Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/TnRhR3tZt7wJBvbOYGULs60t7lc.mft
File: TnRhR3tZt7wJBvbOYGULs60t7lc.mft (raw, json)
Hash identifier: hk8kg7SMiaUttRD2iaS4WXTmBHeSbjeKvhOoU91Qw8o=
Subject key identifier: 9A:AB:B9:22:63:0B:D3:CC:3A:6D:51:06:79:6D:C5:41:AC:84:35:8F
Authority key identifier: 4E:74:61:47:7B:59:B7:BC:09:06:F6:CE:60:65:0B:B3:AD:2D:EE:57
Certificate issuer: /CN=4e7461477b59b7bc0906f6ce60650bb3ad2dee57
Certificate serial: 019892C96DBB70056E814DBED8EA7B2A6DB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TnRhR3tZt7wJBvbOYGULs60t7lc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/TnRhR3tZt7wJBvbOYGULs60t7lc.mft
Manifest number: 067C
Signing time: Sun 10 Aug 2025 07:02:10 +0000
Manifest this update: Sun 10 Aug 2025 07:02:10 +0000
Manifest next update: Mon 11 Aug 2025 07:02:10 +0000
Files and hashes: 1: 1-deSD0Zx7mZFaKLgvp5MfNNL6B0.roa (hash: 0HLnR/UxvmJgyKOOTOBI/jNtxozr1BfrerbK66hTjvg=)
2: TnRhR3tZt7wJBvbOYGULs60t7lc.crl (hash: a4bpKJqxIkGwukZwJzY/anRwZ4AdBkmy3IEDJoZaL8Q=)
3: ztG3iRtcx4pgmD82wNPmhKWPj8w.roa (hash: 7wVFIe2H/2PMSyJC9QSggcK+C7T3Sk0wvSIjn0Idsps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/TnRhR3tZt7wJBvbOYGULs60t7lc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/TnRhR3tZt7wJBvbOYGULs60t7lc.mft
rsync://rpki.ripe.net/repository/DEFAULT/TnRhR3tZt7wJBvbOYGULs60t7lc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 07:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:92:c9:6d:bb:70:05:6e:81:4d:be:d8:ea:7b:2a:6d:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e7461477b59b7bc0906f6ce60650bb3ad2dee57
Validity
Not Before: Aug 10 07:02:10 2025 GMT
Not After : Aug 11 07:02:10 2025 GMT
Subject: CN=9aabb922630bd3cc3a6d5106796dc541ac84358f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:52:1b:a1:48:18:de:71:11:4b:b0:05:96:ae:
62:32:1f:1b:46:0a:e9:f3:cb:ed:8b:0f:a3:18:10:
ef:a4:f2:bf:83:d2:25:61:04:39:7c:79:89:f1:f6:
7e:fd:1e:1b:0e:03:c4:93:e6:77:46:14:37:9b:1d:
26:7f:80:4e:61:f3:98:51:21:a9:f6:e6:2a:14:06:
5c:3c:68:27:c0:d0:2f:12:b3:ca:af:6e:a8:d8:d9:
42:a1:0b:2b:b4:58:e8:8a:fa:0d:63:b1:9d:56:cc:
fc:7e:de:a4:f4:d0:44:31:99:3b:a9:91:4f:80:95:
8f:68:f8:ab:47:55:6c:51:85:d3:67:dc:5f:03:68:
a1:44:d6:14:77:77:dd:da:94:59:93:7b:8b:6b:78:
6c:ae:6a:46:a6:2b:82:01:d6:af:37:9c:e1:4f:4a:
68:eb:83:b8:28:81:76:ee:a9:7c:e7:84:c8:49:9f:
20:1d:0c:9c:76:ac:fa:67:ff:43:de:24:ec:c2:71:
22:c3:c9:e7:d5:41:b9:16:cc:a2:5b:f7:f4:e1:47:
c9:43:83:e0:8a:95:8e:ef:4a:ad:5d:84:96:ec:0e:
9b:60:c1:68:78:43:95:77:ed:f8:64:57:15:e3:17:
19:7c:38:81:27:17:12:0d:57:1f:38:70:2a:44:df:
42:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:AB:B9:22:63:0B:D3:CC:3A:6D:51:06:79:6D:C5:41:AC:84:35:8F
X509v3 Authority Key Identifier:
keyid:4E:74:61:47:7B:59:B7:BC:09:06:F6:CE:60:65:0B:B3:AD:2D:EE:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TnRhR3tZt7wJBvbOYGULs60t7lc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/TnRhR3tZt7wJBvbOYGULs60t7lc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/TnRhR3tZt7wJBvbOYGULs60t7lc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:94:e8:51:fc:2a:8c:bf:79:dc:a6:20:0a:78:e5:4f:31:b6:
55:29:0e:8d:0d:38:ca:2f:d4:bd:b4:00:68:46:bc:83:35:63:
cd:f1:52:ec:ca:f3:c5:53:24:b8:39:eb:6c:19:8c:73:76:f7:
21:d9:76:87:37:f5:4d:01:10:bc:ee:82:2d:e9:2b:6e:02:a9:
53:48:c8:99:13:59:2c:17:a1:5b:0a:19:41:16:9d:7f:a9:e7:
b9:61:69:a9:76:c5:7b:0b:2d:c8:f7:4c:11:03:33:4a:3b:b1:
af:db:61:f7:94:04:a4:ee:23:34:86:39:4b:93:b4:10:81:88:
80:ed:df:6c:13:25:66:da:3b:7d:95:5b:b8:61:a6:df:97:ad:
d0:ff:22:37:48:36:7f:ba:f1:e1:95:d4:54:7c:54:f2:63:be:
1e:25:4e:c3:13:d5:4c:8b:a5:a0:db:fd:0d:b4:81:e3:3a:10:
4a:7d:c7:1e:26:5e:75:e5:21:cd:24:ce:07:fc:2c:57:58:49:
4b:31:33:e3:0f:55:3e:b6:4c:d0:60:10:02:79:91:66:bc:f3:
74:17:1f:98:51:c2:38:94:3b:45:f8:e5:3b:59:e7:f2:e1:4a:
65:96:0a:e2:88:ac:2b:8a:7c:21:1b:6f:7d:fa:99:4f:e0:4d:
52:2d:81:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 15:56:52 2025 by rpki-client