Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/TKRH97Ondvck2LyBQL4xdmYsJNA.mft
File: TKRH97Ondvck2LyBQL4xdmYsJNA.mft (raw, json)
Hash identifier: wkuUat6mdmKnroGFH0eIoqUqtx7Xmt9tgqwJgR5QXmg=
Subject key identifier: 9B:1E:BA:0D:5A:73:10:54:02:B8:63:56:7E:2A:CA:17:49:28:25:92
Authority key identifier: 4C:A4:47:F7:B3:A7:76:F7:24:D8:BC:81:40:BE:31:76:66:2C:24:D0
Certificate issuer: /CN=4ca447f7b3a776f724d8bc8140be3176662c24d0
Certificate serial: 01988242A7DC7614D782FCF21B85271AEB45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TKRH97Ondvck2LyBQL4xdmYsJNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/TKRH97Ondvck2LyBQL4xdmYsJNA.mft
Manifest number: 06B0
Signing time: Thu 07 Aug 2025 02:01:03 +0000
Manifest this update: Thu 07 Aug 2025 02:01:03 +0000
Manifest next update: Fri 08 Aug 2025 02:01:03 +0000
Files and hashes: 1: TKRH97Ondvck2LyBQL4xdmYsJNA.crl (hash: aVr3avDitm+UKFfWFx3vI1IatEcdQozFMpdalp+dfDo=)
2: fIoweheWq1JqzVdLBCrrD-x4kK4.roa (hash: yoQba86aaUs4p2P/E/UoxSeIL5NEm/wDobQOVMT4e5A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/TKRH97Ondvck2LyBQL4xdmYsJNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/TKRH97Ondvck2LyBQL4xdmYsJNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/TKRH97Ondvck2LyBQL4xdmYsJNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:82:42:a7:dc:76:14:d7:82:fc:f2:1b:85:27:1a:eb:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ca447f7b3a776f724d8bc8140be3176662c24d0
Validity
Not Before: Aug 7 02:01:03 2025 GMT
Not After : Aug 8 02:01:03 2025 GMT
Subject: CN=9b1eba0d5a73105402b863567e2aca1749282592
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:ad:00:f1:b4:a8:03:a7:28:7e:b4:78:ed:84:
bf:d1:ae:a7:46:04:cf:aa:92:5f:93:ed:1c:04:3e:
df:3b:d8:ce:40:15:89:d0:79:6b:28:7f:29:24:67:
66:1d:bb:2c:92:1a:39:80:7c:dc:90:10:9a:f2:77:
f6:82:f3:7a:8b:90:79:25:19:06:d8:7c:3d:6d:bd:
bf:5c:5e:63:46:66:3f:eb:54:0c:57:3f:e8:c7:aa:
3b:da:c6:21:b5:20:b7:1c:70:e8:f9:0d:09:2e:89:
96:57:85:98:14:b4:da:3a:4d:ca:f8:61:c3:d3:c2:
50:6b:be:7b:6c:9c:de:04:d1:20:06:0b:1a:53:33:
10:aa:ab:02:01:ea:32:2c:5d:35:dd:2f:10:fa:b7:
a6:81:20:34:82:a2:95:e8:c7:93:c7:3c:d2:47:1a:
d4:89:77:44:ab:32:af:25:a1:fe:ce:a7:d3:dc:04:
a5:f6:4e:58:41:ab:3e:e3:91:0a:39:3f:11:45:74:
35:53:20:5e:b9:fe:59:5a:2a:a6:16:f2:e8:70:da:
e8:71:16:19:ea:49:20:83:10:5d:b7:4e:bb:60:fd:
bb:b8:cb:a3:28:54:de:16:89:a2:70:be:29:2f:2f:
3b:e1:d2:8f:8d:4f:17:36:e3:21:61:cb:bf:38:54:
22:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:1E:BA:0D:5A:73:10:54:02:B8:63:56:7E:2A:CA:17:49:28:25:92
X509v3 Authority Key Identifier:
keyid:4C:A4:47:F7:B3:A7:76:F7:24:D8:BC:81:40:BE:31:76:66:2C:24:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TKRH97Ondvck2LyBQL4xdmYsJNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/TKRH97Ondvck2LyBQL4xdmYsJNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/TKRH97Ondvck2LyBQL4xdmYsJNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:10:47:8c:94:b1:84:be:2c:b7:63:a2:56:ba:c6:90:1d:48:
fa:c1:b5:ed:73:77:a3:bf:f8:f6:41:d3:44:64:52:e6:e8:2f:
f3:94:dd:a6:71:8d:29:8b:48:e5:be:11:b6:1c:6c:6e:e4:d8:
06:71:4c:56:a6:2b:ab:2b:4f:ea:2a:60:3f:d8:1d:9f:22:b1:
d4:02:b4:85:56:18:10:58:55:06:64:7a:34:6f:19:23:37:7b:
dc:05:41:5d:a1:67:4f:ab:19:9c:da:7c:56:a8:3a:25:9a:38:
3d:e1:cf:55:03:ed:a8:31:50:fb:3d:f4:48:7b:1d:ef:78:68:
02:57:4d:a5:43:80:56:ed:03:e3:a4:57:b0:8a:47:2f:3d:8c:
95:a7:ba:cc:39:1e:eb:d8:3b:25:e0:bb:af:6c:01:3a:cb:33:
cf:64:4a:96:69:75:cd:ad:7f:c7:09:e2:dd:b5:d2:e5:7d:ad:
5b:13:1d:e2:0d:fd:3e:6e:e8:2a:46:9f:20:ca:be:14:c5:3f:
8e:24:c3:84:8e:c4:cc:61:24:10:19:d2:1f:95:37:a2:ee:a7:
23:36:b1:67:68:5e:9e:3b:4e:62:28:b7:e8:c3:eb:32:96:e5:
05:22:f5:8d:b1:c4:29:88:0b:54:3b:6e:30:1c:a5:ff:3a:de:
2d:54:d0:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:23:59 2025 by rpki-client