Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/5ca294-897b-4e49-a9c7-bc48b41f498b/1/TNR7i4qp-8zP89UHgU_HRGSiq_A.mft
File: TNR7i4qp-8zP89UHgU_HRGSiq_A.mft (raw, json)
Hash identifier: Vr5MtyNIK/VpiXxACE9dEeGdQoByEf4cLUQ07mH2Y7A=
Subject key identifier: 7A:9D:59:0A:02:BF:4E:38:88:8A:20:8E:37:32:68:EE:CE:C4:57:78
Authority key identifier: 4C:D4:7B:8B:8A:A9:FB:CC:CF:F3:D5:07:81:4F:C7:44:64:A2:AB:F0
Certificate issuer: /CN=4cd47b8b8aa9fbcccff3d507814fc74464a2abf0
Certificate serial: 01987450C436B5F2D981B2564A378A21A629
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TNR7i4qp-8zP89UHgU_HRGSiq_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/5ca294-897b-4e49-a9c7-bc48b41f498b/1/TNR7i4qp-8zP89UHgU_HRGSiq_A.mft
Manifest number: 0D0C
Signing time: Mon 04 Aug 2025 09:01:46 +0000
Manifest this update: Mon 04 Aug 2025 09:01:46 +0000
Manifest next update: Tue 05 Aug 2025 09:01:46 +0000
Files and hashes: 1: TNR7i4qp-8zP89UHgU_HRGSiq_A.crl (hash: PQruy3qyPegGvv1+s1OPBRS8t1PkpPy+TZNOZmlg2wA=)
2: zYBlb8-4iJi2Xsk5poztWDw6ukY.roa (hash: veXHQ0WmE+2KQkfYtO+EXvFrciAIGT+yWdclt50BTQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/5ca294-897b-4e49-a9c7-bc48b41f498b/1/TNR7i4qp-8zP89UHgU_HRGSiq_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/5ca294-897b-4e49-a9c7-bc48b41f498b/1/TNR7i4qp-8zP89UHgU_HRGSiq_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/TNR7i4qp-8zP89UHgU_HRGSiq_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:c4:36:b5:f2:d9:81:b2:56:4a:37:8a:21:a6:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cd47b8b8aa9fbcccff3d507814fc74464a2abf0
Validity
Not Before: Aug 4 09:01:46 2025 GMT
Not After : Aug 5 09:01:46 2025 GMT
Subject: CN=7a9d590a02bf4e38888a208e373268eecec45778
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:33:14:c3:1f:8d:2f:a1:66:ab:55:36:6f:e9:
12:5c:54:eb:6e:ed:35:90:b2:c8:c5:67:67:ad:55:
95:18:db:3f:9e:a4:c4:94:28:ef:84:dc:9e:bc:85:
10:5b:6c:ec:5e:08:d3:69:f6:c4:9a:a0:41:ef:bb:
5c:b8:5b:0b:7f:95:d7:78:09:78:65:0e:c9:8b:c0:
f9:98:07:01:5e:d2:6a:c2:3b:ea:e4:9a:0a:d2:d6:
97:79:07:c8:f5:7d:b9:80:59:62:5e:68:f2:05:a8:
e0:0a:8d:58:90:31:b2:e3:78:fc:85:6d:72:d2:f5:
b9:14:b3:73:eb:88:04:e0:37:f1:c6:01:90:1f:18:
12:73:f8:5d:1d:e5:66:50:39:78:09:0a:94:71:3e:
fe:69:ae:bf:de:9d:af:c4:59:a7:22:5e:d9:ab:f6:
af:a1:69:b7:c7:82:cc:47:2a:d6:64:8e:80:f4:38:
07:9f:ac:1e:14:5c:88:a6:51:c9:f3:a0:8d:f3:13:
e9:fd:07:b7:ee:10:af:fb:75:26:e2:99:45:7d:79:
a4:6c:e8:d0:20:10:25:ae:1e:7c:46:a6:1f:ad:01:
cb:a5:3d:de:50:6b:8f:4e:c9:82:68:7a:b1:48:28:
6c:98:1b:c2:fd:bc:a9:d7:e0:dd:b8:a2:a2:ea:94:
38:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:9D:59:0A:02:BF:4E:38:88:8A:20:8E:37:32:68:EE:CE:C4:57:78
X509v3 Authority Key Identifier:
keyid:4C:D4:7B:8B:8A:A9:FB:CC:CF:F3:D5:07:81:4F:C7:44:64:A2:AB:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TNR7i4qp-8zP89UHgU_HRGSiq_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/5ca294-897b-4e49-a9c7-bc48b41f498b/1/TNR7i4qp-8zP89UHgU_HRGSiq_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/5ca294-897b-4e49-a9c7-bc48b41f498b/1/TNR7i4qp-8zP89UHgU_HRGSiq_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:d6:22:e0:91:63:6a:cc:5e:78:90:75:fd:2d:ec:8e:43:12:
2a:be:a3:5b:c9:19:5e:4f:6b:41:50:db:13:46:0d:8c:f5:a6:
68:1a:8d:c4:74:83:22:c2:2f:6e:9e:2f:5c:d8:b1:72:22:7f:
60:24:f2:78:e1:7b:fa:f0:e0:d0:71:ff:c5:cb:21:55:47:28:
18:40:6b:86:4a:c5:cf:d6:94:2a:4c:35:d3:f0:3f:49:e0:6c:
f5:88:be:9b:66:2f:a1:b0:f8:7e:3f:09:31:74:08:d3:1f:f2:
18:78:9a:cc:0a:41:09:52:f8:54:9a:e5:89:5a:0e:cb:8b:83:
82:d9:ed:af:80:63:1a:63:46:9b:58:d7:8e:bd:78:85:e2:45:
f1:b0:86:18:ee:56:ca:f3:f3:df:19:ca:b7:26:de:da:90:66:
22:f9:e9:e1:6b:4c:d9:5b:9e:83:1e:0a:51:8a:17:15:4c:76:
b8:3d:69:c5:58:19:d6:a6:c7:6b:81:b8:ec:12:43:e4:2a:2b:
8e:a1:af:36:7f:54:c2:e5:63:6f:75:f6:cf:7f:61:a6:a2:44:
6f:fa:20:2e:ea:e9:86:3a:98:d6:2b:21:61:fe:aa:85:2b:b3:
6a:82:40:90:80:cd:b4:35:92:00:5f:95:e5:95:fe:93:28:3f:
2e:49:7c:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:09:25 2025 by rpki-client