Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/4f943f-d16a-48da-b93a-1487c6020c46/1/Tj_pDw-taiXUa9fDNbki2gMbLHg.mft
File: Tj_pDw-taiXUa9fDNbki2gMbLHg.mft (raw, json)
Hash identifier: M/u7gEx5bGTMwRYZuFU5ZMnzNQJu1vo7w6triS2EdqY=
Subject key identifier: 63:D3:EE:BF:93:EE:F0:64:0D:A0:31:53:E0:49:26:75:3A:C0:07:A8
Authority key identifier: 4E:3F:E9:0F:0F:AD:6A:25:D4:6B:D7:C3:35:B9:22:DA:03:1B:2C:78
Certificate issuer: /CN=4e3fe90f0fad6a25d46bd7c335b922da031b2c78
Certificate serial: 019847ADC49365EF8F1EE6D1F229B32C91CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tj_pDw-taiXUa9fDNbki2gMbLHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/4f943f-d16a-48da-b93a-1487c6020c46/1/Tj_pDw-taiXUa9fDNbki2gMbLHg.mft
Manifest number: 0AA8
Signing time: Sat 26 Jul 2025 17:00:27 +0000
Manifest this update: Sat 26 Jul 2025 17:00:27 +0000
Manifest next update: Sun 27 Jul 2025 17:00:27 +0000
Files and hashes: 1: A8YDmTBK0K140SrVGjKT4rgJaBs.roa (hash: dZ2I5la+5OGaL56JsGr6ibfQkik4DvtIbwTHLacKDFU=)
2: Tj_pDw-taiXUa9fDNbki2gMbLHg.crl (hash: BNbPiF+6t2UinTwXzlC4xV0LvwfaCuptzUA7dwzHlEY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/4f943f-d16a-48da-b93a-1487c6020c46/1/Tj_pDw-taiXUa9fDNbki2gMbLHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/4f943f-d16a-48da-b93a-1487c6020c46/1/Tj_pDw-taiXUa9fDNbki2gMbLHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tj_pDw-taiXUa9fDNbki2gMbLHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:ad:c4:93:65:ef:8f:1e:e6:d1:f2:29:b3:2c:91:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e3fe90f0fad6a25d46bd7c335b922da031b2c78
Validity
Not Before: Jul 26 17:00:27 2025 GMT
Not After : Jul 27 17:00:27 2025 GMT
Subject: CN=63d3eebf93eef0640da03153e04926753ac007a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:cb:93:82:c4:ed:77:73:8f:73:22:7a:d4:e3:
05:13:e5:44:39:e1:e5:55:48:9c:dc:df:66:6e:58:
dd:51:bf:a6:f4:00:8d:7b:c5:f1:62:40:56:38:96:
ee:93:ad:86:b4:20:62:09:aa:04:2f:72:79:1a:33:
0e:e3:e4:82:f1:59:6d:2d:72:b8:53:e0:9f:a2:7f:
d4:05:49:9f:44:0a:6a:e3:6c:bd:34:46:65:1c:65:
e8:00:15:44:ff:0d:f1:47:16:89:b2:12:ce:6a:34:
b4:bd:2d:30:7c:f8:a3:53:46:d7:88:7f:c4:68:24:
2e:ac:89:63:40:86:de:20:bf:ea:56:48:a3:c9:c9:
17:5f:95:5e:58:ae:62:01:32:9b:b7:8e:83:86:5a:
a1:0c:28:31:ab:f2:82:61:ec:65:d0:ab:d0:9f:97:
15:a4:91:e8:ae:7c:5c:ff:45:d9:60:4d:5d:0f:12:
dd:7d:f1:2c:9e:29:29:d5:b6:d9:ed:4c:d4:ed:cf:
d6:d2:63:2a:3c:ce:aa:ac:2f:ce:cc:6c:3e:ca:bf:
55:0b:d0:ac:49:f6:ec:1a:d9:a4:a8:51:a2:06:16:
03:49:fd:5e:2c:d8:06:63:91:69:61:4a:d5:41:77:
64:e6:dd:fd:7c:74:57:df:ae:3a:f4:f0:06:4c:7b:
0f:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:D3:EE:BF:93:EE:F0:64:0D:A0:31:53:E0:49:26:75:3A:C0:07:A8
X509v3 Authority Key Identifier:
keyid:4E:3F:E9:0F:0F:AD:6A:25:D4:6B:D7:C3:35:B9:22:DA:03:1B:2C:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tj_pDw-taiXUa9fDNbki2gMbLHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4f943f-d16a-48da-b93a-1487c6020c46/1/Tj_pDw-taiXUa9fDNbki2gMbLHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4f943f-d16a-48da-b93a-1487c6020c46/1/Tj_pDw-taiXUa9fDNbki2gMbLHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:45:1c:4d:70:74:5e:f7:e8:fc:0f:4b:d2:32:33:dc:83:2a:
8a:82:12:23:91:dd:b1:7b:09:bf:f4:d5:68:f5:bb:fb:51:4b:
8a:ed:51:5e:ab:73:5a:e7:17:36:bc:12:96:98:65:d4:3d:0e:
22:42:d5:ac:15:7d:d0:5b:3d:d2:3c:8f:70:8f:a2:9c:79:f2:
04:c8:69:74:ea:68:2f:2f:d0:76:2d:2d:be:1c:92:40:08:a2:
49:bc:67:a8:a2:39:52:eb:95:07:65:f1:36:25:a3:1f:16:b6:
c8:24:07:d3:3e:08:e6:89:54:38:a8:c7:58:00:84:c8:75:80:
da:9d:74:81:38:4b:54:d3:0b:1a:9f:1c:97:79:a5:ba:ea:46:
0a:dd:d1:30:95:ca:2f:37:d6:fd:54:c8:36:99:83:2f:88:00:
c8:19:65:19:70:5e:f1:7c:91:09:e1:8a:5f:a8:3e:9b:1d:86:
5a:0e:6a:61:55:9a:2a:8c:55:6c:25:91:2f:36:57:98:7e:59:
aa:c1:1a:95:0f:86:b5:dc:8c:17:8a:32:1c:1c:ee:3b:ba:9a:
54:12:ee:9a:0a:07:1b:fb:fe:0c:e7:86:d3:41:ef:c4:72:62:
b3:36:75:67:a7:c3:bb:13:2a:63:3f:5e:60:12:b2:26:82:eb:
fb:48:7b:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:24:45 2025 by rpki-client