Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/TPgIAsZXmk1KEGCNz5LprOmQWxY.mft
File: TPgIAsZXmk1KEGCNz5LprOmQWxY.mft (raw, json)
Hash identifier: ehoDOILVhhkFVdlHbv4HEpmHaNpqIyTf5AtGMYfhoIE=
Subject key identifier: 4F:85:69:01:6D:D1:20:40:EE:D9:1A:1E:CF:AA:F2:73:1E:56:A6:A9
Authority key identifier: 4C:F8:08:02:C6:57:9A:4D:4A:10:60:8D:CF:92:E9:AC:E9:90:5B:16
Certificate issuer: /CN=4cf80802c6579a4d4a10608dcf92e9ace9905b16
Certificate serial: 0198492E1D0C742DB868D6C277486C48D6CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TPgIAsZXmk1KEGCNz5LprOmQWxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/TPgIAsZXmk1KEGCNz5LprOmQWxY.mft
Manifest number: 04C2
Signing time: Sun 27 Jul 2025 00:00:15 +0000
Manifest this update: Sun 27 Jul 2025 00:00:15 +0000
Manifest next update: Mon 28 Jul 2025 00:00:15 +0000
Files and hashes: 1: 3bqib6Vf9__QQmrt5lwxWaCIYDg.roa (hash: nBz+tND5F4lJlZbTQii6SKZ6iYxW0Iv4ninjHe9dyBI=)
2: TPgIAsZXmk1KEGCNz5LprOmQWxY.crl (hash: sHRXtlyoKCc2g9v6SuKHox0VVpAXYrcVWhrqB6PONcg=)
3: V3x4-1WXGWfdIqvzomsHhdbzXSs.roa (hash: zh2EOf1/AdU8UOAuoYHykO5WxiDzPCEaB7bgSCkL3Ec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/TPgIAsZXmk1KEGCNz5LprOmQWxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/TPgIAsZXmk1KEGCNz5LprOmQWxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/TPgIAsZXmk1KEGCNz5LprOmQWxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:2e:1d:0c:74:2d:b8:68:d6:c2:77:48:6c:48:d6:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cf80802c6579a4d4a10608dcf92e9ace9905b16
Validity
Not Before: Jul 27 00:00:15 2025 GMT
Not After : Jul 28 00:00:15 2025 GMT
Subject: CN=4f8569016dd12040eed91a1ecfaaf2731e56a6a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:0b:f1:76:08:dd:44:1d:f1:cf:cb:5d:d5:db:
a9:ad:1d:ad:f6:71:68:da:8d:54:80:ae:e0:0b:4f:
53:8d:89:16:d4:4a:17:c5:fd:f3:12:f4:a4:06:1a:
c9:39:b4:fc:56:d3:a6:aa:fa:37:36:bc:2d:05:59:
3c:9c:5d:94:30:47:89:cd:31:85:04:19:53:e4:a4:
e2:71:a0:f3:c6:6a:9d:5a:96:a3:41:1b:26:d1:4b:
7b:66:13:dd:91:8d:6a:52:e6:4f:2f:65:87:ac:56:
14:0f:dc:dc:1b:84:91:7e:0c:5d:94:66:a2:7d:f3:
12:7e:83:db:2c:ec:bf:d2:f8:78:d7:c7:16:97:d3:
ed:6b:5c:ae:cf:ce:04:d6:11:13:fa:e5:94:4a:50:
74:d8:9b:63:21:39:57:ea:8a:27:91:a0:3f:b1:3a:
9c:0a:9d:d7:0f:70:ed:7f:49:3d:1b:dc:98:37:71:
07:d5:d4:5e:61:6f:6a:ef:8c:c8:08:f7:4e:07:d7:
35:31:4a:cb:5d:17:a9:d9:2a:d2:71:d3:93:11:c0:
c0:e2:57:be:78:ba:52:85:b2:ac:32:11:86:31:09:
2d:55:28:96:0b:ff:94:36:81:fb:03:53:4a:f6:42:
11:27:0d:d2:33:b3:9e:eb:66:89:29:8f:73:fe:b9:
9f:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:85:69:01:6D:D1:20:40:EE:D9:1A:1E:CF:AA:F2:73:1E:56:A6:A9
X509v3 Authority Key Identifier:
keyid:4C:F8:08:02:C6:57:9A:4D:4A:10:60:8D:CF:92:E9:AC:E9:90:5B:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TPgIAsZXmk1KEGCNz5LprOmQWxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/TPgIAsZXmk1KEGCNz5LprOmQWxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/TPgIAsZXmk1KEGCNz5LprOmQWxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:a0:3f:59:d5:aa:2a:cc:68:2d:91:f8:3d:8f:f0:8c:74:0e:
e8:ed:30:81:61:ea:83:3f:fe:47:13:a7:e7:17:6a:f0:20:79:
b4:18:a4:7a:c5:69:31:29:39:31:35:12:9d:ee:a6:b8:59:eb:
cd:d7:82:d2:a3:27:51:27:6c:26:db:09:67:a8:1a:1b:39:12:
f3:18:bc:fb:7a:41:3e:8e:28:8f:fa:95:5a:00:65:e3:ff:f2:
f0:83:61:55:33:73:f8:c6:4d:18:26:33:cc:54:8e:06:ea:21:
f2:99:17:37:cb:52:d9:96:0f:84:fd:d0:d0:fe:ed:71:e3:56:
6a:94:28:cc:e5:52:17:0b:6b:b1:09:cb:2c:20:f0:ad:1f:66:
94:48:44:49:1b:51:fa:6a:8d:89:d4:de:19:0d:4d:6b:36:f4:
4f:73:5a:e5:2c:92:af:c8:b4:9b:9a:bc:6c:9a:51:1b:5b:4c:
12:7f:03:37:6d:16:4e:be:fb:2b:48:45:fc:9d:3e:59:bc:81:
a5:5d:01:7d:00:2f:d2:0e:2a:ff:b6:b4:28:03:13:b4:a5:e6:
3d:1e:f1:2d:43:df:b2:7c:0b:12:55:94:d5:2b:f8:24:8f:7e:
88:9d:49:77:8a:bb:ec:ff:46:92:96:21:23:82:fe:d3:2a:d4:
f6:0a:6b:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:41:46 2025 by rpki-client