Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/b7f839-c680-45ea-a8ee-13087bebd1e4/1/TAAG4FiW9v-zAWHnyN2i-a0FtWE.mft
File: TAAG4FiW9v-zAWHnyN2i-a0FtWE.mft (raw, json)
Hash identifier: +jKKdIoVWonKZSTXHYgNkiKx+F5PJZzT8TV0XgW/wwQ=
Subject key identifier: C3:70:AB:18:33:F3:2D:7E:61:E0:D7:5C:03:F1:87:7A:EF:19:58:F1
Authority key identifier: 4C:00:06:E0:58:96:F6:FF:B3:01:61:E7:C8:DD:A2:F9:AD:05:B5:61
Certificate issuer: /CN=4c0006e05896f6ffb30161e7c8dda2f9ad05b561
Certificate serial: 019849D344676A22974FFFDBA1D0A702B9CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TAAG4FiW9v-zAWHnyN2i-a0FtWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/b7f839-c680-45ea-a8ee-13087bebd1e4/1/TAAG4FiW9v-zAWHnyN2i-a0FtWE.mft
Manifest number: 155E
Signing time: Sun 27 Jul 2025 03:00:38 +0000
Manifest this update: Sun 27 Jul 2025 03:00:38 +0000
Manifest next update: Mon 28 Jul 2025 03:00:38 +0000
Files and hashes: 1: TAAG4FiW9v-zAWHnyN2i-a0FtWE.crl (hash: Fma8ITeH/bxtDlzo71NMPfmqFzGm/OqInpKm4bUPDc0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/b7f839-c680-45ea-a8ee-13087bebd1e4/1/TAAG4FiW9v-zAWHnyN2i-a0FtWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/b7f839-c680-45ea-a8ee-13087bebd1e4/1/TAAG4FiW9v-zAWHnyN2i-a0FtWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/TAAG4FiW9v-zAWHnyN2i-a0FtWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:44:67:6a:22:97:4f:ff:db:a1:d0:a7:02:b9:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c0006e05896f6ffb30161e7c8dda2f9ad05b561
Validity
Not Before: Jul 27 03:00:38 2025 GMT
Not After : Jul 28 03:00:38 2025 GMT
Subject: CN=c370ab1833f32d7e61e0d75c03f1877aef1958f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:8e:a2:d7:c0:0f:fb:48:7a:d5:73:d9:f9:b2:
31:6a:e1:2d:52:66:55:af:f9:6b:37:b1:92:04:15:
a3:70:0e:85:1c:f5:56:24:f3:9d:0e:39:47:1d:71:
c5:86:8b:3b:04:4a:0b:ac:08:3a:4e:1d:83:27:cd:
51:8c:f8:76:87:dc:20:40:ff:8a:87:da:7b:7c:d5:
09:19:11:57:53:12:4a:2b:6e:1b:e1:64:41:08:8f:
49:ed:9a:16:37:0b:3a:16:5e:a4:02:1f:4f:18:3c:
ab:89:29:1e:8e:58:12:61:11:5c:5d:11:fa:e7:7f:
3e:8f:13:7a:a3:74:0a:db:f6:6d:e0:0b:54:d5:76:
c8:f5:fd:57:bb:09:d5:70:e2:0f:67:12:82:ad:4c:
3f:13:75:d9:c2:c5:b1:20:b6:27:83:84:71:89:c6:
19:52:35:10:c1:26:ee:d4:b3:7b:84:4c:52:0c:83:
7e:46:1f:0a:87:f0:2a:63:3a:05:a4:ec:50:24:ec:
57:15:9e:ad:a4:7a:ac:70:b9:91:15:e2:82:de:66:
cf:3f:c9:56:9d:c4:bf:b0:51:6a:1c:46:62:be:23:
d0:a5:c1:bc:16:a8:d9:27:38:9d:6d:0b:4f:66:81:
92:47:5d:82:5e:2e:4e:96:6a:1a:1a:c0:28:47:63:
ae:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:70:AB:18:33:F3:2D:7E:61:E0:D7:5C:03:F1:87:7A:EF:19:58:F1
X509v3 Authority Key Identifier:
keyid:4C:00:06:E0:58:96:F6:FF:B3:01:61:E7:C8:DD:A2:F9:AD:05:B5:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TAAG4FiW9v-zAWHnyN2i-a0FtWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/b7f839-c680-45ea-a8ee-13087bebd1e4/1/TAAG4FiW9v-zAWHnyN2i-a0FtWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/b7f839-c680-45ea-a8ee-13087bebd1e4/1/TAAG4FiW9v-zAWHnyN2i-a0FtWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:24:1d:60:9a:4b:ed:0f:5f:fc:ab:24:dd:b0:04:e4:ae:da:
29:9d:a7:e8:57:1c:80:9d:12:42:ba:36:ed:89:64:e7:45:1e:
ae:75:cc:f7:52:38:f4:dc:eb:ed:64:0c:d0:37:d6:f3:55:e2:
9a:2b:40:40:e4:63:48:18:6d:3e:ab:13:5c:53:ae:e1:91:a2:
b2:5a:df:96:5f:63:ff:f9:e5:1a:54:36:f7:74:1e:c1:be:82:
bc:84:42:53:bc:8b:71:1d:ca:21:80:66:6c:34:81:4b:ae:da:
74:fa:b1:3c:fd:e1:38:0c:d1:f0:21:40:a8:1d:b0:bf:ee:8b:
63:a7:e3:72:c6:17:e1:8e:a3:3a:e8:2a:71:64:94:7e:64:c7:
b0:1c:fd:2d:d8:9a:d2:57:2c:0c:13:38:7c:53:d7:38:fe:e2:
64:c9:f9:e7:19:fa:61:2b:db:5a:1c:14:f9:7c:45:7f:1d:e1:
84:b4:f3:80:1f:1e:79:b7:ed:85:cb:50:05:db:4f:8d:18:34:
37:90:bb:62:24:35:b0:30:04:d4:80:94:f0:78:3d:7b:6d:7f:
8e:5f:9f:c0:2d:db:75:5e:a8:91:7c:99:36:72:09:5b:3c:c4:
a3:9c:58:3d:38:6c:cc:75:cb:8b:d2:a4:1b:56:ee:62:d7:24:
1e:d3:be:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:11:49 2025 by rpki-client