Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/ee71c6-1bae-4858-af3a-bc289dc17d20/1/TAf2nWArfrt_YzDXFcnsPlq6MPo.mft
File: TAf2nWArfrt_YzDXFcnsPlq6MPo.mft (raw, json)
Hash identifier: LeZEFOKPua/EwZUxiMBbC6hV5dTMr2E6qZ6D/pQQKbk=
Subject key identifier: AA:F5:16:17:13:08:21:89:03:B4:C6:E0:5F:6C:AC:FF:C2:E4:B2:D2
Authority key identifier: 4C:07:F6:9D:60:2B:7E:BB:7F:63:30:D7:15:C9:EC:3E:5A:BA:30:FA
Certificate issuer: /CN=4c07f69d602b7ebb7f6330d715c9ec3e5aba30fa
Certificate serial: 01987ABFAA79242B2881E86553AFC60EF11C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TAf2nWArfrt_YzDXFcnsPlq6MPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/ee71c6-1bae-4858-af3a-bc289dc17d20/1/TAf2nWArfrt_YzDXFcnsPlq6MPo.mft
Manifest number: 0A0A
Signing time: Tue 05 Aug 2025 15:00:38 +0000
Manifest this update: Tue 05 Aug 2025 15:00:38 +0000
Manifest next update: Wed 06 Aug 2025 15:00:38 +0000
Files and hashes: 1: TAf2nWArfrt_YzDXFcnsPlq6MPo.crl (hash: /k382bJyqDoaWvzNJvRJ6Et4yRJEudas7Ekopj9Z6Zw=)
2: nXGx5bSqdUW_hrhQiJHYlpD8vR8.roa (hash: BZPTD4TDsLLlN6D+oiM71I+DEGQ39DwwkOK3NvmzOh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/ee71c6-1bae-4858-af3a-bc289dc17d20/1/TAf2nWArfrt_YzDXFcnsPlq6MPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/ee71c6-1bae-4858-af3a-bc289dc17d20/1/TAf2nWArfrt_YzDXFcnsPlq6MPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/TAf2nWArfrt_YzDXFcnsPlq6MPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 15:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:bf:aa:79:24:2b:28:81:e8:65:53:af:c6:0e:f1:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c07f69d602b7ebb7f6330d715c9ec3e5aba30fa
Validity
Not Before: Aug 5 15:00:38 2025 GMT
Not After : Aug 6 15:00:38 2025 GMT
Subject: CN=aaf516171308218903b4c6e05f6cacffc2e4b2d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:01:99:5f:eb:57:cd:83:7a:d0:6a:8b:fc:9c:
6d:b9:00:ff:58:2f:b2:4a:bb:92:34:66:11:12:ca:
64:42:5b:f1:d2:4b:6f:bc:04:70:03:c0:30:d4:8b:
0e:4c:c4:c4:bc:12:f8:9e:76:ba:f2:21:f6:7b:9b:
a5:cf:83:3e:6b:94:e2:54:e8:7d:d4:63:b4:66:52:
60:e8:b0:35:31:1c:a0:b5:13:d2:dd:1f:ed:2d:39:
77:6a:da:fe:64:9e:dd:07:29:2f:16:d0:15:1a:83:
7b:90:25:2c:85:e0:e0:8d:1c:07:c8:c2:49:5d:6b:
92:91:79:de:f4:84:35:9d:e4:9b:d1:89:e4:b3:01:
e8:61:00:70:99:3a:26:52:68:0e:a0:57:45:d1:c4:
11:10:6d:ad:0c:48:61:7a:68:ed:eb:05:0e:3c:e5:
42:9b:69:9f:5a:6c:4d:20:e0:4b:fa:70:f2:f3:60:
87:d3:26:10:b3:16:6a:53:ce:2c:a3:af:c3:00:99:
d1:af:4c:c1:c0:13:a4:f1:db:e8:66:f3:f0:00:05:
87:ad:a9:ef:8f:4b:f8:23:ba:96:c1:81:37:3b:a4:
ce:b7:8a:f3:b0:46:8e:e4:39:fc:c0:d5:82:93:5c:
90:a0:c4:67:eb:0b:4f:9c:60:01:8f:3d:eb:54:de:
1e:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:F5:16:17:13:08:21:89:03:B4:C6:E0:5F:6C:AC:FF:C2:E4:B2:D2
X509v3 Authority Key Identifier:
keyid:4C:07:F6:9D:60:2B:7E:BB:7F:63:30:D7:15:C9:EC:3E:5A:BA:30:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TAf2nWArfrt_YzDXFcnsPlq6MPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ee71c6-1bae-4858-af3a-bc289dc17d20/1/TAf2nWArfrt_YzDXFcnsPlq6MPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ee71c6-1bae-4858-af3a-bc289dc17d20/1/TAf2nWArfrt_YzDXFcnsPlq6MPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:1f:4c:09:a6:dc:4f:e4:62:fe:4c:8a:10:b8:5d:e7:71:95:
09:0b:2e:de:c6:a7:18:dc:23:d8:34:e1:07:76:cb:a4:51:33:
5c:41:3b:39:73:8c:d2:05:b0:ea:2c:83:de:13:ac:9b:d3:88:
aa:d7:c1:c8:15:a9:ca:27:99:7b:05:aa:3a:2d:75:77:5b:d4:
ec:6d:ec:f3:a3:85:62:be:46:38:e1:2f:61:62:8d:c4:63:87:
13:e4:73:69:0c:27:7d:bd:9f:37:2e:5c:23:cf:11:a4:cd:72:
c3:8d:35:96:21:0d:03:6b:cf:39:97:ac:50:be:2c:c3:40:8d:
38:17:a8:98:01:ad:cb:d2:ad:ab:9a:c0:fe:5f:45:98:fd:15:
29:fa:db:2e:e7:22:21:1c:4c:8f:47:ef:62:0b:69:3b:41:95:
bb:2d:81:72:41:08:f0:18:eb:41:a2:e1:09:9e:3e:54:68:48:
b5:0b:ae:7a:65:e7:ee:56:37:e8:af:70:ab:b8:20:ff:19:ac:
7d:01:11:1a:88:9b:97:e3:38:e4:4c:88:2b:de:28:93:68:d4:
89:bf:89:35:ec:8a:4f:94:20:76:63:77:a3:46:4d:3c:d5:1b:
cf:5a:ae:c1:e8:59:c8:64:f0:b8:f0:5e:d5:8f:70:96:51:4e:
c9:5f:db:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:42:42 2025 by rpki-client