Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/dbc472-6e0a-411c-af8f-0888eb42744c/1/TGr5hrJB2dJ-xySt-r8G1dIxeT8.mft
File: TGr5hrJB2dJ-xySt-r8G1dIxeT8.mft (raw, json)
Hash identifier: QV0wuKWGwSlFOG97xuc0FAfuvTkJ8Vu9nR2xOun9VC8=
Subject key identifier: AF:02:2E:26:1A:3F:AB:A2:B9:A0:08:FC:C7:8D:F8:C4:4A:82:E4:66
Authority key identifier: 4C:6A:F9:86:B2:41:D9:D2:7E:C7:24:AD:FA:BF:06:D5:D2:31:79:3F
Certificate issuer: /CN=4c6af986b241d9d27ec724adfabf06d5d231793f
Certificate serial: 0198733D7D5F680A18ACFEB73D70BCCD4A60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TGr5hrJB2dJ-xySt-r8G1dIxeT8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/dbc472-6e0a-411c-af8f-0888eb42744c/1/TGr5hrJB2dJ-xySt-r8G1dIxeT8.mft
Manifest number: 12CA
Signing time: Mon 04 Aug 2025 04:01:06 +0000
Manifest this update: Mon 04 Aug 2025 04:01:06 +0000
Manifest next update: Tue 05 Aug 2025 04:01:06 +0000
Files and hashes: 1: 7mVZwCskyJUQ7gPBL_F_4nbKWrk.roa (hash: Spe2b/mS1SAvEHCJH7XwFJrcW3b1Bvz1bY1SvDC0yz8=)
2: TGr5hrJB2dJ-xySt-r8G1dIxeT8.crl (hash: vMXT/vf3E/0CBkHG5MGuFTM5pX1+vf1flDLwZDItcGQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/dbc472-6e0a-411c-af8f-0888eb42744c/1/TGr5hrJB2dJ-xySt-r8G1dIxeT8.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/dbc472-6e0a-411c-af8f-0888eb42744c/1/TGr5hrJB2dJ-xySt-r8G1dIxeT8.mft
rsync://rpki.ripe.net/repository/DEFAULT/TGr5hrJB2dJ-xySt-r8G1dIxeT8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:7d:5f:68:0a:18:ac:fe:b7:3d:70:bc:cd:4a:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c6af986b241d9d27ec724adfabf06d5d231793f
Validity
Not Before: Aug 4 04:01:06 2025 GMT
Not After : Aug 5 04:01:06 2025 GMT
Subject: CN=af022e261a3faba2b9a008fcc78df8c44a82e466
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e9:bf:af:b5:2a:bd:8c:66:bd:a4:21:ea:0f:
6d:9b:73:28:8f:59:6c:2b:d1:ff:4b:97:65:60:df:
22:07:8a:30:9d:75:a9:9f:98:5b:4e:b8:e1:8b:ce:
3a:b3:6d:29:aa:36:00:ed:26:dd:91:6d:28:e5:a8:
1d:c0:15:4f:b0:c9:8d:6a:d0:42:66:f3:89:83:98:
27:a9:fd:da:a2:64:69:54:f4:db:e6:6e:84:3a:f8:
17:58:41:d7:1f:4f:ca:62:7e:a2:3e:85:24:73:cd:
a2:57:a3:3e:73:47:7e:36:b7:72:1c:7e:77:a1:fa:
ae:a6:3f:6d:06:df:00:62:7c:06:3a:3e:23:4d:ae:
94:4a:9d:be:6e:c3:7d:4a:96:98:6f:75:d9:dd:cd:
77:7c:20:1e:0d:f3:0b:41:33:ec:ea:bb:99:42:5d:
d1:dd:dc:08:1a:70:b4:27:38:78:0c:b4:fc:b5:e3:
43:66:a9:e5:54:db:02:4b:59:cf:9a:04:10:35:82:
17:a1:d2:05:16:71:60:1f:93:19:45:0d:32:b0:0a:
53:f4:0a:39:57:cf:d4:06:9e:1c:86:db:57:92:ad:
38:f9:c5:cd:c3:c4:ad:9b:ea:f1:d9:59:90:b7:b6:
d6:f4:c5:91:a5:5d:34:81:07:5b:24:de:b3:66:af:
0b:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:02:2E:26:1A:3F:AB:A2:B9:A0:08:FC:C7:8D:F8:C4:4A:82:E4:66
X509v3 Authority Key Identifier:
keyid:4C:6A:F9:86:B2:41:D9:D2:7E:C7:24:AD:FA:BF:06:D5:D2:31:79:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TGr5hrJB2dJ-xySt-r8G1dIxeT8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/dbc472-6e0a-411c-af8f-0888eb42744c/1/TGr5hrJB2dJ-xySt-r8G1dIxeT8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/dbc472-6e0a-411c-af8f-0888eb42744c/1/TGr5hrJB2dJ-xySt-r8G1dIxeT8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:8c:25:ef:8a:a7:72:69:d7:5f:cc:36:82:f1:61:5b:12:d2:
c7:4e:ef:05:83:20:80:05:44:f6:3b:8d:b3:44:5c:60:da:8a:
b7:be:0b:9e:a4:2d:a3:08:a2:2d:70:d8:df:23:91:c9:e3:87:
d5:6e:8a:7b:c0:45:ed:57:ee:be:95:1b:56:a0:ac:47:e2:b8:
a7:6c:7e:20:2b:9d:e6:70:36:e8:8a:2e:86:21:4b:1c:b9:78:
90:4b:73:df:dd:8e:c7:20:55:0c:5e:c5:42:2b:10:5c:f8:27:
56:df:ba:9d:0c:17:fa:2f:13:d2:d8:b3:83:2f:8f:ee:43:47:
99:dc:27:fb:88:b7:e3:5b:72:5b:04:20:c2:6b:e0:2a:02:ca:
49:43:66:e5:8d:30:32:6c:c7:83:33:ca:00:3f:3c:44:f3:8c:
89:04:44:39:92:8a:52:73:76:22:bf:00:2a:5d:d0:c8:25:f2:
38:94:86:a5:ab:0e:e7:91:00:38:44:80:b9:8c:49:f3:b4:2a:
fa:f8:6a:2b:f3:d3:d9:c3:71:69:c6:94:f4:2c:0a:d9:4a:f7:
e3:f7:f7:04:7a:64:61:28:c5:76:76:4b:2b:42:1f:d7:d3:a2:
9a:df:df:32:62:5b:39:c6:ac:95:ab:9c:5e:1f:35:c2:a7:75:
3b:d5:40:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:15:39 2025 by rpki-client