Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/278398-7339-44b2-b0b0-73a01ae5de8f/1/TNcfWgBQ-K5kRMY4dpujdf3bzhk.mft
File: TNcfWgBQ-K5kRMY4dpujdf3bzhk.mft (raw, json)
Hash identifier: mvYjwwCr50rlDRgfomH8TlXVBBM8IvyHC7YgMsymsY8=
Subject key identifier: 19:F1:40:DE:29:76:24:1D:39:23:C9:D1:85:EB:D5:AA:58:5E:D1:EC
Authority key identifier: 4C:D7:1F:5A:00:50:F8:AE:64:44:C6:38:76:9B:A3:75:FD:DB:CE:19
Certificate issuer: /CN=4cd71f5a0050f8ae6444c638769ba375fddbce19
Certificate serial: 01987CE5236A0A1DB6E909C6A7070C77F67E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TNcfWgBQ-K5kRMY4dpujdf3bzhk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/278398-7339-44b2-b0b0-73a01ae5de8f/1/TNcfWgBQ-K5kRMY4dpujdf3bzhk.mft
Manifest number: 1307
Signing time: Wed 06 Aug 2025 01:00:48 +0000
Manifest this update: Wed 06 Aug 2025 01:00:48 +0000
Manifest next update: Thu 07 Aug 2025 01:00:48 +0000
Files and hashes: 1: R8OfYueHd1P1AWWtdGiixwllIMs.roa (hash: ZKzgreBUlCJXbuPQDDLtfbqfZaf5YaZJohzFfYmemPA=)
2: TNcfWgBQ-K5kRMY4dpujdf3bzhk.crl (hash: 43LRnmwPLnv93hZEttJUT1PbrNDovQxoibHPcQ+7Wfo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/278398-7339-44b2-b0b0-73a01ae5de8f/1/TNcfWgBQ-K5kRMY4dpujdf3bzhk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/278398-7339-44b2-b0b0-73a01ae5de8f/1/TNcfWgBQ-K5kRMY4dpujdf3bzhk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TNcfWgBQ-K5kRMY4dpujdf3bzhk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:e5:23:6a:0a:1d:b6:e9:09:c6:a7:07:0c:77:f6:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cd71f5a0050f8ae6444c638769ba375fddbce19
Validity
Not Before: Aug 6 01:00:48 2025 GMT
Not After : Aug 7 01:00:48 2025 GMT
Subject: CN=19f140de2976241d3923c9d185ebd5aa585ed1ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e6:d4:10:59:15:a8:9a:30:4f:17:8a:38:f1:
15:af:f4:42:97:fa:ca:59:5b:f7:ce:4b:df:59:56:
b6:29:03:f0:4e:35:7b:c3:59:2e:32:8d:27:02:a9:
f7:76:36:78:84:df:8e:81:c7:c6:ae:cc:8f:dd:0d:
2c:b9:e4:39:95:dd:19:b7:b6:3f:fc:d6:e3:10:e7:
2a:09:f0:3c:63:af:80:bd:53:5a:9c:c9:f7:b8:fc:
e3:5a:a8:9b:67:01:03:9f:84:64:d8:ef:f8:6a:b6:
ec:96:29:01:54:de:6c:41:30:7b:c4:90:6f:1b:46:
7f:f9:d8:8a:0d:f1:8a:08:6a:d7:c0:0e:57:d7:3a:
65:79:e5:09:db:1b:b9:dc:4d:45:07:a3:02:b9:31:
b9:71:36:09:15:ef:7c:8a:54:1f:35:a1:9e:7d:2b:
20:f0:f3:1f:3f:8f:59:be:ed:7a:14:94:80:c1:47:
1c:d6:6a:15:ee:04:cb:a4:e9:ac:68:a4:92:4f:5c:
f4:e0:5d:e5:88:7e:b9:28:9e:42:dc:d4:91:b2:a4:
b2:42:5c:83:08:09:9d:a2:37:25:7f:6e:52:b2:59:
73:20:7b:37:ad:e5:91:a3:9c:b4:4f:d9:7a:1c:64:
16:85:08:90:b1:f9:7b:59:8e:50:d1:10:8a:0c:77:
27:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:F1:40:DE:29:76:24:1D:39:23:C9:D1:85:EB:D5:AA:58:5E:D1:EC
X509v3 Authority Key Identifier:
keyid:4C:D7:1F:5A:00:50:F8:AE:64:44:C6:38:76:9B:A3:75:FD:DB:CE:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TNcfWgBQ-K5kRMY4dpujdf3bzhk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/278398-7339-44b2-b0b0-73a01ae5de8f/1/TNcfWgBQ-K5kRMY4dpujdf3bzhk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/278398-7339-44b2-b0b0-73a01ae5de8f/1/TNcfWgBQ-K5kRMY4dpujdf3bzhk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:08:6b:ce:a8:13:a7:7f:fc:0a:19:ee:ba:19:51:7e:da:b4:
ee:35:78:79:82:11:c0:21:d5:c2:34:a7:b2:d9:4f:89:d6:4f:
93:6c:fc:60:94:42:b5:67:1c:f3:50:11:e0:0d:c5:61:b6:47:
6a:ae:0e:fe:a6:cd:51:c7:05:f2:84:63:12:78:3d:f3:b1:f6:
3e:ae:36:ce:bd:c4:85:a2:58:6f:5c:ca:42:63:47:50:f7:8a:
ff:14:88:3c:52:ec:11:80:f6:32:2b:75:9c:b4:de:1a:9c:b3:
d0:c9:c7:54:2f:ca:d5:f4:d6:b9:5e:b0:9f:0b:56:1c:fb:7d:
08:10:91:2e:b4:de:98:f4:2c:f2:22:22:96:22:3a:a2:fd:9b:
12:e1:ac:c9:46:83:b9:1a:59:d2:e1:0d:01:38:2f:d8:47:9c:
d2:88:af:a5:e8:8a:5c:80:40:26:ca:1a:7e:01:c3:7e:ee:27:
25:1a:3d:df:d4:2f:60:e3:4d:df:63:83:c4:e5:b9:6d:d5:fa:
e2:8d:ce:76:6e:40:d4:4b:45:08:01:58:d5:e1:f7:b3:df:3a:
c8:a9:39:f7:7b:cb:01:ce:d0:a8:eb:df:c6:0d:65:9f:15:26:
6a:3b:c1:88:f8:cc:19:57:5d:97:d9:04:d7:dc:0a:b4:e3:3a:
c7:04:14:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:31:25 2025 by rpki-client