Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.mft
File: tcfYHsTEBVxnP_VxzK0Hw6aZEF4.mft (raw, json)
Hash identifier: 6gj4Nm/uzG6bHP7RK9qU96ZZRp0USo0Q9nyfFYV49Cs=
Subject key identifier: 55:10:65:AE:CF:3D:30:9F:BC:E7:D4:90:44:4B:9B:C2:38:56:44:7F
Authority key identifier: B5:C7:D8:1E:C4:C4:05:5C:67:3F:F5:71:CC:AD:07:C3:A6:99:10:5E
Certificate issuer: /CN=b5c7d81ec4c4055c673ff571ccad07c3a699105e
Certificate serial: 0198529F71C19455B0AB149E8CF68C844258
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.mft
Manifest number: 0960
Signing time: Mon 28 Jul 2025 20:00:37 +0000
Manifest this update: Mon 28 Jul 2025 20:00:37 +0000
Manifest next update: Tue 29 Jul 2025 20:00:37 +0000
Files and hashes: 1: ZFlE4CwGV5oXv28o6nsvolZlI_Y.roa (hash: S5Q4DAjjTKxkiafJ6he6yLpO30RXNUCaXjGnLWKadCQ=)
2: a3EraYk05VPEffLc6KjCZtg0uOM.roa (hash: MkXr1kaZ6Jwr9qIlXjAkJ2Xml1hQyvkyv9rct4pH8co=)
3: fJY20OuQ1IuJYeyVIHU1EBJ0rFM.roa (hash: +X81MlM0oUdVo08v6gDJj1EWTtIWJ/ia51w5FCk6+3U=)
4: tcfYHsTEBVxnP_VxzK0Hw6aZEF4.crl (hash: as9NZztiw6JBRfKqKZ4uzMv22EPqjVprUNfI5MDXoSs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.mft
rsync://rpki.ripe.net/repository/DEFAULT/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 20:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:52:9f:71:c1:94:55:b0:ab:14:9e:8c:f6:8c:84:42:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5c7d81ec4c4055c673ff571ccad07c3a699105e
Validity
Not Before: Jul 28 20:00:37 2025 GMT
Not After : Jul 29 20:00:37 2025 GMT
Subject: CN=551065aecf3d309fbce7d490444b9bc23856447f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5d:01:9a:47:bd:28:b8:01:ee:19:03:02:42:
2b:b7:ae:e0:75:0a:6d:e9:b2:20:4c:ea:8b:ac:d8:
e7:10:61:7c:b1:e9:15:27:a0:bc:8a:9b:18:66:82:
f9:35:1c:ea:8a:80:90:a8:4e:4a:ab:56:39:1b:3e:
7b:70:a3:2d:e8:77:4e:c5:07:8e:ce:bd:67:3c:c4:
a1:50:64:a1:be:60:23:2e:42:f8:32:9f:a9:19:72:
cc:ea:98:20:65:b7:88:96:85:97:35:f1:8f:bc:ef:
49:e4:74:b4:44:12:10:ab:b8:ea:a1:d0:77:b8:a2:
58:57:c9:17:dc:3c:03:5f:8c:75:cf:29:ec:d0:c3:
82:01:82:17:f4:ff:f4:36:3e:4b:0e:81:65:06:31:
65:11:4e:0c:61:e4:e4:21:c9:19:71:0b:a7:76:57:
6f:02:f3:7a:d3:ae:62:d2:d2:d5:d6:50:42:f2:07:
84:3c:55:4f:03:82:93:7d:38:eb:36:fd:a6:9b:f7:
1c:3a:79:1b:92:32:76:c2:24:f8:12:5a:fb:67:81:
92:59:f9:7c:2e:1b:3b:b5:22:ad:f4:86:36:db:ca:
27:51:2d:2b:04:d5:f4:26:e7:ed:47:dc:97:8f:91:
b0:b5:7f:60:19:db:70:91:0f:16:f6:9f:0f:a1:21:
dc:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:10:65:AE:CF:3D:30:9F:BC:E7:D4:90:44:4B:9B:C2:38:56:44:7F
X509v3 Authority Key Identifier:
keyid:B5:C7:D8:1E:C4:C4:05:5C:67:3F:F5:71:CC:AD:07:C3:A6:99:10:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:c9:28:b7:e5:3f:41:d8:d1:ae:c2:e8:8b:ea:42:f7:df:6f:
68:54:38:4b:5b:03:c2:a9:86:a6:60:0f:6f:cd:09:b9:ca:62:
34:44:99:17:f9:cb:3f:80:03:cf:57:ec:2e:09:ce:bb:0c:3e:
29:f4:2f:87:4a:af:8a:a4:72:f6:a7:26:ca:e7:b0:51:ab:ca:
ac:d7:02:1b:80:bc:56:aa:ab:32:05:8d:d3:88:56:a6:e1:ab:
3a:c4:2d:ce:ef:5c:56:5a:4b:57:bd:a8:cd:67:43:d9:02:c4:
67:dd:9d:22:1f:05:c1:c2:fb:a5:16:d4:93:c5:d0:b4:14:38:
85:0a:22:07:98:8b:aa:1d:00:21:0e:92:ee:7d:c6:c3:2e:fc:
22:e2:70:e4:32:af:82:17:3f:7e:fa:88:41:35:8d:1a:4e:e1:
42:a2:4e:b9:60:15:85:19:95:8c:c2:10:1d:86:1a:49:43:87:
89:4c:00:b4:2c:ac:38:1b:0a:b6:6a:98:59:16:60:9f:cd:1e:
e5:af:bb:ef:f5:d2:89:d4:e1:28:90:8c:e8:58:11:87:00:94:
12:5e:ef:e8:b4:d7:3d:f0:bb:b4:62:0e:f4:39:e9:07:28:99:
93:bb:bf:ed:40:bc:13:35:78:c8:95:19:18:c0:03:38:0f:d4:
b2:42:81:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:07:47 2025 by rpki-client