Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/TGtjcblFo16d8wj_Q4A-JheFEGk.mft
File: TGtjcblFo16d8wj_Q4A-JheFEGk.mft (raw, json)
Hash identifier: H4+hTBRCIAHwYr4iUrKdlpkgfVtaaYze3EimLC6Y+Fo=
Subject key identifier: FE:F2:B2:4C:3A:40:15:01:BF:52:C9:55:2A:8E:66:E0:34:39:F9:22
Authority key identifier: 4C:6B:63:71:B9:45:A3:5E:9D:F3:08:FF:43:80:3E:26:17:85:10:69
Certificate issuer: /CN=4c6b6371b945a35e9df308ff43803e2617851069
Certificate serial: 01984A0A0F9E90E4A81AFCCD4176710750FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TGtjcblFo16d8wj_Q4A-JheFEGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/TGtjcblFo16d8wj_Q4A-JheFEGk.mft
Manifest number: 10B7
Signing time: Sun 27 Jul 2025 04:00:29 +0000
Manifest this update: Sun 27 Jul 2025 04:00:29 +0000
Manifest next update: Mon 28 Jul 2025 04:00:29 +0000
Files and hashes: 1: NETt5LyS--lV9_ycDBmp9TmpxP4.roa (hash: rz60bepxWIT7kbaafyZ48rHU8Vmg6Vvtzt7Ebp5hgDU=)
2: TGtjcblFo16d8wj_Q4A-JheFEGk.crl (hash: I05cH8znhSdCbVIWpbND9hnfFR8s7k4z/6AwojUzh5w=)
3: YU0ymXaczDxniPQtB_xa4RTEU2Q.roa (hash: +3YrNwFP0+tuTgevzTw2FGRwOLOaLfupz3GSxL5OXLE=)
4: e99v7pEfrFm4Dg1SnIaNO39I8Ws.roa (hash: GWy1k4OaIi0pC/Ap0hgLnIy0Gp664zirmOTGWdfBTaE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/TGtjcblFo16d8wj_Q4A-JheFEGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/TGtjcblFo16d8wj_Q4A-JheFEGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TGtjcblFo16d8wj_Q4A-JheFEGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:0a:0f:9e:90:e4:a8:1a:fc:cd:41:76:71:07:50:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c6b6371b945a35e9df308ff43803e2617851069
Validity
Not Before: Jul 27 04:00:29 2025 GMT
Not After : Jul 28 04:00:29 2025 GMT
Subject: CN=fef2b24c3a401501bf52c9552a8e66e03439f922
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:cb:9a:e0:03:a5:84:04:e3:8e:38:40:90:8b:
ee:28:41:5c:80:b5:7a:25:07:f9:93:f4:30:4d:77:
be:e2:5b:ce:36:cc:d4:a2:4a:7d:73:4f:7e:5a:8a:
ec:05:6e:e2:a0:53:99:e8:29:65:ec:37:4f:ba:ab:
aa:45:83:a2:96:03:45:05:00:42:92:35:11:14:04:
8d:c2:ce:bf:31:d9:43:57:fe:47:ed:54:dd:f2:31:
ea:e8:e5:f4:ad:47:04:8b:b8:50:1c:f7:01:b0:7e:
6e:79:7a:10:31:db:92:76:42:76:c8:a4:98:40:cd:
c3:f8:61:ad:ef:05:c4:ed:8a:2c:3f:89:c2:4c:fa:
72:f6:09:ab:b4:35:fa:52:09:86:1c:cb:1c:4e:08:
aa:a7:df:25:cf:a7:45:1f:54:7f:4a:cc:75:cc:e4:
68:1b:75:a7:2f:e4:2d:a8:50:62:7e:5e:8f:0c:78:
44:0a:89:b9:3b:40:10:e4:5b:c7:75:c4:43:22:39:
5e:67:62:3b:96:02:5b:64:ae:ee:66:dd:35:13:f9:
82:b6:4f:b4:40:8c:4b:5a:8b:23:71:f5:7f:a6:c3:
6f:f2:68:27:73:26:8c:b2:ac:98:a6:c1:e8:82:82:
2e:b5:4d:48:be:9c:bd:a5:86:fb:2f:45:e6:3c:30:
33:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:F2:B2:4C:3A:40:15:01:BF:52:C9:55:2A:8E:66:E0:34:39:F9:22
X509v3 Authority Key Identifier:
keyid:4C:6B:63:71:B9:45:A3:5E:9D:F3:08:FF:43:80:3E:26:17:85:10:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TGtjcblFo16d8wj_Q4A-JheFEGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/TGtjcblFo16d8wj_Q4A-JheFEGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/TGtjcblFo16d8wj_Q4A-JheFEGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:cd:cb:26:a7:b8:76:43:28:55:a3:fb:eb:ec:54:66:69:3a:
0d:5f:2b:47:79:f9:4c:70:a8:38:4d:5c:7e:8b:73:2b:1a:14:
0f:e9:76:11:c8:e7:62:77:26:c7:0e:35:f9:63:0d:f3:80:3b:
9e:57:fa:e7:c1:f1:52:2b:15:16:b2:20:b5:42:45:e0:73:c3:
cb:52:2f:a4:d1:5d:44:e0:be:f6:de:59:fe:2d:0a:a6:c4:95:
68:0b:07:33:62:0e:24:d4:0c:63:3d:de:66:4b:3b:4f:8d:b7:
cb:2a:b4:f4:ef:9e:37:89:90:2a:e1:ea:9c:b5:f4:7f:54:b3:
2c:d9:20:07:26:23:46:7f:c6:66:f9:6d:b5:36:d1:ba:08:f6:
00:07:92:9c:a0:bb:5f:6f:46:ef:e7:f7:bb:16:06:de:54:92:
0a:d8:6a:73:84:5f:5a:fa:09:9f:f5:57:0e:ca:4c:16:a6:ad:
44:9c:fa:37:f1:2c:00:87:b5:3a:71:79:27:77:07:f4:0f:6a:
52:44:3e:26:83:ec:aa:da:09:0c:4a:24:e8:55:8b:ec:0b:20:
cc:6d:cc:2d:5e:22:4d:2c:13:8b:7f:72:f4:14:74:74:c9:18:
5b:ba:3f:f4:64:49:9f:52:33:9d:0b:eb:6f:02:3b:c6:9b:4f:
ff:91:74:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:33:16 2025 by rpki-client