Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/a35f7f-2194-46d3-91bd-cc0f50bda159/1/TN1pc0k84MOEm4uRm3UCul-gE9c.mft
File: TN1pc0k84MOEm4uRm3UCul-gE9c.mft (raw, json)
Hash identifier: 10UgxHE+X43X2u/Am+GOVzSmAgONngM1gV3aRRc2nD8=
Subject key identifier: DA:73:34:EE:26:3E:5A:5A:8D:D7:12:99:3E:54:D8:E3:62:AC:24:55
Authority key identifier: 4C:DD:69:73:49:3C:E0:C3:84:9B:8B:91:9B:75:02:BA:5F:A0:13:D7
Certificate issuer: /CN=4cdd6973493ce0c3849b8b919b7502ba5fa013d7
Certificate serial: 019880F911E74E0A6DB69CC80765688AE855
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TN1pc0k84MOEm4uRm3UCul-gE9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/a35f7f-2194-46d3-91bd-cc0f50bda159/1/TN1pc0k84MOEm4uRm3UCul-gE9c.mft
Manifest number: 02A6
Signing time: Wed 06 Aug 2025 20:01:03 +0000
Manifest this update: Wed 06 Aug 2025 20:01:03 +0000
Manifest next update: Thu 07 Aug 2025 20:01:03 +0000
Files and hashes: 1: TN1pc0k84MOEm4uRm3UCul-gE9c.crl (hash: FWWXEEaYu52jb9ud4OB5XkxQ+e9NLxYRydPD7wwFmCw=)
2: iTC7AIloz6nQaL3mT_rFGYZ-wig.roa (hash: fesaTZGLmhO2WzwSQegYz6bFqw2Ey8O4XUX49y7XEFA=)
3: uAJKiTWW3Ub4f2F2pRQzTM4uTxQ.roa (hash: QYC9wZJDQP4jalSd59izpnWdNPoZL5WfK7FyvYaliJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/a35f7f-2194-46d3-91bd-cc0f50bda159/1/TN1pc0k84MOEm4uRm3UCul-gE9c.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/a35f7f-2194-46d3-91bd-cc0f50bda159/1/TN1pc0k84MOEm4uRm3UCul-gE9c.mft
rsync://rpki.ripe.net/repository/DEFAULT/TN1pc0k84MOEm4uRm3UCul-gE9c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:f9:11:e7:4e:0a:6d:b6:9c:c8:07:65:68:8a:e8:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cdd6973493ce0c3849b8b919b7502ba5fa013d7
Validity
Not Before: Aug 6 20:01:03 2025 GMT
Not After : Aug 7 20:01:03 2025 GMT
Subject: CN=da7334ee263e5a5a8dd712993e54d8e362ac2455
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f5:68:0d:df:32:24:8b:51:d9:c6:a0:4b:f0:
c2:ef:18:8f:df:98:8d:c5:d0:e0:c6:82:08:fa:6d:
f0:d5:b3:74:87:73:44:1c:fe:ce:40:a1:78:58:06:
13:0e:27:a9:61:af:31:7a:2b:a0:1e:46:a9:3a:5b:
a8:5d:f0:c9:b0:b3:f8:19:84:74:88:af:b4:a5:6a:
da:94:9c:4e:ef:da:af:21:a4:28:a1:d2:a5:85:54:
bc:c0:58:d9:b8:bf:06:b7:42:c2:65:af:59:39:9e:
d4:2e:ea:c2:5e:ed:af:a4:3a:41:a2:b6:20:d4:c3:
9d:73:ad:a9:d4:63:b6:0e:f4:53:e1:9a:ad:1a:4d:
4f:ac:e1:b6:89:ea:54:21:8e:af:a8:a0:7c:82:29:
53:a4:23:88:29:2b:2c:35:ca:0a:ec:20:b7:0a:a2:
2c:2c:8e:a0:f2:b8:82:14:37:1a:16:1b:66:fa:ec:
69:2c:4a:2a:ef:8f:8a:48:16:86:b2:31:46:7b:42:
6c:99:ff:d4:80:bc:a3:ed:7f:87:50:ac:6e:49:10:
9c:04:25:7c:f0:03:20:52:a3:d2:b6:74:ba:ec:79:
87:0a:77:93:64:4a:f9:c8:d5:d5:bd:f4:58:ca:06:
31:d7:22:aa:22:c5:51:eb:69:5b:9c:b0:6a:43:c5:
28:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:73:34:EE:26:3E:5A:5A:8D:D7:12:99:3E:54:D8:E3:62:AC:24:55
X509v3 Authority Key Identifier:
keyid:4C:DD:69:73:49:3C:E0:C3:84:9B:8B:91:9B:75:02:BA:5F:A0:13:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TN1pc0k84MOEm4uRm3UCul-gE9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a35f7f-2194-46d3-91bd-cc0f50bda159/1/TN1pc0k84MOEm4uRm3UCul-gE9c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a35f7f-2194-46d3-91bd-cc0f50bda159/1/TN1pc0k84MOEm4uRm3UCul-gE9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:41:f1:82:31:e7:4a:07:52:e1:02:b3:50:c5:4b:57:85:7c:
33:27:e7:96:ea:10:36:74:e0:50:b3:fa:3f:b5:68:14:e2:e8:
8d:ff:49:d5:50:a4:0a:16:56:6a:a1:67:96:8b:be:26:f7:0e:
0e:39:dc:b2:55:22:45:2a:37:59:a4:6c:a6:fd:a0:db:70:a8:
9d:43:1b:50:2d:5e:42:bb:a5:bb:ab:cf:ac:90:4c:c3:07:b0:
03:0c:73:1d:7b:77:1f:8c:f5:50:5e:e8:f6:6a:bd:a6:0b:61:
ca:29:cc:5d:af:9f:31:65:97:ab:c4:dc:bb:95:b7:f4:30:3b:
24:41:08:4a:35:ae:57:84:1a:a0:02:3c:2e:1f:9c:d3:02:ec:
2b:ae:d8:50:65:0c:64:cc:51:ab:6b:d8:2c:8e:7f:ab:14:b4:
8f:38:f9:2d:c4:1e:b4:13:f8:de:aa:71:f1:66:d5:e9:c6:af:
03:c9:f3:78:e9:10:27:f4:7e:e6:45:cd:d1:53:65:63:6e:33:
98:08:63:88:16:a9:78:66:09:4d:63:8d:21:06:b4:ff:96:54:
48:6b:85:db:dc:80:12:44:00:c5:e0:bb:eb:97:69:fd:eb:22:
79:de:1d:5f:59:7a:94:c2:c5:c4:45:a7:8d:cb:2f:07:9e:cf:
69:c7:35:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:25:58 2025 by rpki-client