Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/59dcbd-78bf-48ed-954d-ccaa6eb3c513/1/TBAf9Rtn7v4NZ4AOdtNgbfTJRyE.mft
File: TBAf9Rtn7v4NZ4AOdtNgbfTJRyE.mft (raw, json)
Hash identifier: RXWtCinten8XMii2RJxK32ST6Nea3MCpXCZWIkJB7CE=
Subject key identifier: DC:89:0F:83:E5:9D:9B:CB:C6:93:84:81:B4:E5:50:01:E3:80:6B:5A
Authority key identifier: 4C:10:1F:F5:1B:67:EE:FE:0D:67:80:0E:76:D3:60:6D:F4:C9:47:21
Certificate issuer: /CN=4c101ff51b67eefe0d67800e76d3606df4c94721
Certificate serial: 01989ECCB6C36506E79D4389A0AFCE8062FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TBAf9Rtn7v4NZ4AOdtNgbfTJRyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/59dcbd-78bf-48ed-954d-ccaa6eb3c513/1/TBAf9Rtn7v4NZ4AOdtNgbfTJRyE.mft
Manifest number: 059E
Signing time: Tue 12 Aug 2025 15:01:12 +0000
Manifest this update: Tue 12 Aug 2025 15:01:12 +0000
Manifest next update: Wed 13 Aug 2025 15:01:12 +0000
Files and hashes: 1: TBAf9Rtn7v4NZ4AOdtNgbfTJRyE.crl (hash: ljixh5bV/pztrFaLKF9vgAzz9FOiTTk8wjp5DJKeCHg=)
2: cri3ULh6Rj8r6ZDUmdSIkYBmP1o.roa (hash: Lisc7jMorS/4tIMBDxqrdkl7lwX530FUMpT0ozDszqE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/59dcbd-78bf-48ed-954d-ccaa6eb3c513/1/TBAf9Rtn7v4NZ4AOdtNgbfTJRyE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/59dcbd-78bf-48ed-954d-ccaa6eb3c513/1/TBAf9Rtn7v4NZ4AOdtNgbfTJRyE.mft
rsync://rpki.ripe.net/repository/DEFAULT/TBAf9Rtn7v4NZ4AOdtNgbfTJRyE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 13:24:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9e:cc:b6:c3:65:06:e7:9d:43:89:a0:af:ce:80:62:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c101ff51b67eefe0d67800e76d3606df4c94721
Validity
Not Before: Aug 12 15:01:12 2025 GMT
Not After : Aug 13 15:01:12 2025 GMT
Subject: CN=dc890f83e59d9bcbc6938481b4e55001e3806b5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:12:4b:15:7b:a7:e6:cb:4d:5d:9e:e6:b5:7a:
5b:c9:27:3e:f9:b8:e5:21:64:c2:57:3d:de:aa:f6:
79:52:9a:36:50:f9:79:bf:ae:1e:83:52:a7:5c:54:
45:46:e6:49:30:50:2d:5c:4a:5c:ce:f3:e5:ab:52:
a1:db:84:4a:66:cd:3d:2d:b1:6e:6f:0a:d5:1f:a7:
a2:5e:08:59:df:b5:62:54:ba:f9:08:fd:d8:5e:55:
77:61:10:25:de:25:a1:8d:d0:aa:28:f8:4e:f3:8a:
cd:61:00:07:29:bc:b6:c2:9d:01:aa:b1:af:5e:b3:
27:59:b2:ab:7d:85:13:b1:d1:d7:29:a0:b9:ad:0d:
c9:fb:6f:53:24:ad:f0:aa:d0:73:58:83:b4:a6:ca:
2e:b0:54:4f:e3:d8:d2:d1:0b:55:de:02:56:98:83:
d9:b0:b3:ba:c5:f7:f2:df:02:64:c2:25:2d:ab:12:
7c:a5:22:07:67:4c:66:38:cb:2a:84:a4:bc:44:d8:
16:d0:68:34:7f:21:92:b9:44:f3:a5:b2:f5:8a:74:
79:d4:36:ce:a6:72:e6:3f:1c:ff:4f:1b:37:a7:1e:
42:00:9a:bb:0a:8f:ce:4f:ad:26:b3:b6:d9:9c:ab:
1d:b5:08:78:6f:c1:71:4e:67:5f:0d:c2:e2:c3:31:
cc:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:89:0F:83:E5:9D:9B:CB:C6:93:84:81:B4:E5:50:01:E3:80:6B:5A
X509v3 Authority Key Identifier:
keyid:4C:10:1F:F5:1B:67:EE:FE:0D:67:80:0E:76:D3:60:6D:F4:C9:47:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TBAf9Rtn7v4NZ4AOdtNgbfTJRyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/59dcbd-78bf-48ed-954d-ccaa6eb3c513/1/TBAf9Rtn7v4NZ4AOdtNgbfTJRyE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/59dcbd-78bf-48ed-954d-ccaa6eb3c513/1/TBAf9Rtn7v4NZ4AOdtNgbfTJRyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:bd:26:e5:5c:5e:04:bd:57:4b:91:48:17:01:11:3f:d7:4a:
9d:49:16:03:d7:7d:fe:4f:cf:dc:de:14:53:6f:88:f2:02:0f:
a8:f5:6b:be:5d:c7:9e:ea:bf:d1:ab:db:13:5e:c4:53:8d:21:
79:d3:91:4f:c3:74:05:9f:f7:d8:f5:af:61:94:bf:83:41:33:
53:ae:80:69:ac:d2:26:b4:6d:fd:d9:7d:67:57:c9:f7:73:3b:
96:53:b7:94:de:cc:2a:7c:84:a9:09:ab:17:80:73:7e:12:66:
ff:2f:29:43:7e:25:49:a6:11:76:1e:cb:4a:6a:65:83:71:a4:
c7:73:1e:26:69:b8:91:51:63:a8:3a:ae:e8:43:a8:f2:a4:10:
66:0f:27:53:97:f3:b2:9c:ed:2f:87:8a:51:fb:79:54:a6:3f:
ce:6c:69:ab:01:65:c0:da:9a:37:f1:9a:68:9a:6f:f7:a8:43:
e4:72:67:e7:79:6e:0c:23:13:59:07:dd:e0:e0:aa:7d:b7:55:
67:1a:0c:04:bb:53:be:84:88:84:ae:1d:de:e4:4c:54:fa:5b:
2b:3b:ac:0e:51:34:0a:58:28:88:0f:64:93:61:89:b6:79:26:
ff:84:64:d5:34:d3:0b:6b:6c:94:d7:61:b9:65:d4:f1:10:e8:
7f:c6:04:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 18:16:05 2025 by rpki-client