Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/f3695c-e340-4e2f-afeb-6b95d3c89c91/1/TK8RFQzl_p9w82yYBnR7toKxyiE.mft
File: TK8RFQzl_p9w82yYBnR7toKxyiE.mft (raw, json)
Hash identifier: w9xqFXs8+kg1yu2sgJoEJIQXx7mPvKkWP+dLZlLnpbY=
Subject key identifier: 37:DB:E3:8B:91:18:5C:1A:E4:CD:E4:29:6C:EF:66:D3:65:69:7A:88
Authority key identifier: 4C:AF:11:15:0C:E5:FE:9F:70:F3:6C:98:06:74:7B:B6:82:B1:CA:21
Certificate issuer: /CN=4caf11150ce5fe9f70f36c9806747bb682b1ca21
Certificate serial: 01984A40D74200E129A0A6CC32C604EFE858
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TK8RFQzl_p9w82yYBnR7toKxyiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/f3695c-e340-4e2f-afeb-6b95d3c89c91/1/TK8RFQzl_p9w82yYBnR7toKxyiE.mft
Manifest number: 1535
Signing time: Sun 27 Jul 2025 05:00:20 +0000
Manifest this update: Sun 27 Jul 2025 05:00:20 +0000
Manifest next update: Mon 28 Jul 2025 05:00:20 +0000
Files and hashes: 1: TK8RFQzl_p9w82yYBnR7toKxyiE.crl (hash: toSRvdWfvPlYh2JkBlS2kt093C34OXeainusO1Z8Irs=)
2: fuMrSOrjtC2Pjn0DbbjzzEXmpIM.roa (hash: 82A1cuez1ZD0Bc+8PeFu3N5JKG3dUU8f0mhUHsfa/b0=)
3: tT8Bhk3TRbD92onTtD9xdUFkuBo.roa (hash: nGHXcTt4lmnaxv72VD2WiGZwBBegRpFmPrLz3wSYepE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/f3695c-e340-4e2f-afeb-6b95d3c89c91/1/TK8RFQzl_p9w82yYBnR7toKxyiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/f3695c-e340-4e2f-afeb-6b95d3c89c91/1/TK8RFQzl_p9w82yYBnR7toKxyiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/TK8RFQzl_p9w82yYBnR7toKxyiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:40:d7:42:00:e1:29:a0:a6:cc:32:c6:04:ef:e8:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4caf11150ce5fe9f70f36c9806747bb682b1ca21
Validity
Not Before: Jul 27 05:00:20 2025 GMT
Not After : Jul 28 05:00:20 2025 GMT
Subject: CN=37dbe38b91185c1ae4cde4296cef66d365697a88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f5:cd:71:fc:4e:eb:21:55:6a:5f:2f:72:69:
ef:0f:ad:7a:a6:fe:19:88:e0:68:25:18:88:8e:a3:
ec:82:81:f8:4c:92:f2:ed:ca:db:69:b7:0b:31:73:
df:44:f5:05:dc:f4:c0:a6:a8:9c:b3:ac:7f:57:24:
3f:b2:80:c2:b2:14:6a:48:63:2b:84:c4:a6:1c:98:
82:7f:b2:89:83:6d:65:eb:e7:e2:0b:67:c4:2e:6e:
50:61:56:11:92:9b:0e:7f:05:19:1f:3b:e9:7b:4a:
51:e8:35:fe:9b:ae:5b:59:5b:21:eb:c2:a9:2d:f2:
cd:00:cf:9d:99:eb:e3:b5:25:03:aa:7f:b5:0a:aa:
be:d0:21:ae:77:fb:b0:54:8a:bb:83:a1:51:65:7c:
10:ac:8a:67:14:64:d7:86:99:6a:8f:c5:e2:c5:05:
e4:9f:94:e9:6b:ef:70:90:86:ee:c2:17:8e:0b:22:
47:2e:34:5c:b9:82:3d:26:28:30:2a:b8:5a:16:eb:
9e:30:80:be:5f:61:d9:79:17:f5:8d:e2:0c:d3:aa:
b6:70:1d:f9:0d:69:d4:77:21:50:3b:cb:e9:90:c9:
02:a2:67:4a:8d:85:00:c5:72:f9:85:10:14:e2:e0:
47:be:d8:e7:30:7b:0c:98:6d:1e:7b:60:1c:19:2f:
c3:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:DB:E3:8B:91:18:5C:1A:E4:CD:E4:29:6C:EF:66:D3:65:69:7A:88
X509v3 Authority Key Identifier:
keyid:4C:AF:11:15:0C:E5:FE:9F:70:F3:6C:98:06:74:7B:B6:82:B1:CA:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TK8RFQzl_p9w82yYBnR7toKxyiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f3695c-e340-4e2f-afeb-6b95d3c89c91/1/TK8RFQzl_p9w82yYBnR7toKxyiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f3695c-e340-4e2f-afeb-6b95d3c89c91/1/TK8RFQzl_p9w82yYBnR7toKxyiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:24:e8:c9:e3:e1:c8:40:b2:39:1f:f5:57:39:39:9c:1d:5b:
6c:cc:78:fb:3f:d4:b3:b6:93:aa:78:b6:45:7b:bb:d4:d6:17:
50:05:f1:33:36:62:5d:2b:0a:c0:90:ab:bd:8a:dd:57:c5:7e:
e3:48:9d:73:c0:29:d8:a3:9e:92:da:39:b6:e7:00:98:ec:e7:
bb:a8:36:37:d9:e1:f3:99:43:1d:5b:b9:b0:0c:9c:ae:8d:94:
6e:ad:10:88:a2:86:40:21:70:ac:97:c7:dd:1d:46:30:d4:4a:
78:3c:c2:4b:84:b8:0d:d0:29:1b:c4:2c:a3:a1:ee:b5:2b:0e:
4b:64:84:54:ce:d6:f6:75:21:31:b8:bf:57:29:06:6b:c2:40:
c8:38:7b:b8:71:67:39:50:7f:ed:41:58:15:04:88:f5:08:38:
53:03:54:bc:d8:42:21:4c:8a:6e:7c:33:9a:eb:48:31:7f:52:
73:50:14:25:8f:f4:2b:49:ff:fd:d7:5d:bd:17:b3:ab:78:48:
54:d7:8c:93:47:38:9a:9a:6a:1b:bf:03:b2:69:27:fa:fe:e9:
38:87:28:43:15:19:6f:96:41:97:c4:1a:40:11:c2:b9:8c:f4:
36:ba:b5:58:77:69:8d:6b:45:ef:de:5a:a4:ff:b5:59:05:30:
ca:6e:76:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 14:43:06 2025 by rpki-client