Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/a07523-8392-47f5-82b3-30c430a398e6/1/TnKscetFB6wKZSpUWY2uRR_jP0c.mft
File: TnKscetFB6wKZSpUWY2uRR_jP0c.mft (raw, json)
Hash identifier: +1Irr5diSijCT/l9/OKU8A06GtN6XoXSb7qOZYpM/0U=
Subject key identifier: 54:4E:DA:98:B9:2D:9D:49:AD:0C:A9:EC:9F:11:A2:EC:C3:16:9A:41
Authority key identifier: 4E:72:AC:71:EB:45:07:AC:0A:65:2A:54:59:8D:AE:45:1F:E3:3F:47
Certificate issuer: /CN=4e72ac71eb4507ac0a652a54598dae451fe33f47
Certificate serial: 0198741946716DA91F0B68D07E0383A6D969
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TnKscetFB6wKZSpUWY2uRR_jP0c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/a07523-8392-47f5-82b3-30c430a398e6/1/TnKscetFB6wKZSpUWY2uRR_jP0c.mft
Manifest number: 1342
Signing time: Mon 04 Aug 2025 08:01:10 +0000
Manifest this update: Mon 04 Aug 2025 08:01:10 +0000
Manifest next update: Tue 05 Aug 2025 08:01:10 +0000
Files and hashes: 1: 4zuoqc0Glu6ApY4rQHmNAlxxavo.roa (hash: qDD4JCBpI34S2Q624/ndlMxJa6qHAv5moxaFgFJvL3I=)
2: TnKscetFB6wKZSpUWY2uRR_jP0c.crl (hash: JIWGXRondVXhCqP2c1V5bvZ8E6wdfwMrbNeoWKharn4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/a07523-8392-47f5-82b3-30c430a398e6/1/TnKscetFB6wKZSpUWY2uRR_jP0c.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/a07523-8392-47f5-82b3-30c430a398e6/1/TnKscetFB6wKZSpUWY2uRR_jP0c.mft
rsync://rpki.ripe.net/repository/DEFAULT/TnKscetFB6wKZSpUWY2uRR_jP0c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:19:46:71:6d:a9:1f:0b:68:d0:7e:03:83:a6:d9:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e72ac71eb4507ac0a652a54598dae451fe33f47
Validity
Not Before: Aug 4 08:01:10 2025 GMT
Not After : Aug 5 08:01:10 2025 GMT
Subject: CN=544eda98b92d9d49ad0ca9ec9f11a2ecc3169a41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:9a:06:01:77:e2:9d:69:8f:c3:3c:ac:74:23:
10:ce:7a:2f:69:f2:ed:a3:6b:24:c5:1b:6e:c6:ae:
1e:69:d6:bc:10:05:3c:54:c5:cd:65:6b:6f:39:cc:
78:51:d7:49:af:02:2a:f3:b6:d4:ce:a3:50:5f:c9:
a5:90:74:89:08:e2:43:01:39:fe:cb:01:11:32:6c:
c9:0a:08:54:b6:de:52:ab:84:28:5b:fd:32:78:82:
39:b6:83:1b:7c:19:92:c7:98:b6:75:5c:98:1c:31:
80:35:64:87:45:55:d5:f5:c1:34:f7:aa:4e:4b:24:
9a:e4:3b:00:94:09:85:40:73:84:20:25:21:7a:f6:
56:f8:c0:c6:3a:81:77:9a:34:fc:87:b8:64:41:a1:
78:a4:a2:3e:1f:ba:fd:ca:8f:f9:ec:0d:44:91:6d:
47:21:e9:eb:a8:dc:2a:d5:93:2a:35:91:63:e9:72:
3c:5a:5b:3e:06:f8:84:1d:2d:3c:cd:b3:0f:96:4b:
84:ce:e1:b6:50:b5:b4:45:2a:ba:83:a9:4b:36:c5:
c8:81:ac:a5:d7:87:33:20:bc:c1:25:1f:77:79:a6:
4c:1a:96:88:01:5c:eb:88:29:0e:1d:c8:e8:b8:38:
6a:62:b2:a3:f1:ce:16:13:61:77:79:be:d0:c6:28:
23:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:4E:DA:98:B9:2D:9D:49:AD:0C:A9:EC:9F:11:A2:EC:C3:16:9A:41
X509v3 Authority Key Identifier:
keyid:4E:72:AC:71:EB:45:07:AC:0A:65:2A:54:59:8D:AE:45:1F:E3:3F:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TnKscetFB6wKZSpUWY2uRR_jP0c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a07523-8392-47f5-82b3-30c430a398e6/1/TnKscetFB6wKZSpUWY2uRR_jP0c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a07523-8392-47f5-82b3-30c430a398e6/1/TnKscetFB6wKZSpUWY2uRR_jP0c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:16:9b:b1:93:74:0d:17:eb:53:fc:71:f1:9c:7a:80:6c:67:
e2:47:8a:06:57:01:a7:b5:e7:fd:38:9a:fb:88:36:fa:24:f7:
5c:67:8b:cc:b9:59:e0:2a:f5:b0:24:78:fc:96:08:17:cd:f4:
f8:b8:2a:66:ac:c4:dc:66:87:dd:92:7f:05:3e:22:28:c1:0a:
3c:b8:b8:94:78:5d:d0:52:09:d0:b4:e1:63:bf:bc:72:d8:6e:
1a:a8:b2:3e:db:d6:a6:63:bd:45:f8:93:78:3a:f0:c5:ec:31:
90:a9:bd:e7:ac:a9:e5:98:68:70:ab:b0:bb:39:d3:e0:a5:12:
9b:f6:bb:23:f2:d0:09:42:b2:f4:51:e4:86:a7:27:81:10:d8:
2f:24:8d:13:a1:9b:21:9b:ff:4f:c3:37:3f:17:4b:05:c4:99:
a5:24:e6:9d:af:77:df:8d:62:d7:00:07:5b:3a:c7:b7:8b:38:
05:5e:5f:24:cd:82:30:8c:57:c1:54:53:e4:21:f4:28:10:d1:
c8:48:47:23:1f:24:9c:02:47:69:b6:3e:36:ea:66:00:46:f1:
61:7c:d8:8a:f2:33:19:b7:e7:8b:3d:f8:14:fc:a2:af:bc:f3:
64:da:22:bb:1c:59:8b:34:53:f6:88:7c:95:7f:86:d9:4d:1d:
3b:5f:f3:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:14:16 2025 by rpki-client