Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/TPgIAsZXmk1KEGCNz5LprOmQWxY.mft
File: TPgIAsZXmk1KEGCNz5LprOmQWxY.mft (raw, json)
Hash identifier: UCz8YtItGpLsktREjOZEOC2AxKzmsvbYZAXmKGnVnNM=
Subject key identifier: 89:31:54:46:9A:73:DC:8C:ED:CD:BD:03:20:0E:BD:23:C2:40:D0:FE
Authority key identifier: 4C:F8:08:02:C6:57:9A:4D:4A:10:60:8D:CF:92:E9:AC:E9:90:5B:16
Certificate issuer: /CN=4cf80802c6579a4d4a10608dcf92e9ace9905b16
Certificate serial: 0198850C38FE247E91473ABB0A095C0BB4CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TPgIAsZXmk1KEGCNz5LprOmQWxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/TPgIAsZXmk1KEGCNz5LprOmQWxY.mft
Manifest number: 04E1
Signing time: Thu 07 Aug 2025 15:00:27 +0000
Manifest this update: Thu 07 Aug 2025 15:00:27 +0000
Manifest next update: Fri 08 Aug 2025 15:00:27 +0000
Files and hashes: 1: 3bqib6Vf9__QQmrt5lwxWaCIYDg.roa (hash: nBz+tND5F4lJlZbTQii6SKZ6iYxW0Iv4ninjHe9dyBI=)
2: TPgIAsZXmk1KEGCNz5LprOmQWxY.crl (hash: CvUc7GQFNH1dBYm7Did+1SQfxw53zMwtqBYXzNdtKHM=)
3: V3x4-1WXGWfdIqvzomsHhdbzXSs.roa (hash: zh2EOf1/AdU8UOAuoYHykO5WxiDzPCEaB7bgSCkL3Ec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/TPgIAsZXmk1KEGCNz5LprOmQWxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/TPgIAsZXmk1KEGCNz5LprOmQWxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/TPgIAsZXmk1KEGCNz5LprOmQWxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:85:0c:38:fe:24:7e:91:47:3a:bb:0a:09:5c:0b:b4:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cf80802c6579a4d4a10608dcf92e9ace9905b16
Validity
Not Before: Aug 7 15:00:27 2025 GMT
Not After : Aug 8 15:00:27 2025 GMT
Subject: CN=893154469a73dc8cedcdbd03200ebd23c240d0fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:50:38:be:ba:2a:4d:ec:08:13:27:d4:b4:e8:
84:0b:42:cf:e4:0f:7c:07:c1:4c:42:63:7a:31:94:
00:50:ee:36:a5:64:f3:5e:fe:1c:78:c2:70:d1:23:
c7:8a:6e:4a:32:25:04:79:52:a4:8f:d6:24:94:07:
9f:42:41:e1:49:7e:ef:5d:ed:aa:de:14:6b:2b:10:
7f:a8:0d:df:ad:83:90:31:39:10:06:35:be:12:ab:
90:e5:d9:7f:63:df:43:9e:f2:1e:d6:11:c1:cf:0a:
cf:41:fa:90:40:df:80:9b:d5:ab:7a:01:59:93:a5:
b5:0a:e0:aa:09:c0:8d:f6:74:63:b6:0d:80:69:a2:
bb:3c:d6:cd:18:c4:55:97:a3:fb:ce:0a:30:86:86:
1a:4a:21:31:8b:8c:20:a6:95:69:26:75:c1:b5:68:
e5:7e:69:71:c6:54:3b:c1:b1:1c:ab:00:b7:92:a0:
85:e4:71:2b:23:91:8f:dc:19:16:8f:5b:1e:ae:2b:
99:72:24:84:39:b1:29:b8:74:34:87:2e:87:b9:8d:
30:92:d7:15:9c:34:ce:f5:0a:ba:6d:f6:41:6f:1e:
55:cd:00:8e:b7:5c:7d:02:ae:3a:5c:ab:ee:17:04:
69:61:f8:99:f1:6e:9d:54:c5:b6:35:c7:c0:53:a6:
94:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:31:54:46:9A:73:DC:8C:ED:CD:BD:03:20:0E:BD:23:C2:40:D0:FE
X509v3 Authority Key Identifier:
keyid:4C:F8:08:02:C6:57:9A:4D:4A:10:60:8D:CF:92:E9:AC:E9:90:5B:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TPgIAsZXmk1KEGCNz5LprOmQWxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/TPgIAsZXmk1KEGCNz5LprOmQWxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/TPgIAsZXmk1KEGCNz5LprOmQWxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:c7:ee:19:b0:0c:e4:04:06:44:7e:06:14:fd:47:f1:3d:c6:
74:b8:74:4d:2a:47:f6:c7:66:2c:df:b6:cc:6e:23:b6:de:be:
83:64:b7:88:4c:9f:1a:4a:78:08:7c:b5:b2:3f:f8:22:93:92:
ca:7e:a1:e4:3e:80:2f:f0:1f:0d:bf:1f:e7:a4:e9:a2:37:74:
04:d1:ef:f8:aa:c5:24:88:21:3d:e4:82:16:a8:8b:de:f2:e4:
30:1f:ba:92:b0:90:65:f0:7e:5d:52:9f:e9:ad:6e:97:65:28:
e2:fb:7c:d6:7f:0d:b9:e0:21:0f:8f:0f:83:9f:5d:7a:a1:18:
fc:ec:6b:be:32:81:26:ac:43:ec:88:4f:6c:5b:11:b9:80:21:
ed:de:51:ce:8e:12:70:ae:c4:71:37:2e:e5:26:75:37:f5:8e:
26:4f:27:25:4a:f1:39:29:98:cd:2f:79:ab:ef:76:28:6d:22:
ac:f9:ec:ca:fd:de:96:28:ca:af:b7:99:02:81:7c:1a:dc:a1:
ce:fc:34:3f:b9:ff:1a:97:34:69:47:62:f6:09:c1:f2:a4:31:
23:ba:e6:2f:9f:3e:d9:d6:ef:19:d7:b0:cc:b3:a9:12:8a:a5:
6e:d2:7c:85:79:0c:6a:19:fc:62:86:36:bc:de:d5:be:25:eb:
ec:4d:45:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:38:35 2025 by rpki-client