Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.mft
File: TSPi7bMh4ailzp7j4tlapA8N6KA.mft (raw, json)
Hash identifier: RyS3SA+pDhh6qO7aeTQY6bQdISWRUra9ZQ1L7bMOKz8=
Subject key identifier: B3:04:FE:23:49:64:65:D7:57:6A:55:1B:F1:2B:AD:60:34:CF:3F:6E
Authority key identifier: 4D:23:E2:ED:B3:21:E1:A8:A5:CE:9E:E3:E2:D9:5A:A4:0F:0D:E8:A0
Certificate issuer: /CN=4d23e2edb321e1a8a5ce9ee3e2d95aa40f0de8a0
Certificate serial: 0198A083C11CCEC3745AFD68C12DDD22FA2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TSPi7bMh4ailzp7j4tlapA8N6KA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.mft
Manifest number: 0AE4
Signing time: Tue 12 Aug 2025 23:00:45 +0000
Manifest this update: Tue 12 Aug 2025 23:00:45 +0000
Manifest next update: Wed 13 Aug 2025 23:00:45 +0000
Files and hashes: 1: E8fqlMMExB61QIsEKMENcZNpWcs.roa (hash: BmnUAt4AevLzEKuzLNe+ibP+z5vcZguaEireBbRJdHM=)
2: TSPi7bMh4ailzp7j4tlapA8N6KA.crl (hash: hkEwtMLZcAXFcgbOUNxiW+BuhYoxvVGqN8gYkxB4oQw=)
3: gXlhbbxVLQVqCMGvhejieNdtoBY.roa (hash: 8u7C6SqKmEB/oIEa7cYGrPkrur0B3bFj0WV0Kh36+qQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.mft
rsync://rpki.ripe.net/repository/DEFAULT/TSPi7bMh4ailzp7j4tlapA8N6KA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:83:c1:1c:ce:c3:74:5a:fd:68:c1:2d:dd:22:fa:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d23e2edb321e1a8a5ce9ee3e2d95aa40f0de8a0
Validity
Not Before: Aug 12 23:00:45 2025 GMT
Not After : Aug 13 23:00:45 2025 GMT
Subject: CN=b304fe23496465d7576a551bf12bad6034cf3f6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:36:e5:bd:00:66:94:5d:7d:87:b5:99:c6:cc:
1e:3d:90:95:82:c9:22:79:05:15:92:9e:6c:92:cf:
94:41:71:79:3b:a7:69:56:71:95:ab:de:a6:f5:6a:
64:4f:fc:c7:5c:d2:a5:e5:61:12:a2:75:75:a7:d3:
cb:93:7a:7a:63:56:a1:b2:48:17:7a:dd:1e:07:2c:
75:d2:a8:c8:a4:90:43:58:e6:83:8e:1b:ac:18:5f:
c0:18:a6:a8:46:33:ae:a5:e3:51:38:52:1b:cd:f5:
cd:e5:51:b4:05:ec:a0:52:24:59:2e:ea:59:41:6a:
b2:af:94:a4:3d:11:74:b0:b1:96:72:5e:b1:f9:a1:
60:46:c3:d3:44:51:69:7c:f4:35:b5:35:f2:09:17:
6c:11:68:34:e3:50:90:0b:87:37:73:33:c0:b4:ac:
f8:e0:28:84:cd:7c:09:50:e1:c9:b6:79:fa:8b:04:
a9:79:0b:4b:65:e0:fb:3c:08:42:ae:6d:ad:c1:fc:
ee:93:fc:a0:32:b7:d7:b9:f3:74:f3:47:53:81:bf:
f7:0e:57:2d:ac:2d:64:f1:19:aa:da:66:f2:b4:2f:
44:1d:23:f7:ed:84:6c:ef:48:16:e3:f9:c2:97:55:
1a:53:ac:aa:48:a0:2f:72:0e:7a:23:ef:4a:c7:43:
1f:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:04:FE:23:49:64:65:D7:57:6A:55:1B:F1:2B:AD:60:34:CF:3F:6E
X509v3 Authority Key Identifier:
keyid:4D:23:E2:ED:B3:21:E1:A8:A5:CE:9E:E3:E2:D9:5A:A4:0F:0D:E8:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TSPi7bMh4ailzp7j4tlapA8N6KA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:54:54:10:8b:f7:46:c2:07:c0:4e:59:94:da:d0:2d:eb:f6:
76:ca:8b:25:15:d2:9d:d8:2c:a9:76:42:30:99:d2:7f:c6:35:
d7:21:5d:c0:5c:9a:85:34:69:5b:40:a7:44:aa:0e:eb:c3:5c:
59:68:ec:d3:3a:7e:8f:fa:9b:71:fe:f9:bc:cd:c8:7f:db:20:
e1:8c:b9:9c:f5:57:92:72:7e:d8:1c:d2:be:49:a1:ac:2c:71:
54:7a:49:92:04:88:11:01:62:cd:1b:73:fd:6b:65:52:47:a0:
74:66:16:97:23:7d:68:97:c9:b8:7e:aa:b7:88:1d:8d:68:2b:
dd:10:6a:e9:aa:8e:9d:80:b8:c7:0b:ca:4f:82:7f:4b:dd:56:
18:f4:96:a6:e1:8d:ab:8c:81:24:21:64:31:c0:1d:a1:5c:d2:
12:af:82:fc:2b:d8:08:fc:8b:18:f4:e1:20:3a:6f:08:44:34:
39:5c:11:0c:52:78:33:b7:c7:b3:3f:60:c6:9b:83:6f:7f:c0:
da:b5:c5:ac:62:af:73:33:46:c7:1b:d6:56:30:27:91:02:85:
b2:01:b6:47:ee:e7:16:93:7d:2b:91:4e:d7:3a:ce:81:26:c3:
85:e1:45:9e:37:92:2e:fd:ca:2a:60:76:4a:50:1b:f5:17:be:
04:a4:02:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 02:42:31 2025 by rpki-client