Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/d9d3c9-f194-4b26-8f10-ff6a9cde6335/1/tcR4e4CrSAGrYrG9v7KOBtMM32o.mft
File: tcR4e4CrSAGrYrG9v7KOBtMM32o.mft (raw, json)
Hash identifier: QaEJbhybxK7YEkw1TTkzSfUoWajX85mp9erD/GMe33I=
Subject key identifier: 7E:8C:99:29:CC:EC:D9:11:85:A9:E1:8D:40:72:58:30:67:99:00:75
Authority key identifier: B5:C4:78:7B:80:AB:48:01:AB:62:B1:BD:BF:B2:8E:06:D3:0C:DF:6A
Certificate issuer: /CN=b5c4787b80ab4801ab62b1bdbfb28e06d30cdf6a
Certificate serial: 01984A0A6CB69642A5C0DDBE6571284BFFAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tcR4e4CrSAGrYrG9v7KOBtMM32o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/d9d3c9-f194-4b26-8f10-ff6a9cde6335/1/tcR4e4CrSAGrYrG9v7KOBtMM32o.mft
Manifest number: 045D
Signing time: Sun 27 Jul 2025 04:00:53 +0000
Manifest this update: Sun 27 Jul 2025 04:00:53 +0000
Manifest next update: Mon 28 Jul 2025 04:00:53 +0000
Files and hashes: 1: ktAbm-eMqyUysDj5Rz0ozhsQgoU.roa (hash: sOoFB/V0u6n0JOO4WrnOrE08EvrJyrBKeqUzyGdoIfI=)
2: tcR4e4CrSAGrYrG9v7KOBtMM32o.crl (hash: W5ZROJbhIcu7Bsm7SHQrOfEo7A72RgnZi6sxNt44nYg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/d9d3c9-f194-4b26-8f10-ff6a9cde6335/1/tcR4e4CrSAGrYrG9v7KOBtMM32o.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/d9d3c9-f194-4b26-8f10-ff6a9cde6335/1/tcR4e4CrSAGrYrG9v7KOBtMM32o.mft
rsync://rpki.ripe.net/repository/DEFAULT/tcR4e4CrSAGrYrG9v7KOBtMM32o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 04:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:0a:6c:b6:96:42:a5:c0:dd:be:65:71:28:4b:ff:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5c4787b80ab4801ab62b1bdbfb28e06d30cdf6a
Validity
Not Before: Jul 27 04:00:53 2025 GMT
Not After : Jul 28 04:00:53 2025 GMT
Subject: CN=7e8c9929ccecd91185a9e18d4072583067990075
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:99:21:c8:35:72:88:f6:9d:ea:55:7a:5b:1e:
eb:c7:a3:cc:28:e9:cd:95:3f:9a:39:0a:b6:49:33:
12:1d:02:f3:fb:5e:fc:60:b8:59:2b:07:fe:eb:d2:
d5:2b:60:1b:9b:8b:ba:60:7a:21:43:b5:bb:ef:be:
f1:26:26:11:e4:5b:a6:a2:86:c8:e9:96:96:b5:c3:
16:a7:07:82:5e:38:47:ce:2b:c8:9d:36:82:de:41:
3a:9b:78:15:b0:5a:fe:a0:c0:41:26:63:42:33:c7:
74:f6:f0:7e:9d:c6:23:e5:9b:40:94:2a:e3:86:30:
7c:3a:0f:b0:63:a9:30:6c:b5:5f:a1:3e:89:21:44:
73:39:2b:94:de:53:73:1b:19:ed:c5:8c:94:b4:46:
cf:e7:64:7d:de:18:bb:7a:b5:36:37:7e:3b:9c:31:
c0:28:69:ce:8c:8f:7e:0e:6c:d9:74:73:cf:40:46:
27:cd:71:19:c4:75:a0:30:29:33:e2:4e:25:e7:67:
ec:eb:24:61:04:16:d3:b1:b2:d6:2d:17:8d:1a:3f:
0c:5b:e6:14:92:c8:33:d8:aa:fd:58:a9:dc:33:8b:
0b:c9:7e:58:3d:b2:11:05:78:ef:48:2b:44:a8:b3:
e7:a5:82:13:0d:ac:e9:56:8d:d3:fd:f6:a2:c5:66:
ed:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:8C:99:29:CC:EC:D9:11:85:A9:E1:8D:40:72:58:30:67:99:00:75
X509v3 Authority Key Identifier:
keyid:B5:C4:78:7B:80:AB:48:01:AB:62:B1:BD:BF:B2:8E:06:D3:0C:DF:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tcR4e4CrSAGrYrG9v7KOBtMM32o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d9d3c9-f194-4b26-8f10-ff6a9cde6335/1/tcR4e4CrSAGrYrG9v7KOBtMM32o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d9d3c9-f194-4b26-8f10-ff6a9cde6335/1/tcR4e4CrSAGrYrG9v7KOBtMM32o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:71:ea:e6:5b:db:e5:ac:0b:00:75:f4:d9:1b:fb:7f:34:d7:
ae:06:5a:c0:bd:83:21:e9:f8:3d:51:e2:14:7e:2c:88:56:3a:
0d:28:3b:8c:28:b2:21:a8:54:5c:53:c6:c5:06:4c:13:b7:46:
e3:28:b3:30:67:85:68:f8:3d:b1:30:31:25:32:ed:4b:5a:27:
5a:b3:a4:58:5b:21:a4:00:21:29:28:d8:60:73:3f:24:81:f9:
01:fd:5a:45:81:d6:9a:b7:50:88:34:40:65:7d:a4:41:8e:f2:
4f:87:6b:4f:1c:4d:d0:da:81:fc:c7:2f:1c:2f:06:3a:43:d2:
b4:69:24:05:16:f4:3e:e3:2c:25:d3:78:46:8a:d9:4f:c6:74:
f8:c7:f9:61:21:34:1a:eb:19:17:65:02:77:ee:49:07:40:36:
39:0a:8d:ad:c0:19:1f:1a:58:a6:e9:fc:2c:2c:f3:09:00:6f:
06:66:e1:87:ee:f0:09:2a:ab:af:a1:13:05:85:20:94:c5:65:
eb:81:56:bc:4e:88:59:fb:98:65:70:e6:44:19:aa:8a:03:82:
e2:10:8b:8e:7f:11:bd:99:c2:64:82:15:c2:66:6c:9e:2c:59:
71:b1:3d:87:ed:0c:a6:c7:53:2c:d4:1b:2a:06:2d:d1:d6:71:
f4:46:fb:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:22:40 2025 by rpki-client