
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/961f64-837c-4811-aa42-58f215bca53a/1/TjQBh8D85f_wN87ZplCCQ-QE2nE.mft
File: TjQBh8D85f_wN87ZplCCQ-QE2nE.mft (raw, json)
Hash identifier: fqOH231TJ9rXRyxPZm/G0dnPmbIKzJyKFkXRtuMHEC8=
Subject key identifier: E2:3C:9B:EC:5A:62:AB:70:48:C9:8C:8F:C1:55:B3:73:03:EF:41:AE
Authority key identifier: 4E:34:01:87:C0:FC:E5:FF:F0:37:CE:D9:A6:50:82:43:E4:04:DA:71
Certificate issuer: /CN=4e340187c0fce5fff037ced9a6508243e404da71
Certificate serial: 01987DF805B7AD5F95CE0F984C10C81B1921
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TjQBh8D85f_wN87ZplCCQ-QE2nE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/961f64-837c-4811-aa42-58f215bca53a/1/TjQBh8D85f_wN87ZplCCQ-QE2nE.mft
Manifest number: 0948
Signing time: Wed 06 Aug 2025 06:01:03 +0000
Manifest this update: Wed 06 Aug 2025 06:01:03 +0000
Manifest next update: Thu 07 Aug 2025 06:01:03 +0000
Files and hashes: 1: CpuMVh4uJ1tcoj_OkQygaUN_hh8.roa (hash: yhnMpFW3oI3a8/KGPX3tjlLUQZvGsHrg1LJyUrjeFm8=)
2: TjQBh8D85f_wN87ZplCCQ-QE2nE.crl (hash: seL+QytIr0rmi8Ok4AcvAjf8qcDHzB8oisxV01FbpeQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/961f64-837c-4811-aa42-58f215bca53a/1/TjQBh8D85f_wN87ZplCCQ-QE2nE.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/961f64-837c-4811-aa42-58f215bca53a/1/TjQBh8D85f_wN87ZplCCQ-QE2nE.mft
rsync://rpki.ripe.net/repository/DEFAULT/TjQBh8D85f_wN87ZplCCQ-QE2nE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:f8:05:b7:ad:5f:95:ce:0f:98:4c:10:c8:1b:19:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e340187c0fce5fff037ced9a6508243e404da71
Validity
Not Before: Aug 6 06:01:03 2025 GMT
Not After : Aug 7 06:01:03 2025 GMT
Subject: CN=e23c9bec5a62ab7048c98c8fc155b37303ef41ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ec:19:b1:4a:bd:75:2d:c1:a9:df:1b:44:13:
4f:9b:61:5c:9d:c9:ef:31:07:01:15:18:0c:e8:2b:
b2:d8:55:15:cb:8b:a6:78:29:8b:a7:a6:08:e2:f7:
68:ff:7d:47:96:14:e0:d3:66:e2:2e:b3:8e:f1:7b:
fa:78:ee:60:53:b0:af:f5:c4:22:d0:c4:4e:b0:49:
e9:95:c9:30:e4:9a:e6:bb:83:d0:85:5a:f6:50:6f:
a5:91:cf:39:99:c2:e2:13:5d:3d:80:58:c1:16:d1:
36:0f:d1:fc:cc:71:b1:8c:ab:b5:29:97:e1:d9:ae:
14:22:72:62:90:de:52:00:ed:d6:af:5f:f9:55:ff:
58:3b:80:0b:0d:62:cb:7a:03:43:aa:4a:95:64:00:
ad:32:a4:6d:2f:eb:25:a4:f3:e2:be:ca:64:88:f7:
0b:1f:42:d1:4f:c2:6d:8b:4d:6e:d7:b4:5a:27:94:
5d:b2:3c:84:2a:6f:4a:e6:15:60:a0:4e:a7:23:e6:
13:a6:14:dc:d1:03:cd:8e:88:ad:4e:49:d2:05:c7:
78:9c:88:f2:2f:81:29:3e:db:d2:7c:a3:e2:0d:c1:
4c:21:36:5f:bf:73:80:60:8a:e9:61:33:9d:e6:0b:
d4:2b:2a:53:ef:64:56:b9:e5:70:35:a3:e2:e9:bd:
d6:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:3C:9B:EC:5A:62:AB:70:48:C9:8C:8F:C1:55:B3:73:03:EF:41:AE
X509v3 Authority Key Identifier:
keyid:4E:34:01:87:C0:FC:E5:FF:F0:37:CE:D9:A6:50:82:43:E4:04:DA:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TjQBh8D85f_wN87ZplCCQ-QE2nE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/961f64-837c-4811-aa42-58f215bca53a/1/TjQBh8D85f_wN87ZplCCQ-QE2nE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/961f64-837c-4811-aa42-58f215bca53a/1/TjQBh8D85f_wN87ZplCCQ-QE2nE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:7c:b6:cf:20:5a:e7:47:d6:20:d0:d7:e1:bd:bf:6a:d5:a5:
ff:6f:dc:e3:3c:25:a3:ec:ac:28:df:b1:c9:03:29:2c:13:b0:
37:b4:43:cb:be:90:e6:dd:70:aa:3c:32:1f:ae:dc:36:41:2c:
e6:5e:b7:0f:54:a6:b6:f9:84:d6:11:63:33:d8:ea:27:91:4c:
ab:77:72:82:69:55:65:a2:1a:0d:a5:f5:06:46:bb:b4:e3:81:
0e:ea:94:5f:18:34:b5:19:77:4e:a8:83:c6:f0:69:2c:96:32:
8d:9d:77:ae:2f:16:b4:7e:cc:29:38:f2:34:f6:8b:04:9a:17:
3f:e3:60:cd:c8:91:9b:49:a8:66:77:2b:a9:a0:16:05:75:c2:
ec:35:2b:ae:f1:43:0e:65:28:17:57:7c:c4:69:d7:e5:3e:dd:
eb:f7:b5:94:38:8c:92:32:e4:5e:45:88:44:34:1b:7e:da:cd:
15:2e:30:6c:19:40:5f:b8:1e:ae:d9:59:25:f1:79:cd:29:35:
fa:7f:69:8d:bb:89:c6:05:6d:2f:65:e5:aa:47:ff:ea:52:69:
c9:55:58:ff:8a:2d:33:e1:13:8f:23:99:da:a2:4e:3c:29:e0:
f5:70:51:80:7d:86:9c:ad:50:61:e0:a6:0f:1c:f3:90:52:bc:
2c:77:9a:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:36:29 2025 by rpki-client