Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/278398-7339-44b2-b0b0-73a01ae5de8f/1/TNcfWgBQ-K5kRMY4dpujdf3bzhk.mft
File: TNcfWgBQ-K5kRMY4dpujdf3bzhk.mft (raw, json)
Hash identifier: dJ4EJ6C8XEwvyYOAkMjT4Br6WzYiQt3ZWhMVdKiOAlo=
Subject key identifier: DD:B8:21:12:5B:1A:93:D0:3F:8E:1C:25:BD:50:F7:96:45:3A:63:1E
Authority key identifier: 4C:D7:1F:5A:00:50:F8:AE:64:44:C6:38:76:9B:A3:75:FD:DB:CE:19
Certificate issuer: /CN=4cd71f5a0050f8ae6444c638769ba375fddbce19
Certificate serial: 01985456BC261B65674B5CE1598904FF958B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TNcfWgBQ-K5kRMY4dpujdf3bzhk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/278398-7339-44b2-b0b0-73a01ae5de8f/1/TNcfWgBQ-K5kRMY4dpujdf3bzhk.mft
Manifest number: 12F2
Signing time: Tue 29 Jul 2025 04:00:26 +0000
Manifest this update: Tue 29 Jul 2025 04:00:26 +0000
Manifest next update: Wed 30 Jul 2025 04:00:26 +0000
Files and hashes: 1: R8OfYueHd1P1AWWtdGiixwllIMs.roa (hash: ZKzgreBUlCJXbuPQDDLtfbqfZaf5YaZJohzFfYmemPA=)
2: TNcfWgBQ-K5kRMY4dpujdf3bzhk.crl (hash: G+eu0RPFxIZpon9cn4jopHGgPqyrlWAC6nuGd2kflVU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/278398-7339-44b2-b0b0-73a01ae5de8f/1/TNcfWgBQ-K5kRMY4dpujdf3bzhk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/278398-7339-44b2-b0b0-73a01ae5de8f/1/TNcfWgBQ-K5kRMY4dpujdf3bzhk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TNcfWgBQ-K5kRMY4dpujdf3bzhk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:54:56:bc:26:1b:65:67:4b:5c:e1:59:89:04:ff:95:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cd71f5a0050f8ae6444c638769ba375fddbce19
Validity
Not Before: Jul 29 04:00:26 2025 GMT
Not After : Jul 30 04:00:26 2025 GMT
Subject: CN=ddb821125b1a93d03f8e1c25bd50f796453a631e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:58:4d:bd:9c:06:0a:c3:c1:11:a0:6b:a7:01:
fb:34:62:12:af:78:bc:a9:9b:79:b5:7e:a0:b9:72:
c8:66:4f:bf:70:d9:c4:05:a2:3d:a9:32:4b:78:d4:
89:01:3f:e4:86:f2:b1:0b:e9:1e:94:ab:2c:63:ff:
87:be:fd:56:23:0f:90:b7:6a:6c:02:73:20:2e:11:
60:e7:40:d7:c2:59:75:3a:00:aa:1c:7d:e1:9b:f7:
62:c9:b9:ce:9c:51:06:dc:8d:59:77:2b:42:33:9a:
86:85:ad:71:2c:f1:c6:ca:31:3f:7a:bc:5b:8c:31:
0f:00:4c:95:19:c9:0d:39:cc:22:64:9a:21:11:30:
44:37:fa:2a:27:81:6b:bb:db:a2:ec:77:53:e6:80:
88:51:d8:08:30:69:89:76:23:b0:93:50:95:8b:e2:
1a:0d:1a:1b:69:7d:5a:9c:00:7c:bc:88:76:0d:9f:
2a:ac:bc:fb:37:a7:ba:a2:59:ac:93:c0:1b:c3:7f:
b4:46:0f:0b:4b:be:fb:74:da:53:39:c4:73:74:a4:
c7:41:38:e5:d7:e9:43:a8:82:08:61:17:3f:d4:9b:
97:6a:40:64:76:d9:26:72:d2:8b:ef:ab:c6:77:00:
a9:d9:2e:85:65:a6:2a:97:11:82:57:32:8a:9a:4b:
07:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:B8:21:12:5B:1A:93:D0:3F:8E:1C:25:BD:50:F7:96:45:3A:63:1E
X509v3 Authority Key Identifier:
keyid:4C:D7:1F:5A:00:50:F8:AE:64:44:C6:38:76:9B:A3:75:FD:DB:CE:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TNcfWgBQ-K5kRMY4dpujdf3bzhk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/278398-7339-44b2-b0b0-73a01ae5de8f/1/TNcfWgBQ-K5kRMY4dpujdf3bzhk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/278398-7339-44b2-b0b0-73a01ae5de8f/1/TNcfWgBQ-K5kRMY4dpujdf3bzhk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:d1:57:bb:5e:cf:54:05:57:ca:1a:e2:a8:92:87:cd:e4:51:
de:f3:2b:25:9a:b7:d5:8c:59:37:de:00:bc:11:b2:a9:21:ff:
21:b5:dc:69:c0:8b:01:e0:38:a4:8b:a5:35:87:32:2e:53:27:
5d:68:b8:61:32:7a:b7:4b:cc:5c:66:ef:c4:0e:df:25:be:c0:
ca:8b:2e:e2:a9:17:6a:e1:5f:8e:17:0f:40:15:98:ad:b3:2b:
9a:3c:5f:a6:13:4b:61:0e:c3:03:27:41:33:66:b3:49:6c:65:
18:85:a1:a9:88:11:6f:1e:55:f6:bb:84:b9:82:0f:36:0a:17:
76:de:c6:9e:dd:3f:b3:cb:98:6c:20:e4:b2:14:87:d5:a0:70:
ec:fd:7a:f0:c4:56:af:26:bc:20:ea:f2:c7:9b:42:d2:e1:ef:
83:6f:ef:79:1c:63:43:31:24:10:98:d1:32:1c:73:c2:5c:a1:
57:29:4a:d7:c6:7a:c4:c8:75:d3:46:50:f5:85:01:f2:c7:c8:
f0:01:8b:5c:ec:9d:d0:a9:57:fd:d2:ed:66:2a:1d:ab:9b:01:
b7:e7:aa:6f:51:d0:6c:d7:af:cd:fe:95:b3:a8:42:a5:e8:cd:
d1:d1:83:e3:06:76:d2:49:d8:04:8f:a4:3f:4e:30:73:5b:8a:
d0:dc:b7:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:36:28 2025 by rpki-client