Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/4afeab-02b9-4ebd-bfa2-8e80b496a03e/1/TgTgpximE5qcZfDUiGu4JxTaZoI.mft
File: TgTgpximE5qcZfDUiGu4JxTaZoI.mft (raw, json)
Hash identifier: ZyfCHcAaj7fNTrEpvLIUQXR7gMZwW0a6GkjOv6OggV4=
Subject key identifier: 4F:DF:B8:54:54:11:DA:CD:A6:7D:64:6E:17:8E:FA:12:FD:EE:F1:F5
Authority key identifier: 4E:04:E0:A7:18:A6:13:9A:9C:65:F0:D4:88:6B:B8:27:14:DA:66:82
Certificate issuer: /CN=4e04e0a718a6139a9c65f0d4886bb82714da6682
Certificate serial: 019892C7F0E7AC09C0E4C1D0098EF24B7E11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TgTgpximE5qcZfDUiGu4JxTaZoI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/4afeab-02b9-4ebd-bfa2-8e80b496a03e/1/TgTgpximE5qcZfDUiGu4JxTaZoI.mft
Manifest number: 1627
Signing time: Sun 10 Aug 2025 07:00:33 +0000
Manifest this update: Sun 10 Aug 2025 07:00:33 +0000
Manifest next update: Mon 11 Aug 2025 07:00:33 +0000
Files and hashes: 1: TgTgpximE5qcZfDUiGu4JxTaZoI.crl (hash: 6+ho2jt/WmQv0hfiwkD/eGnzXbdJYsbc5hgoLm7tSJo=)
2: _DVbXJIlrc4WueVJodx5_dUQQGU.roa (hash: qLnLYdx/R1C59idEfb9lAoJsSeK5qnRHJhL7xW0LEkE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/4afeab-02b9-4ebd-bfa2-8e80b496a03e/1/TgTgpximE5qcZfDUiGu4JxTaZoI.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/4afeab-02b9-4ebd-bfa2-8e80b496a03e/1/TgTgpximE5qcZfDUiGu4JxTaZoI.mft
rsync://rpki.ripe.net/repository/DEFAULT/TgTgpximE5qcZfDUiGu4JxTaZoI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 07:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:92:c7:f0:e7:ac:09:c0:e4:c1:d0:09:8e:f2:4b:7e:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e04e0a718a6139a9c65f0d4886bb82714da6682
Validity
Not Before: Aug 10 07:00:33 2025 GMT
Not After : Aug 11 07:00:33 2025 GMT
Subject: CN=4fdfb8545411dacda67d646e178efa12fdeef1f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:5d:5c:e1:1a:aa:22:5d:cb:55:2e:cf:0f:5d:
80:55:8b:35:98:ce:ad:aa:72:44:a7:52:13:31:cc:
a7:02:b5:dc:10:3b:25:cd:9f:82:50:e8:86:4f:6f:
d3:e5:4f:15:20:ff:40:62:4e:40:37:cd:e0:d3:2e:
2c:0f:68:d2:87:b5:b0:91:d6:80:bd:d5:5e:91:7f:
31:5f:92:1a:d2:12:8f:7b:ba:c7:8a:f6:b9:36:db:
2f:d9:84:b2:37:6d:47:fb:44:34:45:44:3e:37:73:
84:a9:6a:03:ad:0a:bb:f1:26:47:82:dd:f3:bd:9f:
b3:2a:00:e7:d8:10:1c:77:d9:58:f9:fd:76:37:25:
18:d9:de:90:d8:a4:5b:6a:08:92:37:ae:d6:17:e6:
e7:cf:0a:ed:76:d7:5e:2f:de:24:bf:46:e4:7f:73:
e9:19:ef:fd:49:98:5a:b2:66:6b:dc:a0:16:88:f9:
5b:2c:00:0c:55:e9:46:29:6d:5c:dc:9a:34:b1:ee:
78:4f:e0:4b:93:67:56:f4:c2:e7:26:9f:23:19:75:
9a:5b:76:01:3e:83:86:74:35:5c:56:81:ad:36:f8:
a2:d3:3f:4f:3f:a1:e1:7b:b2:71:47:b8:8b:c4:06:
10:ae:59:bf:7d:3f:6e:61:60:67:d9:88:4d:df:62:
05:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:DF:B8:54:54:11:DA:CD:A6:7D:64:6E:17:8E:FA:12:FD:EE:F1:F5
X509v3 Authority Key Identifier:
keyid:4E:04:E0:A7:18:A6:13:9A:9C:65:F0:D4:88:6B:B8:27:14:DA:66:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TgTgpximE5qcZfDUiGu4JxTaZoI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4afeab-02b9-4ebd-bfa2-8e80b496a03e/1/TgTgpximE5qcZfDUiGu4JxTaZoI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4afeab-02b9-4ebd-bfa2-8e80b496a03e/1/TgTgpximE5qcZfDUiGu4JxTaZoI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:c3:4c:cd:79:29:a6:ed:50:ed:72:8a:8a:3a:f0:0c:d6:8f:
96:27:8f:2d:4a:ad:3d:17:b0:ce:d8:55:a5:e1:ff:dc:a4:57:
d0:0d:85:f2:fa:a6:b0:b0:bc:7f:a5:50:ba:0a:8b:85:07:bd:
b7:a6:15:49:c1:c1:63:0a:78:44:c5:95:e1:33:a3:cf:f0:aa:
79:99:67:2c:ec:e5:5b:0d:a8:af:16:6d:94:c9:3a:24:86:1b:
cc:25:be:a7:5c:4b:4d:f4:20:e1:2e:73:17:f7:5d:50:82:ec:
fd:58:b6:87:41:17:61:f0:6f:af:ea:da:30:55:84:53:a4:60:
fa:30:43:fb:4c:11:65:ee:2d:8c:66:0d:a6:20:39:86:40:44:
45:37:0b:ae:18:b4:13:69:59:e0:51:ed:fe:42:95:6c:33:4b:
28:b1:95:d2:f7:1f:e9:2b:d2:91:55:7b:4a:04:b8:d7:e0:a8:
db:a0:e4:3e:36:fa:19:56:7f:be:05:be:81:fc:5c:6d:2f:15:
0b:90:25:44:81:ac:4d:29:d5:38:27:13:4d:bd:17:b4:de:a9:
f7:69:b7:eb:62:88:89:6d:47:94:34:b6:27:1b:1f:88:c7:1b:
69:5d:f0:e7:54:e9:ba:d3:b8:04:9a:cd:21:9c:59:d2:e1:18:
9f:f2:41:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 10:46:10 2025 by rpki-client