Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/3965b0-fee9-49bf-a54d-a8d838438d8a/1/TkwTiahJ713MuDA3A7iYyR5j0U8.mft
File: TkwTiahJ713MuDA3A7iYyR5j0U8.mft (raw, json)
Hash identifier: Owj81p8LzZm++lxZctLfJEtsrnCM97d6ZziOvnJYOg8=
Subject key identifier: 6D:7D:F9:95:FF:16:73:58:40:59:72:A5:E5:28:3A:49:71:19:E5:98
Authority key identifier: 4E:4C:13:89:A8:49:EF:5D:CC:B8:30:37:03:B8:98:C9:1E:63:D1:4F
Certificate issuer: /CN=4e4c1389a849ef5dccb8303703b898c91e63d14f
Certificate serial: 01984A41599453C3E558566427CC92D5CA72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TkwTiahJ713MuDA3A7iYyR5j0U8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/3965b0-fee9-49bf-a54d-a8d838438d8a/1/TkwTiahJ713MuDA3A7iYyR5j0U8.mft
Manifest number: 0EFD
Signing time: Sun 27 Jul 2025 05:00:53 +0000
Manifest this update: Sun 27 Jul 2025 05:00:53 +0000
Manifest next update: Mon 28 Jul 2025 05:00:53 +0000
Files and hashes: 1: TkwTiahJ713MuDA3A7iYyR5j0U8.crl (hash: SACj40aI72iWr0jo9txpM5sRhMY9eAaEBOGf1KfTMVA=)
2: Y2AwHZ4LjgCyZ7c3VA39uJ1uOJA.roa (hash: jN16HvDKq8wIqjLIVTWw0neRTt/pe6lIdR9PV+gdOvM=)
3: oslVCzjJDktKYJryYSyNdvUnSkk.roa (hash: SorYVglRqEFAzZq8qsgmev36Xx5W3U58FYVpLFp4hYs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/3965b0-fee9-49bf-a54d-a8d838438d8a/1/TkwTiahJ713MuDA3A7iYyR5j0U8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/3965b0-fee9-49bf-a54d-a8d838438d8a/1/TkwTiahJ713MuDA3A7iYyR5j0U8.mft
rsync://rpki.ripe.net/repository/DEFAULT/TkwTiahJ713MuDA3A7iYyR5j0U8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:41:59:94:53:c3:e5:58:56:64:27:cc:92:d5:ca:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e4c1389a849ef5dccb8303703b898c91e63d14f
Validity
Not Before: Jul 27 05:00:53 2025 GMT
Not After : Jul 28 05:00:53 2025 GMT
Subject: CN=6d7df995ff167358405972a5e5283a497119e598
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:a7:e4:06:de:e8:01:db:2a:19:da:b0:54:c5:
3a:71:eb:25:56:bb:27:3d:6f:44:14:c7:e9:38:f6:
ad:e0:61:e0:25:17:25:0a:b4:0a:3e:53:a1:da:5f:
83:d6:aa:08:cb:30:e1:85:d9:f5:22:f3:6a:7e:fc:
00:7c:51:88:87:4f:30:96:26:88:10:d3:cd:97:f5:
34:50:2d:68:59:17:ef:85:30:ce:66:63:b2:49:1f:
f7:08:71:3f:73:a9:b6:dd:05:6a:ee:d5:67:b4:bf:
62:4e:1c:5a:eb:cf:d7:25:4a:55:56:e2:fc:d0:fe:
65:6d:e5:bb:6b:22:db:91:87:70:b8:a1:35:7a:82:
9c:1b:4e:28:ad:11:50:7e:bf:a9:2f:07:25:b5:07:
75:d0:b3:84:2e:e8:86:27:7e:7d:5b:e6:dd:58:06:
8d:6d:b4:74:6f:b3:33:4c:b9:18:cc:40:f7:cd:c9:
49:fc:02:56:7b:a2:27:5c:b3:ee:04:37:09:b4:40:
b9:82:ea:0b:ab:3b:74:b0:98:e2:48:af:97:ba:a2:
de:c2:31:55:b2:de:e2:31:ce:9a:62:92:1b:8e:5e:
36:45:3d:23:f0:65:09:e5:4f:42:24:06:fb:6c:81:
52:98:84:1c:c0:ba:8a:9a:d8:81:2d:ed:96:76:0d:
bd:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:7D:F9:95:FF:16:73:58:40:59:72:A5:E5:28:3A:49:71:19:E5:98
X509v3 Authority Key Identifier:
keyid:4E:4C:13:89:A8:49:EF:5D:CC:B8:30:37:03:B8:98:C9:1E:63:D1:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TkwTiahJ713MuDA3A7iYyR5j0U8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3965b0-fee9-49bf-a54d-a8d838438d8a/1/TkwTiahJ713MuDA3A7iYyR5j0U8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3965b0-fee9-49bf-a54d-a8d838438d8a/1/TkwTiahJ713MuDA3A7iYyR5j0U8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:58:76:2e:71:de:69:10:89:bc:5b:90:5d:8b:cf:39:dd:f6:
09:8c:8d:df:ff:3c:99:84:df:0d:b3:b5:e8:3d:12:3b:d9:6f:
0b:92:9e:40:a8:c3:89:15:67:22:f5:90:b0:19:e9:10:57:90:
80:03:38:4f:49:9c:76:d4:c8:51:aa:c5:eb:96:0f:b2:09:23:
2f:c5:ba:d2:e4:f3:f3:eb:bf:dc:3b:7f:43:4a:76:d5:5a:30:
2d:85:d7:3e:6a:a9:7d:bd:ed:b9:25:b2:13:d9:c9:86:51:c0:
8f:28:02:34:58:f9:9b:a1:c0:6d:c8:2d:fa:1e:ae:c4:b1:e9:
d5:16:91:1e:4e:e9:f9:b9:72:f4:d0:dd:d8:81:66:94:26:f0:
46:8d:89:a9:e6:d4:8f:ef:24:32:45:29:f9:50:16:b0:3a:b4:
0a:28:bb:aa:35:ee:89:0a:f3:c6:b4:4f:6f:43:e5:78:e4:a1:
13:20:03:36:22:88:87:58:3a:21:15:13:ad:2f:01:d6:23:16:
d8:c6:26:ac:4a:a3:ce:66:d8:fd:4b:63:84:ba:65:35:5d:5b:
1a:d9:7f:be:e1:e4:92:d2:63:32:28:ab:ba:7b:88:ba:9f:27:
97:85:11:4d:32:b4:b5:c9:f9:af:48:61:87:50:a3:85:f3:44:
5d:dd:1e:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 13:12:17 2025 by rpki-client