Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/6eeb5c-d251-470a-a7cd-318362004e8a/1/Tm32g40DOAFB635O5V3AXYcGHck.mft
File: Tm32g40DOAFB635O5V3AXYcGHck.mft (raw, json)
Hash identifier: o5bi5t8alld9Xsc0R0aLJK5fQBJz0DlSB+ItdceTM84=
Subject key identifier: 56:77:D4:0D:ED:7C:A0:74:2A:B4:31:83:9A:A2:ED:79:0E:BE:55:40
Authority key identifier: 4E:6D:F6:83:8D:03:38:01:41:EB:7E:4E:E5:5D:C0:5D:87:06:1D:C9
Certificate issuer: /CN=4e6df6838d03380141eb7e4ee55dc05d87061dc9
Certificate serial: 01984A0A44D66B42ACFF4F120586E408DF52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tm32g40DOAFB635O5V3AXYcGHck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/6eeb5c-d251-470a-a7cd-318362004e8a/1/Tm32g40DOAFB635O5V3AXYcGHck.mft
Manifest number: 104F
Signing time: Sun 27 Jul 2025 04:00:43 +0000
Manifest this update: Sun 27 Jul 2025 04:00:43 +0000
Manifest next update: Mon 28 Jul 2025 04:00:43 +0000
Files and hashes: 1: 6zGLvq4k5vmzCBWK5uxpgKx-SpM.roa (hash: d72RjXOy3TrPnzNgu1Y/cwJXn9F8xvKoAfaZ+LW3oR4=)
2: Tm32g40DOAFB635O5V3AXYcGHck.crl (hash: 6ohwp+NQqWE0PI3WN4l6MiQJxflCSuuFAXAY4WdAopw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/6eeb5c-d251-470a-a7cd-318362004e8a/1/Tm32g40DOAFB635O5V3AXYcGHck.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/6eeb5c-d251-470a-a7cd-318362004e8a/1/Tm32g40DOAFB635O5V3AXYcGHck.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tm32g40DOAFB635O5V3AXYcGHck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 04:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:0a:44:d6:6b:42:ac:ff:4f:12:05:86:e4:08:df:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e6df6838d03380141eb7e4ee55dc05d87061dc9
Validity
Not Before: Jul 27 04:00:43 2025 GMT
Not After : Jul 28 04:00:43 2025 GMT
Subject: CN=5677d40ded7ca0742ab431839aa2ed790ebe5540
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:67:82:fc:67:99:1f:a0:5b:73:b4:a4:c5:1c:
9b:0e:ae:b8:28:a7:4a:98:c7:20:ea:24:85:49:bb:
7a:07:f5:5b:09:a6:17:37:c6:83:fc:ad:e8:6c:84:
cb:45:55:b3:5a:94:21:5b:ef:16:62:f3:89:b0:d7:
f0:7f:0a:83:e8:ea:fa:a7:d2:76:fb:9d:dd:b8:b8:
83:9b:71:be:64:67:a0:5f:ac:e7:77:f9:ed:d4:27:
1d:2e:2c:48:8b:7d:7c:ae:f1:2e:84:83:99:55:52:
a9:03:9f:64:8a:08:59:66:9a:dd:76:3f:b7:4b:43:
40:a8:8a:32:bd:93:c7:15:9e:fd:81:68:83:5b:2c:
29:77:e9:da:8d:ed:fc:11:b8:25:60:24:f8:5f:5e:
53:9d:ca:b3:59:39:dc:fd:4e:86:25:fb:a1:a3:28:
4e:65:6d:9a:d6:60:e2:5d:55:99:68:25:ce:40:2f:
d3:39:4a:82:4d:24:12:af:71:4a:0a:98:d5:6b:03:
98:83:13:2a:bb:d0:e2:2a:c9:ee:92:cc:e1:8b:03:
ed:79:e1:0a:9a:15:9d:1e:45:a4:14:76:84:97:4e:
e8:21:0b:22:c3:2f:34:76:db:62:f1:73:5c:97:5d:
83:9e:f6:2c:9c:d5:e6:1f:a7:d1:4e:ff:b3:20:a4:
b1:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:77:D4:0D:ED:7C:A0:74:2A:B4:31:83:9A:A2:ED:79:0E:BE:55:40
X509v3 Authority Key Identifier:
keyid:4E:6D:F6:83:8D:03:38:01:41:EB:7E:4E:E5:5D:C0:5D:87:06:1D:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tm32g40DOAFB635O5V3AXYcGHck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/6eeb5c-d251-470a-a7cd-318362004e8a/1/Tm32g40DOAFB635O5V3AXYcGHck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/6eeb5c-d251-470a-a7cd-318362004e8a/1/Tm32g40DOAFB635O5V3AXYcGHck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:57:1c:8e:21:45:cf:b4:f5:91:78:0d:13:de:3b:0c:0d:41:
1d:99:16:ad:97:5a:5d:44:5c:aa:7d:9f:05:89:5a:c5:f8:0d:
d6:8f:1a:73:fd:3e:ea:32:3e:4c:73:81:91:61:40:57:fb:a6:
2b:00:5c:d2:0b:35:8e:8b:54:40:74:8b:fa:63:17:6e:74:ad:
9c:65:b4:03:96:7e:4b:1e:4c:7e:8d:17:03:cf:5c:70:8b:cb:
15:b6:dd:87:0e:40:d7:93:17:67:fe:6f:0b:cb:ec:38:d8:f2:
fe:be:0b:6b:7c:b6:be:b3:f2:cc:d6:eb:d4:f5:2e:96:22:d1:
10:85:c5:7a:59:1c:0b:20:45:ed:00:ce:13:50:e0:06:76:7d:
bb:0d:ca:1e:09:5d:ea:61:13:2d:55:68:0c:cf:ad:f8:04:59:
08:37:2b:f3:ed:90:76:d3:6b:51:d0:bb:9d:81:d6:a1:0b:3a:
b9:2e:61:11:c4:4e:64:f8:fe:3e:14:6c:a1:39:fc:f3:bf:b7:
31:ba:81:ac:c9:de:09:e9:d1:1a:ed:9c:fe:29:64:d0:b8:b7:
50:3b:5c:77:dd:9c:2e:19:6a:19:f1:02:5d:61:19:0b:42:85:
c9:c9:40:11:87:e7:5c:ec:24:b2:21:a5:7d:f5:4a:b8:f4:7b:
ac:60:dc:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:22:05 2025 by rpki-client