Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/65646f-bea4-4f93-96be-48fea345fa13/1/TCFvZlYK4WunWU9GrwYPNR4OtJ4.mft
File: TCFvZlYK4WunWU9GrwYPNR4OtJ4.mft (raw, json)
Hash identifier: mgfoaIW26E02m4Ccen+dLF0AwCT0SKFY5fTH9DXiezc=
Subject key identifier: F7:5D:3B:95:F8:AA:C5:6A:62:F3:C9:4F:2A:DF:A0:C4:AF:89:12:9A
Authority key identifier: 4C:21:6F:66:56:0A:E1:6B:A7:59:4F:46:AF:06:0F:35:1E:0E:B4:9E
Certificate issuer: /CN=4c216f66560ae16ba7594f46af060f351e0eb49e
Certificate serial: 01984A77E8E83DCDBAD9EBFA760159D5E9F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TCFvZlYK4WunWU9GrwYPNR4OtJ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/65646f-bea4-4f93-96be-48fea345fa13/1/TCFvZlYK4WunWU9GrwYPNR4OtJ4.mft
Manifest number: 0C2C
Signing time: Sun 27 Jul 2025 06:00:29 +0000
Manifest this update: Sun 27 Jul 2025 06:00:29 +0000
Manifest next update: Mon 28 Jul 2025 06:00:29 +0000
Files and hashes: 1: MhvE3qmmLRT0N7DSbTLw9Csy23Q.roa (hash: JVGSBwpVFJHRhnHW5L6AwZ0tkeTLczM6lU9i030j0HQ=)
2: TCFvZlYK4WunWU9GrwYPNR4OtJ4.crl (hash: 0HbzX4U9t5Xs6QEK+lBau4uuKgLj/lBtem278y9BTbs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/65646f-bea4-4f93-96be-48fea345fa13/1/TCFvZlYK4WunWU9GrwYPNR4OtJ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/65646f-bea4-4f93-96be-48fea345fa13/1/TCFvZlYK4WunWU9GrwYPNR4OtJ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TCFvZlYK4WunWU9GrwYPNR4OtJ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:77:e8:e8:3d:cd:ba:d9:eb:fa:76:01:59:d5:e9:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c216f66560ae16ba7594f46af060f351e0eb49e
Validity
Not Before: Jul 27 06:00:29 2025 GMT
Not After : Jul 28 06:00:29 2025 GMT
Subject: CN=f75d3b95f8aac56a62f3c94f2adfa0c4af89129a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:d2:63:d0:9c:75:fa:ae:29:11:36:f3:ba:dd:
cf:f9:8a:fc:a2:a7:b2:85:82:e9:98:64:12:91:fc:
01:39:7e:08:c4:bd:92:03:d6:a2:78:fa:e6:5c:d9:
b4:7d:35:24:0e:ef:77:aa:a9:15:46:ce:7f:d0:08:
5a:13:0d:84:b9:ae:8f:a6:e0:5f:5f:bf:11:5d:9f:
33:f8:95:d1:6c:18:ff:a3:18:78:00:bc:c6:64:f6:
1a:b0:d5:61:f1:df:da:c8:a7:02:92:c1:cf:2c:e6:
b3:5e:95:62:81:b1:13:e7:ec:27:7f:0e:0a:73:1d:
0f:a9:71:50:3a:f1:d5:0f:fd:b1:7a:a0:2d:4d:e6:
f9:9d:11:4d:41:24:f0:f9:d5:53:13:ec:6f:01:22:
f3:51:bc:94:13:ab:ba:d1:4e:e3:49:bc:57:42:25:
e0:77:86:2d:9c:2d:dc:60:4f:bf:3f:16:30:a8:c6:
ce:26:25:a7:e4:ed:6e:2c:95:ce:08:c2:ee:29:8c:
9e:fd:e6:15:3b:5c:42:4b:7b:4e:a6:9a:80:c7:c2:
ca:f9:2e:6d:ab:57:7c:9a:d3:26:44:fc:f7:3e:6e:
14:61:ab:05:91:fa:19:c7:36:71:b3:07:27:66:d4:
1c:31:63:07:a7:3d:9f:ae:c0:45:87:ba:f9:ba:7f:
7a:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:5D:3B:95:F8:AA:C5:6A:62:F3:C9:4F:2A:DF:A0:C4:AF:89:12:9A
X509v3 Authority Key Identifier:
keyid:4C:21:6F:66:56:0A:E1:6B:A7:59:4F:46:AF:06:0F:35:1E:0E:B4:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TCFvZlYK4WunWU9GrwYPNR4OtJ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/65646f-bea4-4f93-96be-48fea345fa13/1/TCFvZlYK4WunWU9GrwYPNR4OtJ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/65646f-bea4-4f93-96be-48fea345fa13/1/TCFvZlYK4WunWU9GrwYPNR4OtJ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:cf:cb:07:bf:bd:1a:bf:e9:db:f0:9d:47:9f:d9:9a:59:23:
5b:95:8f:41:96:66:83:6c:76:ca:17:cc:db:7f:95:98:4c:d7:
b9:d9:eb:01:01:72:e9:eb:92:cd:dd:22:52:0f:ea:c6:56:d8:
fd:0e:c7:56:ba:8a:1c:85:db:31:e8:f4:f4:aa:14:9e:f2:27:
3d:78:9d:52:1b:20:9f:66:d1:14:60:53:5a:e3:1a:26:c9:55:
ae:29:62:3d:0e:95:d0:2b:cc:48:1f:cf:03:bc:b9:b7:d0:46:
81:fe:27:6f:0f:9b:38:bc:56:3d:34:a4:aa:35:94:9d:63:89:
7a:46:91:3f:52:8f:57:65:c7:6a:e3:3c:41:a0:8c:8f:fd:f0:
ed:72:86:74:80:2d:18:f5:75:12:3c:fd:03:3a:d3:b8:12:6e:
72:f9:77:48:35:a3:bc:e6:a5:44:9a:c6:a7:4a:25:16:2c:64:
cd:4c:2f:5e:22:50:78:42:d5:33:44:05:85:77:93:4c:0a:26:
8c:4f:a6:2e:9a:5c:f4:ac:e6:6b:82:51:1d:65:db:4c:a1:e3:
51:0b:75:07:4b:0c:de:95:e8:63:fb:4b:bb:b1:45:7c:d3:12:
3c:20:75:af:63:dd:83:18:18:21:ce:7d:75:22:a8:38:54:5c:
21:9f:dc:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 15:24:48 2025 by rpki-client