A
Authority key identifier: 4E:43:0C:00:3B:00:0D:35:5E:D1:69:E5:5D:8C:CF:39:38:37:E2:0A
Certificate issuer: /CN=4e430c003b000d355ed169e55d8ccf393837e20a
Certificate serial: 01987DF86098A87878FB338561C42B4583BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TkMMADsADTVe0WnlXYzPOTg34go.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/82225d-040a-4d9b-a33b-88d8234a6d3e/1/TkMMADsADTVe0WnlXYzPOTg34go.mft
Manifest number: 0DA0
Signing time: Wed 06 Aug 2025 06:01:26 +0000
Manifest this update: Wed 06 Aug 2025 06:01:26 +0000
Manifest next update: Thu 07 Aug 2025 06:01:26 +0000
Files and hashes: 1: TkMMADsADTVe0WnlXYzPOTg34go.crl (hash: G+3iabD13Jgd9IhgR8/pFyB2rglQziGag5XSzxyy1+A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/82225d-040a-4d9b-a33b-88d8234a6d3e/1/TkMMADsADTVe0WnlXYzPOTg34go.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/82225d-040a-4d9b-a33b-88d8234a6d3e/1/TkMMADsADTVe0WnlXYzPOTg34go.mft
rsync://rpki.ripe.net/repository/DEFAULT/TkMMADsADTVe0WnlXYzPOTg34go.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:f8:60:98:a8:78:78:fb:33:85:61:c4:2b:45:83:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e430c003b000d355ed169e55d8ccf393837e20a
Validity
Not Before: Aug 6 06:01:26 2025 GMT
Not After : Aug 7 06:01:26 2025 GMT
Subject: CN=4af67ba082d42dbdbcf79b19475ecb2297b83a2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:95:9e:11:c9:3a:ce:1c:a1:28:4c:6c:ee:ea:
b7:99:1a:4b:f6:0b:93:ec:45:64:8a:7b:0e:35:ec:
e0:74:e4:a0:9f:0e:4b:7c:17:b9:9f:75:90:45:5c:
3c:a6:7c:2f:53:1c:0a:6a:0c:dd:f0:0f:ee:a1:e7:
c5:d8:87:2f:8c:4e:f4:aa:b3:80:50:f5:b9:3b:16:
a3:f6:47:a7:b1:94:cf:e8:d8:6a:29:03:23:df:65:
40:64:98:49:45:b8:28:b0:49:96:43:89:99:cf:9f:
95:ee:a9:66:be:6b:c3:de:76:11:5a:b8:99:62:08:
f5:55:7c:04:b7:5b:87:ba:d8:4d:ca:95:13:f0:c9:
78:3e:e4:f4:63:3e:ce:e9:92:8c:b2:cc:1c:1d:c7:
57:63:e9:d3:bf:a4:26:e7:f4:5f:d4:6c:e6:87:c5:
f0:c1:cf:2c:b7:31:4f:39:61:1f:71:ec:af:82:e3:
85:1d:ad:34:1d:c1:de:10:bf:17:21:70:c2:3d:ae:
4a:32:a1:2d:9e:a7:de:02:67:c9:ba:b6:ce:1f:a5:
bb:62:46:c6:1f:6e:90:e6:63:f0:6d:f5:21:96:9f:
de:16:9a:ff:43:ba:1d:1d:42:fe:1c:67:10:ea:58:
86:a0:c3:f8:d0:79:79:ae:c7:c9:00:f1:b0:33:ce:
48:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:F6:7B:A0:82:D4:2D:BD:BC:F7:9B:19:47:5E:CB:22:97:B8:3A:2A
X509v3 Authority Key Identifier:
keyid:4E:43:0C:00:3B:00:0D:35:5E:D1:69:E5:5D:8C:CF:39:38:37:E2:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TkMMADsADTVe0WnlXYzPOTg34go.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/82225d-040a-4d9b-a33b-88d8234a6d3e/1/TkMMADsADTVe0WnlXYzPOTg34go.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/82225d-040a-4d9b-a33b-88d8234a6d3e/1/TkMMADsADTVe0WnlXYzPOTg34go.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:30:fc:11:49:e1:8a:ea:8d:33:65:e6:36:96:3e:ce:1d:99:
3a:49:c1:72:45:bd:ea:ee:17:6c:79:2a:0e:36:95:21:46:6a:
4d:c9:67:bb:45:e9:60:53:89:5b:70:68:7e:30:35:b9:97:1a:
ca:9c:4f:cf:5c:88:1b:6d:17:20:5c:34:af:78:09:ab:92:ad:
c7:4a:cd:86:f9:79:82:ab:d0:b1:09:a6:73:68:16:fc:f4:41:
fa:60:6e:cc:43:e1:ac:83:19:b3:3a:6f:cc:21:82:50:eb:e7:
f0:16:34:a6:f9:56:f9:4b:a3:91:b3:8c:16:5a:0b:b9:ae:34:
e1:c6:ae:c9:59:90:19:ea:36:d6:b3:4d:36:90:b0:a3:bf:b8:
57:02:43:b7:91:45:20:db:39:1b:c7:02:ac:2b:ff:d2:9e:b4:
11:55:63:8a:11:23:49:9b:f3:40:0b:ce:08:46:31:88:92:21:
28:7a:92:c1:bc:6a:f6:ee:19:bb:c3:ba:a7:be:be:c2:9f:8c:
43:85:cc:18:cb:e8:b9:5f:a5:b5:73:27:45:be:f9:10:25:b2:
5d:fc:ad:d0:8d:d9:22:e8:df:83:53:8b:c5:f6:5d:47:be:b1:
8a:ad:ac:05:9e:da:e0:95:88:20:cb:f5:0c:94:60:37:d9:f2:
1e:ff:27:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:40:32 2025 by rpki-client