Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/d66a58-fdf5-491e-b511-fd2915d4cd5a/1/TcOR3GFf1KOtEMDyq4sKUG0Dntg.mft
File: TcOR3GFf1KOtEMDyq4sKUG0Dntg.mft (raw, json)
Hash identifier: YrJ+G6gMtSUasDMdUqC4aNVchD1gi+Ps4K8wekQIQ2I=
Subject key identifier: 24:05:46:BF:9F:C4:3F:6D:B0:32:A1:BF:B4:28:99:DE:AD:90:CD:C1
Authority key identifier: 4D:C3:91:DC:61:5F:D4:A3:AD:10:C0:F2:AB:8B:0A:50:6D:03:9E:D8
Certificate issuer: /CN=4dc391dc615fd4a3ad10c0f2ab8b0a506d039ed8
Certificate serial: 0198530EE6E4558CC7AE05EE9EB00AE856E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TcOR3GFf1KOtEMDyq4sKUG0Dntg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/d66a58-fdf5-491e-b511-fd2915d4cd5a/1/TcOR3GFf1KOtEMDyq4sKUG0Dntg.mft
Manifest number: 1605
Signing time: Mon 28 Jul 2025 22:02:22 +0000
Manifest this update: Mon 28 Jul 2025 22:02:22 +0000
Manifest next update: Tue 29 Jul 2025 22:02:22 +0000
Files and hashes: 1: B9-Xs7dhnKZZ3y2oqYpIdAWmlNw.roa (hash: TgNafOFIPNxSy2OvvIzhsdKUEZp12L7C7S2Pd52eKm0=)
2: QNGb0gtG4GRClc-idD7pOZ3NKu4.roa (hash: RBMmyAJB99vMalTNtIMZJrCnoBdNekiveW7iLd5Zyt4=)
3: TcOR3GFf1KOtEMDyq4sKUG0Dntg.crl (hash: wg5voQxqF1S65RK2EujQDZDZ5Lc+nJitclBULIJzzV4=)
4: uL8wQ5suTSJs6R1LegMqq0w_KnA.roa (hash: q1cpaZXwQ8FTgzr+1V+AjkI0yfC5jTYIkOuwUOw+jNs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/d66a58-fdf5-491e-b511-fd2915d4cd5a/1/TcOR3GFf1KOtEMDyq4sKUG0Dntg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/d66a58-fdf5-491e-b511-fd2915d4cd5a/1/TcOR3GFf1KOtEMDyq4sKUG0Dntg.mft
rsync://rpki.ripe.net/repository/DEFAULT/TcOR3GFf1KOtEMDyq4sKUG0Dntg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 22:02:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:0e:e6:e4:55:8c:c7:ae:05:ee:9e:b0:0a:e8:56:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dc391dc615fd4a3ad10c0f2ab8b0a506d039ed8
Validity
Not Before: Jul 28 22:02:22 2025 GMT
Not After : Jul 29 22:02:22 2025 GMT
Subject: CN=240546bf9fc43f6db032a1bfb42899dead90cdc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:13:39:50:cb:87:f4:66:3b:65:e6:f7:4d:72:
92:f2:46:12:8b:05:74:10:27:5e:e2:92:f6:cd:6d:
54:0d:32:f8:35:ba:f9:f9:d8:b6:62:0f:86:35:3d:
ff:59:36:2e:95:6a:de:19:47:ce:e0:24:34:58:e5:
ed:3d:6a:f8:be:cf:f0:dc:32:fb:c1:9b:eb:4b:3b:
2b:e7:54:02:b8:d8:8c:63:64:f4:a2:17:c2:0c:54:
0e:cb:11:c3:66:e3:69:94:e9:3c:72:26:6e:c6:79:
94:48:67:5e:ea:ff:c8:b4:37:2e:ec:ef:16:2a:c8:
7b:f9:5e:c2:67:e2:82:b2:81:26:73:cb:38:66:5a:
e1:3c:36:59:d1:34:1d:4b:ee:f1:ea:c5:09:50:dc:
ab:41:87:49:1f:51:7b:7b:8d:95:a1:01:85:2e:91:
4d:c0:32:6a:27:4f:54:ff:ac:c0:e5:98:a2:5b:cf:
51:c6:28:77:d8:90:25:f4:b6:b3:9d:87:c2:e6:0b:
b7:30:14:94:2f:de:a5:f7:68:65:40:d3:d8:f0:1e:
2f:57:2d:af:f4:e6:c7:c5:ce:e5:aa:20:5a:0d:41:
b7:82:04:be:31:eb:17:d6:cc:63:07:e4:9d:4d:13:
6a:95:8d:33:e2:57:58:f7:b4:13:a5:4d:ac:3a:50:
b7:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:05:46:BF:9F:C4:3F:6D:B0:32:A1:BF:B4:28:99:DE:AD:90:CD:C1
X509v3 Authority Key Identifier:
keyid:4D:C3:91:DC:61:5F:D4:A3:AD:10:C0:F2:AB:8B:0A:50:6D:03:9E:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TcOR3GFf1KOtEMDyq4sKUG0Dntg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d66a58-fdf5-491e-b511-fd2915d4cd5a/1/TcOR3GFf1KOtEMDyq4sKUG0Dntg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d66a58-fdf5-491e-b511-fd2915d4cd5a/1/TcOR3GFf1KOtEMDyq4sKUG0Dntg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:e3:f2:27:a4:1c:ed:a0:5c:7e:0f:62:2f:76:d3:67:7d:06:
75:7e:39:9e:4d:85:f2:1b:5d:fe:a7:26:fe:76:b3:14:15:5a:
0a:2a:ce:b5:0a:47:a4:e1:c2:cd:9f:53:9a:1f:79:56:d6:e4:
45:01:21:a7:ac:9c:01:66:f2:03:83:c6:7a:6c:19:f2:d7:c4:
6f:9c:e8:6e:63:4a:f3:a7:6f:dc:c7:eb:a7:4a:74:3e:24:6e:
94:cd:4f:93:78:b6:cc:f7:58:7d:3e:81:f0:c9:83:a2:b3:8f:
29:e2:dc:7f:20:19:6b:a1:c2:9e:6c:e2:8a:8e:bc:15:dd:6f:
4b:1a:04:b4:05:5e:74:be:62:26:e4:93:9f:70:e5:0e:7b:c3:
67:00:8a:42:ec:21:05:30:e1:d1:e2:26:ac:81:68:45:a8:15:
02:34:da:fc:d4:1b:b5:82:e1:3d:b3:12:29:8f:75:74:50:10:
ba:a1:5c:ba:73:80:4c:f6:0b:1f:bc:9e:c4:97:87:1b:09:79:
f7:9c:63:c1:e3:5c:91:44:c8:d1:09:a7:a8:c7:c4:ba:9d:77:
01:31:bf:a7:5d:05:11:f5:32:46:ba:04:21:81:9f:ec:a9:1f:
db:b4:13:e9:f8:68:22:75:72:74:9c:c4:e5:59:ec:c0:3f:7c:
1a:48:be:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:14:38 2025 by rpki-client