Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/8008fe-175b-41bf-b1d6-2ce0eb458788/1/TFFjb96QX4Uh9BFHnoEyHNz0kEk.mft
File: TFFjb96QX4Uh9BFHnoEyHNz0kEk.mft (raw, json)
Hash identifier: ++ubYK/6AVM1f9WrpgewHBuzEiqHyx7GI4x87L46EjU=
Subject key identifier: F8:FC:55:9A:EB:C1:A1:9C:9E:8B:61:29:A0:23:3A:D1:E1:76:4A:A6
Authority key identifier: 4C:51:63:6F:DE:90:5F:85:21:F4:11:47:9E:81:32:1C:DC:F4:90:49
Certificate issuer: /CN=4c51636fde905f8521f411479e81321cdcf49049
Certificate serial: 019858DAC5E9B7CD17F29F89862CDF542CC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TFFjb96QX4Uh9BFHnoEyHNz0kEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/8008fe-175b-41bf-b1d6-2ce0eb458788/1/TFFjb96QX4Uh9BFHnoEyHNz0kEk.mft
Manifest number: 0899
Signing time: Wed 30 Jul 2025 01:03:09 +0000
Manifest this update: Wed 30 Jul 2025 01:03:09 +0000
Manifest next update: Thu 31 Jul 2025 01:03:09 +0000
Files and hashes: 1: TFFjb96QX4Uh9BFHnoEyHNz0kEk.crl (hash: AJTdSlnud9HtCmynDSQJa6CEnA/Ego2tHESpzw0KLRo=)
2: k88eKZ3ggVkstFfz6v9jAollFdM.roa (hash: RToXutf5Qdv2Y+G73kPgZr6gfiGthSFW8G2eqnaoH64=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/8008fe-175b-41bf-b1d6-2ce0eb458788/1/TFFjb96QX4Uh9BFHnoEyHNz0kEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/8008fe-175b-41bf-b1d6-2ce0eb458788/1/TFFjb96QX4Uh9BFHnoEyHNz0kEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TFFjb96QX4Uh9BFHnoEyHNz0kEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:58:da:c5:e9:b7:cd:17:f2:9f:89:86:2c:df:54:2c:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c51636fde905f8521f411479e81321cdcf49049
Validity
Not Before: Jul 30 01:03:09 2025 GMT
Not After : Jul 31 01:03:09 2025 GMT
Subject: CN=f8fc559aebc1a19c9e8b6129a0233ad1e1764aa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3d:82:ae:d0:b0:1f:c1:ef:b8:90:28:2d:e2:
f7:a3:7d:1d:2d:e5:b2:48:34:b9:0a:0c:79:82:1f:
16:be:71:54:76:34:45:a0:57:2f:e4:d3:f5:b3:30:
d9:4c:69:d6:ac:d8:38:ea:59:78:4d:a9:bb:68:77:
6b:8b:e3:80:47:2b:de:a9:4e:db:aa:09:b1:ba:3e:
9e:b2:50:28:d7:52:3f:fb:2e:6c:38:56:8f:ea:ea:
e6:a0:26:64:24:ca:94:fb:b4:bd:7d:6d:72:54:b0:
ef:de:ed:23:ab:68:cf:84:d9:59:b9:37:a8:ef:a2:
5b:91:19:43:8f:56:0e:37:0a:65:af:e5:c5:30:02:
75:11:be:f2:2f:d8:1f:24:9f:eb:f8:d2:4a:4d:79:
27:1d:2e:aa:a1:e1:d2:00:02:73:27:db:5b:03:71:
90:91:e9:5b:65:b0:2e:f6:44:ab:1e:bc:09:85:fa:
f2:64:a0:b0:e8:92:24:a3:22:e1:2a:70:87:77:47:
d1:00:ad:46:13:a3:8f:8c:35:97:8e:b0:f3:03:c1:
59:64:96:bb:24:25:ef:96:79:10:37:73:70:c0:05:
c6:33:5c:cd:d4:87:60:34:29:bf:c7:e4:70:46:5c:
7f:30:13:44:27:7c:03:c9:9b:75:f3:11:71:2d:12:
0c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:FC:55:9A:EB:C1:A1:9C:9E:8B:61:29:A0:23:3A:D1:E1:76:4A:A6
X509v3 Authority Key Identifier:
keyid:4C:51:63:6F:DE:90:5F:85:21:F4:11:47:9E:81:32:1C:DC:F4:90:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TFFjb96QX4Uh9BFHnoEyHNz0kEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/8008fe-175b-41bf-b1d6-2ce0eb458788/1/TFFjb96QX4Uh9BFHnoEyHNz0kEk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/8008fe-175b-41bf-b1d6-2ce0eb458788/1/TFFjb96QX4Uh9BFHnoEyHNz0kEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:6d:c0:aa:cc:1b:5c:8f:92:e4:ed:78:4b:b8:07:34:44:4d:
60:a3:d5:b1:8d:b0:26:42:aa:ee:33:2b:a1:00:da:3e:1d:75:
0f:b4:13:17:9a:7e:40:9b:d7:d2:70:66:b7:d3:70:7c:95:eb:
d5:49:57:6c:84:97:48:23:c1:3a:2b:24:7b:82:49:cd:71:6f:
b5:e6:65:22:48:a6:79:b1:44:70:b3:ff:98:4a:c6:7e:79:73:
93:ad:52:4b:ba:67:e6:78:a3:79:f4:0c:02:9f:6e:b4:03:e8:
a8:b2:f5:5f:d4:04:27:25:c1:23:05:b5:d7:c2:9e:c6:a8:39:
c1:7a:d9:f4:ce:0f:c1:6f:99:d9:c0:bd:99:54:6d:13:54:9c:
f7:8a:c1:b3:01:fd:08:9c:1f:5d:44:4e:d1:66:67:f0:12:70:
52:92:34:83:73:5d:f3:66:be:e2:06:77:62:41:67:6e:5f:3e:
4f:26:68:8b:b1:2f:0f:ab:36:da:ab:5d:33:09:05:0c:dc:1a:
4a:4a:0b:0d:c2:67:fa:f8:86:7e:4f:59:b7:2c:f9:9d:4d:15:
a3:a5:b1:f5:fa:b0:af:fb:b5:69:72:bd:83:10:cc:c1:84:86:
eb:47:01:06:9b:80:ed:ae:8a:95:04:d2:dd:fc:ff:f8:dc:83:
c5:ec:d0:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 02:31:47 2025 by rpki-client