Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/9e9122-bbff-48d9-98c6-0a4286f3cfbe/1/tfV-SevwmLxT6Ns4iIHJI2nZv4w.mft
File: tfV-SevwmLxT6Ns4iIHJI2nZv4w.mft (raw, json)
Hash identifier: T58VphQIZfXPD4j4jJnBTYvIW4yqIPz6gBZ9H+y6hpg=
Subject key identifier: 6C:71:5B:21:FE:71:E2:CA:98:5D:1F:27:29:36:E7:18:B7:54:B1:76
Authority key identifier: B5:F5:7E:49:EB:F0:98:BC:53:E8:DB:38:88:81:C9:23:69:D9:BF:8C
Certificate issuer: /CN=b5f57e49ebf098bc53e8db388881c92369d9bf8c
Certificate serial: 0198748707D6C2AB9D5A77668565F1A2B89A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tfV-SevwmLxT6Ns4iIHJI2nZv4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/9e9122-bbff-48d9-98c6-0a4286f3cfbe/1/tfV-SevwmLxT6Ns4iIHJI2nZv4w.mft
Manifest number: 139A
Signing time: Mon 04 Aug 2025 10:01:03 +0000
Manifest this update: Mon 04 Aug 2025 10:01:03 +0000
Manifest next update: Tue 05 Aug 2025 10:01:03 +0000
Files and hashes: 1: HqctvWxlrIEslD4ELNpmV-XhZkU.roa (hash: CGfhQ4fck7gcAxsslFd0Q8T9jYmDIbHyBLNxPR9Qais=)
2: bKSpPE5-kXmlbnT7r_1atj4jQSY.roa (hash: L3QXcpXiam9j36oZrcZebMrghkDu87SD2DJXHj63ivw=)
3: tfV-SevwmLxT6Ns4iIHJI2nZv4w.crl (hash: 4f5SpLtTPbCFlIcMKdttqDMuoMtOs17mtYFBdFjvM9E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/9e9122-bbff-48d9-98c6-0a4286f3cfbe/1/tfV-SevwmLxT6Ns4iIHJI2nZv4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/9e9122-bbff-48d9-98c6-0a4286f3cfbe/1/tfV-SevwmLxT6Ns4iIHJI2nZv4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/tfV-SevwmLxT6Ns4iIHJI2nZv4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 10:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:87:07:d6:c2:ab:9d:5a:77:66:85:65:f1:a2:b8:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5f57e49ebf098bc53e8db388881c92369d9bf8c
Validity
Not Before: Aug 4 10:01:03 2025 GMT
Not After : Aug 5 10:01:03 2025 GMT
Subject: CN=6c715b21fe71e2ca985d1f272936e718b754b176
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:3a:c6:e5:46:34:bd:9b:71:86:50:0c:f4:36:
d5:52:f5:0b:f0:b0:ec:f8:ee:fb:5f:05:b2:2d:b2:
93:20:ab:6f:5a:10:fd:57:49:0d:29:e3:dd:c2:f7:
19:b1:72:3c:4f:15:aa:c7:86:1f:74:eb:00:d8:c4:
65:b4:99:94:36:bb:b5:3c:5a:ba:55:04:f8:47:14:
22:48:b4:99:fd:80:95:18:cb:bb:81:10:69:55:85:
60:c2:d3:68:2f:c7:b3:5b:fb:ed:b9:71:17:08:76:
fb:be:c1:b0:5b:e2:04:59:9a:b7:a5:d3:45:27:2c:
96:1b:19:fc:31:49:d3:1b:f9:94:d9:bd:c5:db:5e:
9f:82:12:58:a5:30:1d:fc:e8:9e:22:62:5c:24:90:
f9:2b:98:70:6e:98:05:d8:c4:45:81:97:03:a0:1a:
e1:d1:09:f5:04:b3:55:b7:7c:67:13:2e:f9:41:4b:
48:16:03:04:e4:59:c6:fb:52:26:ba:a0:eb:30:a1:
45:83:bb:aa:07:16:f7:6a:3e:2e:5a:50:21:f2:d6:
3d:3e:f1:ca:aa:3b:53:1b:96:7c:4f:82:6d:1e:d3:
a4:aa:c6:28:a2:7c:49:5e:f7:2f:66:82:6b:4b:04:
9d:a1:7e:15:1c:e2:c1:28:c8:94:cf:ab:d1:d4:aa:
51:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:71:5B:21:FE:71:E2:CA:98:5D:1F:27:29:36:E7:18:B7:54:B1:76
X509v3 Authority Key Identifier:
keyid:B5:F5:7E:49:EB:F0:98:BC:53:E8:DB:38:88:81:C9:23:69:D9:BF:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tfV-SevwmLxT6Ns4iIHJI2nZv4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/9e9122-bbff-48d9-98c6-0a4286f3cfbe/1/tfV-SevwmLxT6Ns4iIHJI2nZv4w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/9e9122-bbff-48d9-98c6-0a4286f3cfbe/1/tfV-SevwmLxT6Ns4iIHJI2nZv4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:37:bc:e9:c8:15:82:59:65:2d:c7:10:35:92:cf:3d:d7:c6:
4d:10:6b:66:e8:5b:df:43:23:b1:92:ec:da:d7:c9:76:53:2b:
d0:fd:b7:bf:dd:f6:0a:0b:74:f8:a6:eb:c2:00:d8:0b:73:e0:
46:26:83:e5:52:8c:11:ed:57:42:76:c3:9c:69:2b:c3:25:78:
71:0c:f0:fc:53:e8:33:b6:f3:4e:d6:8c:7e:8b:1a:2b:4a:6b:
81:a3:1d:db:07:68:15:3b:a9:d6:71:37:57:70:5a:b9:bf:35:
e9:b2:82:b8:3e:4f:54:ea:76:14:4f:b2:91:66:b3:e7:17:d5:
85:ff:d1:ba:0f:e6:1f:59:a3:cb:c4:f4:4c:65:1b:80:fc:fd:
94:57:0c:05:83:2a:e0:2f:40:e4:22:d2:bb:ae:70:c1:1b:b9:
43:c6:76:da:1a:f4:b5:94:79:17:cb:1b:f4:1d:bf:38:6d:fb:
4e:aa:78:7c:b8:e7:9e:f4:fa:eb:a1:b4:96:97:18:f2:f7:f7:
0a:46:46:77:25:ac:af:1d:67:37:24:88:98:7b:a2:b2:8a:cc:
88:58:e3:c5:d3:32:74:65:3a:d0:27:d1:ba:3b:e9:ee:0a:15:
fb:d3:a9:ed:59:05:00:83:fb:5d:69:e9:e6:80:e8:5a:3c:8d:
89:12:cc:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:14:20 2025 by rpki-client