Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/577a7b-5dcc-43a7-a89c-e3bc6b499e7b/1/tsaaSiFb3h0yk03chd6vj9nJRHk.mft
File: tsaaSiFb3h0yk03chd6vj9nJRHk.mft (raw, json)
Hash identifier: nuwulHCb7twWzhpPI9A0YH9dCLDEhpfMRy/60jWgrQw=
Subject key identifier: 40:92:39:ED:88:2B:79:12:22:11:3A:20:06:B5:58:48:45:8D:D1:28
Authority key identifier: B6:C6:9A:4A:21:5B:DE:1D:32:93:4D:DC:85:DE:AF:8F:D9:C9:44:79
Certificate issuer: /CN=b6c69a4a215bde1d32934ddc85deaf8fd9c94479
Certificate serial: 019847E516DA43F35C7F5198A501C8791E72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tsaaSiFb3h0yk03chd6vj9nJRHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/577a7b-5dcc-43a7-a89c-e3bc6b499e7b/1/tsaaSiFb3h0yk03chd6vj9nJRHk.mft
Manifest number: 0DAC
Signing time: Sat 26 Jul 2025 18:00:52 +0000
Manifest this update: Sat 26 Jul 2025 18:00:52 +0000
Manifest next update: Sun 27 Jul 2025 18:00:52 +0000
Files and hashes: 1: tsaaSiFb3h0yk03chd6vj9nJRHk.crl (hash: Uo66fpfWeLKQum8yxLf9Z3L43wY/uIclwXSG680t1/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/577a7b-5dcc-43a7-a89c-e3bc6b499e7b/1/tsaaSiFb3h0yk03chd6vj9nJRHk.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/577a7b-5dcc-43a7-a89c-e3bc6b499e7b/1/tsaaSiFb3h0yk03chd6vj9nJRHk.mft
rsync://rpki.ripe.net/repository/DEFAULT/tsaaSiFb3h0yk03chd6vj9nJRHk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:e5:16:da:43:f3:5c:7f:51:98:a5:01:c8:79:1e:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6c69a4a215bde1d32934ddc85deaf8fd9c94479
Validity
Not Before: Jul 26 18:00:52 2025 GMT
Not After : Jul 27 18:00:52 2025 GMT
Subject: CN=409239ed882b791222113a2006b55848458dd128
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:91:03:06:6a:12:b1:49:07:21:60:a7:c4:7a:
43:b9:43:e8:d5:30:02:01:0f:dd:a5:2f:c6:08:c4:
3f:51:dd:8e:4b:d7:a8:98:b1:81:32:50:94:9f:18:
b5:ec:42:40:d8:f5:b5:a9:b4:f8:54:16:95:b1:89:
ee:9c:d5:51:d0:62:32:26:88:b6:d8:eb:f9:6f:37:
99:96:6f:64:43:e7:ef:ac:b6:22:30:72:9c:67:46:
22:26:f8:35:44:3f:c2:4a:2d:8f:13:6e:47:5d:20:
64:92:db:74:d3:20:a5:38:0c:e3:36:93:f2:26:17:
3f:73:64:4f:f4:77:cf:bb:aa:30:04:c1:1a:51:cf:
3f:92:bb:2f:95:85:a6:19:e2:21:a3:72:74:0f:18:
20:d4:0c:72:e4:1d:97:3b:c5:b7:9d:7b:74:8f:1d:
53:35:7e:73:1c:3a:14:4d:01:62:41:6c:67:b2:a4:
9b:c6:c1:28:28:33:8c:2e:b8:6a:35:f1:66:92:f8:
db:bb:b2:63:08:67:60:86:ab:3b:a0:4a:fa:7f:82:
e7:7a:74:c4:8a:26:e6:da:b1:e0:e1:2f:31:9b:1c:
78:2c:dc:d0:79:bf:95:e7:2a:18:7c:ad:5e:ff:66:
de:dd:2f:6d:55:b1:a8:e3:7a:6a:e9:02:c6:86:17:
d1:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:92:39:ED:88:2B:79:12:22:11:3A:20:06:B5:58:48:45:8D:D1:28
X509v3 Authority Key Identifier:
keyid:B6:C6:9A:4A:21:5B:DE:1D:32:93:4D:DC:85:DE:AF:8F:D9:C9:44:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tsaaSiFb3h0yk03chd6vj9nJRHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/577a7b-5dcc-43a7-a89c-e3bc6b499e7b/1/tsaaSiFb3h0yk03chd6vj9nJRHk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/577a7b-5dcc-43a7-a89c-e3bc6b499e7b/1/tsaaSiFb3h0yk03chd6vj9nJRHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:66:f6:04:8c:26:73:be:55:35:81:57:1c:a5:fa:af:69:21:
c7:1f:c8:57:e3:b8:bc:62:17:1d:fd:35:b1:75:dd:6d:56:15:
3f:26:d6:11:13:05:23:7f:ac:bd:d8:ad:d7:9e:a4:38:4a:96:
da:9b:b4:c5:7b:57:3e:10:d9:ff:3a:ab:77:35:64:44:4d:bc:
01:ea:a5:5b:55:60:2a:4d:13:e8:af:ce:fb:e1:9b:51:c6:73:
6d:e0:ab:36:f6:0c:3d:08:db:30:60:8e:a0:83:6a:17:8d:93:
3e:47:a0:8c:29:2f:85:dc:d4:3f:22:1c:7c:e4:6a:37:9b:e3:
1c:d4:da:42:28:44:ea:37:1c:0e:fa:3a:59:07:a0:2f:82:5f:
a8:8d:dd:dd:af:dc:45:12:d2:bc:18:e8:25:74:77:2f:c0:aa:
69:07:a1:d0:4b:60:01:35:b4:d1:aa:f1:7e:71:a5:46:cc:2c:
15:19:6c:53:a4:b2:62:ff:52:21:35:09:65:f4:f8:b2:ef:14:
ac:f5:0c:74:76:42:15:5c:a6:39:ac:b1:8f:71:f6:c1:8d:1f:
01:7e:e6:f2:19:87:1e:75:17:3a:b6:9b:70:54:35:5b:24:33:
b1:bc:0d:1e:c6:2e:e7:d5:76:d8:61:2b:f7:0c:98:ef:87:6f:
2e:30:51:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 19:29:44 2025 by rpki-client