Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/e5bdc7-eb06-4626-84d7-13da74cd35a4/1/TkJsh9-8xVLceQ_sPtHN56j4huk.mft
File: TkJsh9-8xVLceQ_sPtHN56j4huk.mft (raw, json)
Hash identifier: 4/p+1mp0HrgXcqk15Lbyisaz1F/b26eOvkjBnnbHSXE=
Subject key identifier: 42:63:C3:7B:ED:7E:6D:6C:B0:BA:CC:3A:BC:A0:2E:1F:87:B8:6F:93
Authority key identifier: 4E:42:6C:87:DF:BC:C5:52:DC:79:0F:EC:3E:D1:CD:E7:A8:F8:86:E9
Certificate issuer: /CN=4e426c87dfbcc552dc790fec3ed1cde7a8f886e9
Certificate serial: 01984B53829E5C4F46DBB5E02CADCDD8ACD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TkJsh9-8xVLceQ_sPtHN56j4huk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/e5bdc7-eb06-4626-84d7-13da74cd35a4/1/TkJsh9-8xVLceQ_sPtHN56j4huk.mft
Manifest number: 0940
Signing time: Sun 27 Jul 2025 10:00:20 +0000
Manifest this update: Sun 27 Jul 2025 10:00:20 +0000
Manifest next update: Mon 28 Jul 2025 10:00:20 +0000
Files and hashes: 1: TkJsh9-8xVLceQ_sPtHN56j4huk.crl (hash: RqFDozg9qgAyKapvGj9qRYl5Thk0V/G1tqI7yGt5SHE=)
2: o1pkGMrhjFIHajUuas6hn3OkprM.roa (hash: vhDUewSi85hdhWxPSoEhr0a9lvOVAXD09OTRvqe5guU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/e5bdc7-eb06-4626-84d7-13da74cd35a4/1/TkJsh9-8xVLceQ_sPtHN56j4huk.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/e5bdc7-eb06-4626-84d7-13da74cd35a4/1/TkJsh9-8xVLceQ_sPtHN56j4huk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TkJsh9-8xVLceQ_sPtHN56j4huk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:53:82:9e:5c:4f:46:db:b5:e0:2c:ad:cd:d8:ac:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e426c87dfbcc552dc790fec3ed1cde7a8f886e9
Validity
Not Before: Jul 27 10:00:20 2025 GMT
Not After : Jul 28 10:00:20 2025 GMT
Subject: CN=4263c37bed7e6d6cb0bacc3abca02e1f87b86f93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:9d:92:58:16:bd:72:ad:0d:73:e3:47:05:89:
3d:72:e9:c8:45:b8:8f:43:c6:b1:d0:96:67:78:fa:
8d:7b:c9:f2:2a:92:c4:19:5e:d5:a5:83:24:d4:55:
04:0b:c8:31:ba:00:2b:88:e4:d9:db:5f:64:67:06:
51:bd:4b:7d:8e:d2:ea:84:4b:7c:5f:5e:f7:07:ad:
64:f4:4f:7b:db:7f:73:f2:1b:6b:a0:94:31:83:2e:
7d:03:61:a4:3e:eb:3a:3b:05:db:81:f0:5f:f0:63:
21:00:33:90:5d:d6:89:b3:7f:f8:d0:8e:a9:0e:1b:
7b:8c:ce:98:de:c1:e0:23:8d:0c:e3:24:3c:13:76:
ce:b1:5f:96:2a:99:e0:6a:dc:6f:46:a1:e2:0c:99:
7d:eb:0b:a8:03:36:e9:ac:87:2c:8c:ef:98:c3:c7:
1c:64:0d:2b:99:b9:b1:a5:a4:29:48:c5:dd:5c:a5:
39:50:48:40:dd:79:6f:1d:9d:9b:83:05:72:f7:85:
ac:ce:cc:25:88:83:56:13:ed:17:05:3f:bb:48:51:
d7:33:2c:bf:ff:6b:40:a9:58:f4:3b:14:27:43:5c:
c0:dd:c2:b8:51:90:b0:47:ba:2e:af:30:99:c8:65:
24:47:a9:8f:af:d9:d3:d0:03:50:ee:59:b2:3f:70:
40:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:63:C3:7B:ED:7E:6D:6C:B0:BA:CC:3A:BC:A0:2E:1F:87:B8:6F:93
X509v3 Authority Key Identifier:
keyid:4E:42:6C:87:DF:BC:C5:52:DC:79:0F:EC:3E:D1:CD:E7:A8:F8:86:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TkJsh9-8xVLceQ_sPtHN56j4huk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e5bdc7-eb06-4626-84d7-13da74cd35a4/1/TkJsh9-8xVLceQ_sPtHN56j4huk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e5bdc7-eb06-4626-84d7-13da74cd35a4/1/TkJsh9-8xVLceQ_sPtHN56j4huk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:27:42:40:63:2e:ba:d5:c7:57:a2:6a:0a:69:15:1b:15:cd:
1f:27:1f:6d:93:f1:e6:be:84:a7:90:73:27:64:e7:c3:f4:8f:
29:f2:93:78:d3:94:ba:1e:9a:df:76:cf:3c:f1:10:70:22:19:
4f:e1:53:ea:45:3b:9e:9c:c9:5e:6d:55:31:7e:56:9b:4f:b9:
bd:c7:12:33:12:a2:c0:f8:37:69:dc:50:9e:5d:c0:1b:78:f5:
1a:f3:cb:dc:29:1f:8d:71:91:28:b9:39:1e:c5:d8:73:0b:5a:
5e:f6:37:79:de:4c:91:e3:b6:e7:39:f4:4c:ff:28:cd:c9:42:
3c:a2:50:c7:e2:bc:ed:b4:b6:e3:bd:65:ea:cb:68:1b:b0:a1:
95:58:29:75:da:08:11:71:51:ff:e1:c8:3a:05:23:bc:02:2f:
c4:12:2d:e5:97:3a:78:8b:71:58:2c:7f:87:b4:20:c1:ae:b2:
69:c0:c7:1b:32:49:55:d3:b7:22:06:ca:04:ee:b2:e4:08:31:
ff:fb:24:7a:b9:7b:a1:ee:7c:de:75:dd:0d:2f:8a:fa:46:de:
14:13:1b:db:8a:e7:3b:79:21:d2:6e:5d:46:fe:da:21:59:15:
1d:4f:d8:0e:e1:4a:71:7e:a2:16:b1:a2:7b:49:c9:71:58:0d:
85:c3:4d:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:05:10 2025 by rpki-client