Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/e5bdc7-eb06-4626-84d7-13da74cd35a4/1/TkJsh9-8xVLceQ_sPtHN56j4huk.mft
File: TkJsh9-8xVLceQ_sPtHN56j4huk.mft (raw, json)
Hash identifier: j5Mn8cYdtw2itzJfJ1dT5ZSdPqSW/vJ0BWH1oicl/kk=
Subject key identifier: 8D:57:33:97:79:B9:44:85:13:5F:24:35:40:17:89:74:FA:46:42:58
Authority key identifier: 4E:42:6C:87:DF:BC:C5:52:DC:79:0F:EC:3E:D1:CD:E7:A8:F8:86:E9
Certificate issuer: /CN=4e426c87dfbcc552dc790fec3ed1cde7a8f886e9
Certificate serial: 019873E216CE330101F48CCF3DC4AAD2BCFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TkJsh9-8xVLceQ_sPtHN56j4huk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/e5bdc7-eb06-4626-84d7-13da74cd35a4/1/TkJsh9-8xVLceQ_sPtHN56j4huk.mft
Manifest number: 0955
Signing time: Mon 04 Aug 2025 07:00:53 +0000
Manifest this update: Mon 04 Aug 2025 07:00:53 +0000
Manifest next update: Tue 05 Aug 2025 07:00:53 +0000
Files and hashes: 1: TkJsh9-8xVLceQ_sPtHN56j4huk.crl (hash: 44uAbQyMJ6mb9iD/sZ3KrBFpXSQ0vWWNReuRReRiEAQ=)
2: o1pkGMrhjFIHajUuas6hn3OkprM.roa (hash: vhDUewSi85hdhWxPSoEhr0a9lvOVAXD09OTRvqe5guU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/e5bdc7-eb06-4626-84d7-13da74cd35a4/1/TkJsh9-8xVLceQ_sPtHN56j4huk.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/e5bdc7-eb06-4626-84d7-13da74cd35a4/1/TkJsh9-8xVLceQ_sPtHN56j4huk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TkJsh9-8xVLceQ_sPtHN56j4huk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 07:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:16:ce:33:01:01:f4:8c:cf:3d:c4:aa:d2:bc:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e426c87dfbcc552dc790fec3ed1cde7a8f886e9
Validity
Not Before: Aug 4 07:00:53 2025 GMT
Not After : Aug 5 07:00:53 2025 GMT
Subject: CN=8d57339779b94485135f243540178974fa464258
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:01:d1:b6:c3:0b:d7:ee:f6:bc:bf:55:9c:6e:
7d:ac:4b:f1:1a:b2:c5:45:94:bc:9d:b2:65:bb:4a:
9f:38:3a:04:d6:0a:68:4f:17:44:c9:ec:85:fe:f9:
13:e2:ea:95:26:97:17:6a:bb:fc:2f:ee:12:10:4c:
0a:c9:4d:c8:14:fe:5b:68:69:a3:f4:53:7e:f2:23:
f3:39:93:50:73:8f:86:6a:c7:e7:fc:a3:37:6a:70:
90:34:1d:e0:9d:48:4a:35:26:e9:aa:5b:1c:10:d3:
c9:a2:50:ff:ab:7c:5e:bd:a2:ef:1f:21:dd:6e:ee:
03:2c:8f:db:27:05:c9:b1:1d:18:e8:b4:db:02:0b:
26:22:0b:9a:d8:9c:e1:4a:e4:a7:6a:99:1f:05:f8:
3f:cc:fa:d4:08:f5:2d:f2:b0:96:92:5c:59:c7:b8:
9b:af:f9:8c:c9:15:d7:de:7d:34:fd:29:1b:d6:67:
61:0a:4d:73:36:cf:6d:09:16:de:54:c0:6c:16:fd:
70:01:05:60:16:f4:23:4a:da:03:6b:c1:9d:59:20:
92:7c:17:4c:54:e5:3f:b6:ff:db:12:ac:de:17:1a:
dc:5c:63:32:59:b6:d7:43:5e:98:c0:e0:bf:5e:84:
54:fc:23:d3:33:10:13:c0:51:c4:15:7a:73:07:e3:
0a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:57:33:97:79:B9:44:85:13:5F:24:35:40:17:89:74:FA:46:42:58
X509v3 Authority Key Identifier:
keyid:4E:42:6C:87:DF:BC:C5:52:DC:79:0F:EC:3E:D1:CD:E7:A8:F8:86:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TkJsh9-8xVLceQ_sPtHN56j4huk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e5bdc7-eb06-4626-84d7-13da74cd35a4/1/TkJsh9-8xVLceQ_sPtHN56j4huk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e5bdc7-eb06-4626-84d7-13da74cd35a4/1/TkJsh9-8xVLceQ_sPtHN56j4huk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:0a:1e:37:1f:c9:e9:4e:46:4d:bf:c9:da:09:3c:c7:d7:ca:
40:82:68:ca:31:aa:b7:03:db:84:4a:b3:71:df:f8:8d:4a:ce:
cd:df:fa:58:6b:ad:82:42:d6:00:38:f0:b9:77:bd:d9:49:83:
f1:c2:56:36:c0:e2:c4:ba:e0:0e:88:7e:e9:cd:45:ba:ae:c6:
5e:9b:7e:b9:07:40:cb:2c:ca:dd:03:07:8e:28:58:60:fb:27:
1d:04:4b:ef:ee:a1:68:c3:d5:59:e0:b0:e2:c0:a4:5e:51:5f:
52:4b:f2:1c:10:df:06:1c:ba:a5:0a:1a:16:44:5d:20:bf:08:
45:46:ac:bb:9b:8d:49:08:ed:d5:67:16:58:ae:f8:76:7b:69:
b1:24:9f:c0:f4:2b:58:b2:24:b2:9e:d5:92:90:c6:9c:3e:cd:
7b:e0:ac:02:55:6f:3f:ec:85:33:ac:ba:6d:25:17:bb:04:bf:
60:ab:8d:55:9e:ad:ba:43:5a:ab:20:41:3c:b3:16:69:4d:0b:
85:7f:ea:87:66:52:fb:f5:5b:40:58:79:40:f9:f9:8c:07:5b:
f3:44:d2:d3:84:b5:27:86:9e:75:28:8d:cb:37:51:56:d9:58:
7a:33:4b:2b:8f:bf:9a:8b:75:00:f8:5a:55:76:0a:0a:d3:d9:
29:49:dc:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:14:34 2025 by rpki-client