Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/134ccb-b0ab-446b-8172-62e27cd1e975/1/tA2EnMQ7cy2rZkH8b9Wk2zotuUc.mft
File: tA2EnMQ7cy2rZkH8b9Wk2zotuUc.mft (raw, json)
Hash identifier: 14IgET6uwGNK8cT41d4hjnb5/kJUL785RERCssA42Ig=
Subject key identifier: 8D:5C:03:FB:E7:2E:4B:45:43:4B:17:DD:C9:53:33:F2:B9:E2:13:60
Authority key identifier: B4:0D:84:9C:C4:3B:73:2D:AB:66:41:FC:6F:D5:A4:DB:3A:2D:B9:47
Certificate issuer: /CN=b40d849cc43b732dab6641fc6fd5a4db3a2db947
Certificate serial: 01989C71EF01A451C7D66AF6332A856FC20F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tA2EnMQ7cy2rZkH8b9Wk2zotuUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/134ccb-b0ab-446b-8172-62e27cd1e975/1/tA2EnMQ7cy2rZkH8b9Wk2zotuUc.mft
Manifest number: 09C4
Signing time: Tue 12 Aug 2025 04:02:49 +0000
Manifest this update: Tue 12 Aug 2025 04:02:49 +0000
Manifest next update: Wed 13 Aug 2025 04:02:49 +0000
Files and hashes: 1: tA2EnMQ7cy2rZkH8b9Wk2zotuUc.crl (hash: j06++H1+qUXVWyFrRAYrZCi4uEjN2pzOKDHIW1QzGjo=)
2: x7aEXzfMRzlzp6VorB64R028Jvk.roa (hash: 3aOt7CTs1p/zJJSbWQR2//U36Y0+Zh2Kxl00BzPCEXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/134ccb-b0ab-446b-8172-62e27cd1e975/1/tA2EnMQ7cy2rZkH8b9Wk2zotuUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/134ccb-b0ab-446b-8172-62e27cd1e975/1/tA2EnMQ7cy2rZkH8b9Wk2zotuUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/tA2EnMQ7cy2rZkH8b9Wk2zotuUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 04:02:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9c:71:ef:01:a4:51:c7:d6:6a:f6:33:2a:85:6f:c2:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b40d849cc43b732dab6641fc6fd5a4db3a2db947
Validity
Not Before: Aug 12 04:02:49 2025 GMT
Not After : Aug 13 04:02:49 2025 GMT
Subject: CN=8d5c03fbe72e4b45434b17ddc95333f2b9e21360
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c0:92:16:ae:77:a4:5a:cf:58:97:b2:1b:a8:
fd:e1:64:f4:21:46:b4:c4:a2:70:c7:f2:32:75:c2:
75:6f:f8:fc:23:69:7d:bf:28:3e:c1:a3:80:7f:96:
ce:32:dc:b1:06:73:e0:05:48:fc:50:fd:37:1b:5d:
70:6e:07:e7:57:38:8a:43:80:ea:27:43:9e:e8:60:
5b:e8:20:63:2f:43:03:c3:2d:b6:57:51:44:cb:e3:
86:55:69:0d:23:90:36:04:06:46:b5:c7:ee:b5:3c:
03:85:9b:6e:af:82:65:70:c6:ef:7b:c9:9b:95:c8:
4f:86:ed:60:30:b1:01:52:e6:d0:e5:9c:fc:7d:7c:
0b:32:77:24:d1:36:7d:32:9d:c5:a4:98:c4:41:03:
e0:5b:6d:2a:63:c1:26:9a:1c:1d:d9:76:17:18:d7:
cf:0a:72:a6:c9:50:b7:d2:b8:05:a5:42:ee:da:a2:
c0:bb:09:49:04:22:5c:87:a8:e8:bc:d2:65:6c:98:
85:35:f5:8f:ab:94:2f:62:16:84:60:a0:77:53:aa:
15:0d:84:1c:7f:a8:00:b6:eb:c6:1a:05:02:87:e4:
01:2b:74:97:6f:09:8c:59:10:75:4f:07:6c:c3:73:
95:10:8b:d6:ab:03:3b:64:15:79:13:69:4c:4f:c9:
2c:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:5C:03:FB:E7:2E:4B:45:43:4B:17:DD:C9:53:33:F2:B9:E2:13:60
X509v3 Authority Key Identifier:
keyid:B4:0D:84:9C:C4:3B:73:2D:AB:66:41:FC:6F:D5:A4:DB:3A:2D:B9:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tA2EnMQ7cy2rZkH8b9Wk2zotuUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/134ccb-b0ab-446b-8172-62e27cd1e975/1/tA2EnMQ7cy2rZkH8b9Wk2zotuUc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/134ccb-b0ab-446b-8172-62e27cd1e975/1/tA2EnMQ7cy2rZkH8b9Wk2zotuUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
df:54:fc:a1:74:8d:e9:fe:f6:da:4c:6b:4c:55:70:7a:80:d7:
54:5b:3e:d1:6b:b8:41:4d:b2:5a:0f:d2:94:e3:56:31:d8:8b:
6f:4a:4a:2c:f5:3a:7b:d2:d3:e8:b2:e1:5b:2c:7c:11:50:5e:
9e:4f:e3:30:b6:0a:77:34:77:37:3f:de:47:4c:e0:02:e3:a6:
05:fb:90:44:ec:c4:53:b0:bb:4f:14:e1:71:c3:1f:b5:be:f7:
70:f5:b7:0c:cd:9f:0e:3f:ef:66:d6:df:59:44:2a:d8:62:6b:
42:d6:ef:91:6c:58:d2:dc:b5:e1:a6:60:76:5b:4d:cf:33:89:
e9:6d:42:8e:e3:04:fd:ce:bf:cc:85:ba:a3:ee:68:96:18:64:
de:43:ab:e2:27:44:37:fb:92:91:ce:d3:b7:07:ef:23:a2:32:
a3:34:bc:fb:04:28:11:b7:a2:7f:30:4f:2e:6d:a6:2c:27:00:
56:1c:f8:03:93:1c:5d:aa:70:69:10:cd:16:84:ba:8d:be:cb:
94:37:06:be:61:24:be:cd:e0:c0:f3:af:30:c6:f4:11:19:7f:
22:a6:85:09:9d:a5:6b:b5:71:29:83:e8:75:ef:a2:cc:56:00:
1e:9d:3a:6c:6b:95:8a:ed:f7:a7:0f:32:a4:6c:e3:16:34:e3:
68:9b:d5:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 13:41:29 2025 by rpki-client