Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/a831c0-457c-4ba8-bec7-e251109bfd19/1/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.mft
File: TaNxHcXeRfL1tHkBZZ6VbZOCcv4.mft (raw, json)
Hash identifier: x3ayb3+zF8IP8B3YGamGOH+i352IJbJ7vmbCVfEW/ZE=
Subject key identifier: 96:61:C3:01:19:D6:C1:F0:73:8A:92:33:F4:A1:0D:A2:B2:F0:A6:B7
Authority key identifier: 4D:A3:71:1D:C5:DE:45:F2:F5:B4:79:01:65:9E:95:6D:93:82:72:FE
Certificate issuer: /CN=4da3711dc5de45f2f5b47901659e956d938272fe
Certificate serial: 019844E39B40E8C3E27E6B62CD399983FC0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/a831c0-457c-4ba8-bec7-e251109bfd19/1/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.mft
Manifest number: 15FF
Signing time: Sat 26 Jul 2025 04:00:23 +0000
Manifest this update: Sat 26 Jul 2025 04:00:23 +0000
Manifest next update: Sun 27 Jul 2025 04:00:23 +0000
Files and hashes: 1: 7YKaewqyZbI9lVFIivFUL2FPVzU.roa (hash: wf42n7crwFg9XaXHUPxEE3NTHiwbzXO1xRDVNEMLG6A=)
2: TaNxHcXeRfL1tHkBZZ6VbZOCcv4.crl (hash: NWCFXWnweVxqc2jlIxuvwkXCihM7UqezSLg3qOY8Cds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/a831c0-457c-4ba8-bec7-e251109bfd19/1/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/a831c0-457c-4ba8-bec7-e251109bfd19/1/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:44:e3:9b:40:e8:c3:e2:7e:6b:62:cd:39:99:83:fc:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4da3711dc5de45f2f5b47901659e956d938272fe
Validity
Not Before: Jul 26 04:00:23 2025 GMT
Not After : Jul 27 04:00:23 2025 GMT
Subject: CN=9661c30119d6c1f0738a9233f4a10da2b2f0a6b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:62:68:0b:15:42:16:2f:54:23:e5:17:80:01:
92:1c:fc:f8:83:be:e1:fa:dc:dd:a5:eb:33:f8:01:
c2:e7:47:11:09:01:2b:f9:0b:15:e3:09:29:b9:f7:
40:6a:66:c6:f1:a0:e6:5e:6a:d9:c7:8f:27:2d:e6:
d3:bf:9a:2d:f4:f7:8f:3c:57:a2:79:33:f7:1b:f0:
7d:ed:56:62:a9:d6:d5:f6:f5:46:18:72:82:9e:42:
9c:8f:f0:da:f3:c7:79:62:cd:3b:35:6a:4e:28:96:
a0:44:2b:88:4e:08:49:16:b4:6f:b1:f9:14:8e:6a:
16:3c:00:f3:18:85:7d:a7:bd:48:15:56:fa:a9:75:
76:75:ab:d2:11:e5:e8:da:20:54:7c:55:41:5e:b2:
1d:61:08:83:60:24:d5:87:1c:b8:08:fe:dc:c9:a0:
dd:c9:df:c2:2d:50:bd:60:c3:ab:16:c3:9c:56:15:
f5:41:ba:83:1e:46:ec:d1:5a:0a:91:01:0c:c6:aa:
9f:88:b4:dd:0a:41:0a:b9:17:74:d2:ed:00:a4:db:
83:49:9a:cc:e6:2d:fd:94:e8:08:2a:62:1f:9a:b9:
0b:eb:41:ed:f4:6d:88:28:02:54:22:65:6a:e3:bd:
1f:f7:7b:00:2d:0d:25:fc:9f:e5:73:3f:4d:b7:3d:
dd:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:61:C3:01:19:D6:C1:F0:73:8A:92:33:F4:A1:0D:A2:B2:F0:A6:B7
X509v3 Authority Key Identifier:
keyid:4D:A3:71:1D:C5:DE:45:F2:F5:B4:79:01:65:9E:95:6D:93:82:72:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/a831c0-457c-4ba8-bec7-e251109bfd19/1/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/a831c0-457c-4ba8-bec7-e251109bfd19/1/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:70:1e:76:fe:a3:4e:c2:14:09:02:58:92:e4:45:31:54:8b:
58:9e:94:80:7a:6c:d8:db:7e:7a:83:01:a6:ee:cc:f0:d7:c1:
d6:71:30:84:f0:90:3b:cc:01:1c:1f:e3:87:1c:2a:53:93:09:
d2:c8:37:07:55:a6:d5:80:79:19:57:08:81:0b:01:8d:29:e7:
03:85:f1:98:92:47:bb:ed:63:46:21:fb:08:9b:55:67:0c:b0:
df:0b:04:80:19:82:cb:6a:25:bc:8a:e7:f0:b7:91:73:f2:13:
56:89:e3:1a:54:df:f3:e5:c2:9b:7e:b4:f4:47:f8:30:41:b5:
bf:33:df:c3:35:3b:cc:53:52:a7:85:eb:2a:c5:c4:43:eb:01:
6d:4e:e9:a6:66:16:50:ff:d7:4a:07:d5:7b:e3:9f:73:ae:c0:
ee:f6:51:de:7d:4a:f6:7a:77:14:1b:f0:9b:91:61:2d:35:9f:
b3:15:ff:c9:20:65:fc:0c:43:7e:1a:40:1f:ad:c3:5e:47:f3:
29:1d:24:46:a2:98:b1:80:cf:20:dd:f8:8e:91:55:60:3c:cf:
69:0b:77:47:8e:e7:b8:38:d4:61:70:a1:79:09:fe:3e:71:c2:
64:81:cf:92:b0:b3:ad:48:80:72:70:37:41:ad:c5:42:97:2f:
81:04:60:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:57:00 2025 by rpki-client