Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/6a9378-2fa7-482d-8c7c-69ca4cb65f97/1/TNkIkaeTL3NWqAMznaDM32OtLTU.mft
File: TNkIkaeTL3NWqAMznaDM32OtLTU.mft (raw, json)
Hash identifier: wthdiWVFYXaRIzugjrVIsPqBho7qEDz0yPYdKL2V0+s=
Subject key identifier: 1C:FC:84:33:10:21:31:6A:AA:2E:56:02:57:0B:72:B5:E7:63:1F:25
Authority key identifier: 4C:D9:08:91:A7:93:2F:73:56:A8:03:33:9D:A0:CC:DF:63:AD:2D:35
Certificate issuer: /CN=4cd90891a7932f7356a803339da0ccdf63ad2d35
Certificate serial: 01988054EB1A1E20730871D147B65D744D32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TNkIkaeTL3NWqAMznaDM32OtLTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/6a9378-2fa7-482d-8c7c-69ca4cb65f97/1/TNkIkaeTL3NWqAMznaDM32OtLTU.mft
Manifest number: 0108
Signing time: Wed 06 Aug 2025 17:01:45 +0000
Manifest this update: Wed 06 Aug 2025 17:01:45 +0000
Manifest next update: Thu 07 Aug 2025 17:01:45 +0000
Files and hashes: 1: GPp0CA4dJEmXPt3FvKOuB6Y1Ajo.roa (hash: /WVZb52tGGnvS1Lpmu++5VCxojp2nMgaocCDFVDfPQY=)
2: TNkIkaeTL3NWqAMznaDM32OtLTU.crl (hash: G6aj1Q5nkcghilx/QdJ1ioRLYsW5D3FSbHANWSFOKR8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/6a9378-2fa7-482d-8c7c-69ca4cb65f97/1/TNkIkaeTL3NWqAMznaDM32OtLTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/6a9378-2fa7-482d-8c7c-69ca4cb65f97/1/TNkIkaeTL3NWqAMznaDM32OtLTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TNkIkaeTL3NWqAMznaDM32OtLTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 14:26:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:54:eb:1a:1e:20:73:08:71:d1:47:b6:5d:74:4d:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cd90891a7932f7356a803339da0ccdf63ad2d35
Validity
Not Before: Aug 6 17:01:45 2025 GMT
Not After : Aug 7 17:01:45 2025 GMT
Subject: CN=1cfc84331021316aaa2e5602570b72b5e7631f25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b3:64:ed:b8:37:00:2d:ba:f4:21:57:ce:89:
6a:9d:24:c2:47:06:6f:e0:0a:5e:36:1a:45:8c:e2:
95:9f:6e:6e:99:d3:79:e8:13:a2:e1:6b:17:8a:3d:
4a:ec:6a:f1:98:f1:66:83:5b:d0:fb:90:c3:65:a3:
05:41:e6:ac:7a:cb:cd:6c:5b:65:7c:87:b3:2c:a3:
d0:f9:c6:21:e4:87:93:ba:5e:bb:a9:aa:00:b8:89:
c2:f5:3f:c7:d4:66:c1:7d:7d:00:28:62:99:a8:71:
35:ef:ae:9f:f2:30:e6:0c:37:cf:46:18:44:01:01:
5c:63:87:d4:ed:5f:ba:5a:c0:73:40:e7:1d:2c:5a:
2f:1f:4d:ae:ff:af:9f:04:4b:1a:65:3b:92:42:17:
69:0a:f1:6d:12:43:bb:d3:7f:3f:05:22:65:83:0c:
87:21:49:a8:29:93:98:c5:1d:5b:e3:e8:a3:30:e3:
a4:2d:d2:9d:9a:63:b9:5f:4b:75:7b:a7:c4:a0:d6:
8b:83:f2:97:7b:2e:f5:4a:d8:54:fd:cb:9e:e1:42:
f0:37:39:98:8e:d1:93:b4:70:f0:f2:15:d9:b1:6f:
6a:9e:45:f0:2e:88:84:ec:a7:70:5d:41:d6:c3:83:
ed:ea:f3:2b:31:18:fe:1a:50:dd:ef:62:73:f0:e4:
8b:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:FC:84:33:10:21:31:6A:AA:2E:56:02:57:0B:72:B5:E7:63:1F:25
X509v3 Authority Key Identifier:
keyid:4C:D9:08:91:A7:93:2F:73:56:A8:03:33:9D:A0:CC:DF:63:AD:2D:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TNkIkaeTL3NWqAMznaDM32OtLTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/6a9378-2fa7-482d-8c7c-69ca4cb65f97/1/TNkIkaeTL3NWqAMznaDM32OtLTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/6a9378-2fa7-482d-8c7c-69ca4cb65f97/1/TNkIkaeTL3NWqAMznaDM32OtLTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:41:ba:5c:e7:27:09:02:c1:3e:48:0a:0a:21:93:92:77:cd:
09:35:09:f8:aa:26:44:37:70:6f:7d:8d:3e:0d:e2:63:c4:57:
aa:95:e7:06:68:14:7a:52:d0:e7:46:e7:32:45:7f:93:28:b9:
80:c6:c0:54:0b:2a:87:6d:37:23:0c:e4:1c:59:bf:97:83:24:
48:fe:34:29:93:57:2d:38:f0:bf:87:83:df:25:98:38:48:c3:
54:47:23:17:5c:49:3a:b3:f9:f5:27:69:47:ba:e4:ef:c9:12:
23:b1:20:04:3c:c3:e2:e1:a4:97:b6:ea:12:6c:3b:46:97:94:
a2:62:fe:64:04:e2:b1:c9:d0:45:25:5c:3f:48:aa:f2:78:34:
38:fd:4e:8e:37:a2:bb:09:6b:e9:f5:c5:84:b7:72:cb:8d:3f:
f4:1f:fc:2d:54:09:05:0f:e0:1b:43:d3:33:85:15:70:fb:59:
25:61:23:cd:fb:d2:58:b7:0e:ad:6d:d1:ca:fa:66:5f:e2:96:
11:dd:0c:1d:b1:20:a9:ab:ab:1f:7b:ae:a4:a2:5a:38:e4:a2:
57:9a:e7:73:44:23:ca:1c:ba:a3:f4:a5:04:be:e7:2f:89:b6:
41:3f:b9:a5:87:2d:94:1a:b9:64:e8:4c:ac:22:7d:7a:d9:cc:
a1:f8:e9:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 18:44:21 2025 by rpki-client