Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/36eb32-95fa-42f3-8fdf-ab9533772339/1/TRCb5Q1A4ys9UW_B63LqsyxeC84.mft
File: TRCb5Q1A4ys9UW_B63LqsyxeC84.mft (raw, json)
Hash identifier: 0wqHYFHKqTZVTvgcErxkqB9GfhBWdC8KoMTNOjz1FUs=
Subject key identifier: A1:36:B4:16:F1:44:6A:F5:28:03:41:AD:CD:1B:CF:FD:FA:D9:F8:09
Authority key identifier: 4D:10:9B:E5:0D:40:E3:2B:3D:51:6F:C1:EB:72:EA:B3:2C:5E:0B:CE
Certificate issuer: /CN=4d109be50d40e32b3d516fc1eb72eab32c5e0bce
Certificate serial: 019896DCA84E09473173F21651BB2E9B7273
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TRCb5Q1A4ys9UW_B63LqsyxeC84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/36eb32-95fa-42f3-8fdf-ab9533772339/1/TRCb5Q1A4ys9UW_B63LqsyxeC84.mft
Manifest number: 011E
Signing time: Mon 11 Aug 2025 02:01:39 +0000
Manifest this update: Mon 11 Aug 2025 02:01:39 +0000
Manifest next update: Tue 12 Aug 2025 02:01:39 +0000
Files and hashes: 1: TRCb5Q1A4ys9UW_B63LqsyxeC84.crl (hash: r+cNjQ/t6taYEXE/evlj+i/Ulejs69DIUM9UOmm3hc0=)
2: _ysqE-Sv0fTgw_gy8qUtBvX43Zw.roa (hash: XDdFm9ijjrDqLsWMBsXWF0Txzhfv7gyIMnkn7RG7zb4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/36eb32-95fa-42f3-8fdf-ab9533772339/1/TRCb5Q1A4ys9UW_B63LqsyxeC84.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/36eb32-95fa-42f3-8fdf-ab9533772339/1/TRCb5Q1A4ys9UW_B63LqsyxeC84.mft
rsync://rpki.ripe.net/repository/DEFAULT/TRCb5Q1A4ys9UW_B63LqsyxeC84.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:dc:a8:4e:09:47:31:73:f2:16:51:bb:2e:9b:72:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d109be50d40e32b3d516fc1eb72eab32c5e0bce
Validity
Not Before: Aug 11 02:01:39 2025 GMT
Not After : Aug 12 02:01:39 2025 GMT
Subject: CN=a136b416f1446af5280341adcd1bcffdfad9f809
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:70:82:1a:78:4e:b6:52:09:e2:c8:c7:28:9d:
12:ae:6d:98:40:64:74:33:79:d0:af:ab:47:c1:37:
50:60:47:f6:e5:66:8b:c7:4f:5c:d6:34:c7:09:3b:
5a:7e:2d:6c:a9:a2:da:47:62:2f:02:f5:34:b4:f8:
c7:40:5b:8c:aa:89:1d:3d:9e:ee:55:94:b5:c7:4c:
41:81:dd:2b:7f:2d:cb:c8:cb:2a:18:60:55:6d:9b:
2e:c4:be:28:c0:7b:70:06:e0:f1:83:bf:b7:58:45:
8e:7e:29:ab:55:8a:58:00:5a:d2:8b:a6:0d:b2:b6:
9a:35:6a:f7:fa:4c:03:8e:81:68:90:8e:31:a7:bd:
64:fb:7f:cd:b3:11:e6:33:2a:a2:0f:85:dc:c6:17:
1b:e1:bc:91:2c:8a:dc:2b:92:c1:85:01:71:76:d9:
48:fd:86:59:9f:82:70:5b:62:37:9c:b6:e2:56:db:
5e:d4:b3:6e:1e:af:63:6f:ed:04:27:6a:3c:f4:46:
38:d1:08:a5:76:9a:fe:83:7f:96:fd:ed:15:96:e5:
13:b3:19:9c:28:c8:3d:69:cb:95:0b:a1:a7:3e:ca:
f4:e8:93:1b:5b:f5:24:a2:c8:4d:e3:69:c7:ef:96:
2b:b4:87:d4:c2:9a:52:58:15:dc:f8:c4:af:ab:a7:
30:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:36:B4:16:F1:44:6A:F5:28:03:41:AD:CD:1B:CF:FD:FA:D9:F8:09
X509v3 Authority Key Identifier:
keyid:4D:10:9B:E5:0D:40:E3:2B:3D:51:6F:C1:EB:72:EA:B3:2C:5E:0B:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TRCb5Q1A4ys9UW_B63LqsyxeC84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/36eb32-95fa-42f3-8fdf-ab9533772339/1/TRCb5Q1A4ys9UW_B63LqsyxeC84.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/36eb32-95fa-42f3-8fdf-ab9533772339/1/TRCb5Q1A4ys9UW_B63LqsyxeC84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:20:65:a4:1f:74:c6:ad:92:7d:3b:47:bb:83:15:06:bd:b0:
4b:e5:7c:af:22:0b:ea:56:69:4e:cd:ff:c9:66:03:af:c1:c3:
05:2a:79:c2:f6:25:c9:34:0d:6d:16:d8:88:6b:51:e5:e0:3f:
ce:21:2f:47:cb:44:62:01:b2:45:85:1a:60:72:a9:84:96:1f:
f1:20:97:9c:e5:a0:a6:9e:1b:08:53:f7:1c:d9:89:60:64:49:
e4:be:51:8d:71:f6:6b:0c:c9:b4:56:85:54:d3:55:c4:8e:ee:
f6:12:1b:b2:5a:16:55:ff:3a:96:c8:88:3f:19:bc:8c:26:47:
c3:53:60:a6:e8:35:81:86:f7:cb:60:1e:68:95:14:7d:c2:23:
e9:2d:eb:57:ea:17:c4:71:22:da:06:72:f2:9e:98:54:8c:bc:
90:f3:9b:8e:74:cf:35:0c:b5:ad:1e:eb:f5:06:e4:e3:da:8d:
93:f1:69:59:4b:c5:64:77:df:70:57:d5:03:60:ba:99:3f:2a:
9f:cb:d0:4b:5e:9d:84:88:a4:50:b9:f0:33:da:6e:2f:bf:d2:
08:e0:60:e1:93:8d:dd:2c:95:c5:df:3f:82:35:e9:46:68:f3:
09:22:e4:32:d2:67:76:27:43:8e:78:dd:8e:83:fb:ac:5c:93:
88:0f:b8:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:09:07 2025 by rpki-client