Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/f56fa9-f9fe-40f5-a853-832ab844172b/1/TcAjDNQV2G6G_YiTE0KHzlSmh9c.mft
File: TcAjDNQV2G6G_YiTE0KHzlSmh9c.mft (raw, json)
Hash identifier: RNffzQcGlLv0V3fehoVInVDZz7louzuIfJzvz18x+7w=
Subject key identifier: 3A:FF:2C:FE:A3:5D:B2:04:01:44:F7:89:55:9E:EC:98:8C:5C:65:15
Authority key identifier: 4D:C0:23:0C:D4:15:D8:6E:86:FD:88:93:13:42:87:CE:54:A6:87:D7
Certificate issuer: /CN=4dc0230cd415d86e86fd8893134287ce54a687d7
Certificate serial: 01984A0A4FB9DA8E7C3A145C820C5186E5F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TcAjDNQV2G6G_YiTE0KHzlSmh9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/f56fa9-f9fe-40f5-a853-832ab844172b/1/TcAjDNQV2G6G_YiTE0KHzlSmh9c.mft
Manifest number: C7
Signing time: Sun 27 Jul 2025 04:00:46 +0000
Manifest this update: Sun 27 Jul 2025 04:00:46 +0000
Manifest next update: Mon 28 Jul 2025 04:00:46 +0000
Files and hashes: 1: TcAjDNQV2G6G_YiTE0KHzlSmh9c.crl (hash: Qkuk0LfO2fdTW7FNJKT3/7VlSIFoDkppKgqmAJTKo/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/f56fa9-f9fe-40f5-a853-832ab844172b/1/TcAjDNQV2G6G_YiTE0KHzlSmh9c.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/f56fa9-f9fe-40f5-a853-832ab844172b/1/TcAjDNQV2G6G_YiTE0KHzlSmh9c.mft
rsync://rpki.ripe.net/repository/DEFAULT/TcAjDNQV2G6G_YiTE0KHzlSmh9c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:0a:4f:b9:da:8e:7c:3a:14:5c:82:0c:51:86:e5:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dc0230cd415d86e86fd8893134287ce54a687d7
Validity
Not Before: Jul 27 04:00:46 2025 GMT
Not After : Jul 28 04:00:46 2025 GMT
Subject: CN=3aff2cfea35db2040144f789559eec988c5c6515
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2c:d0:5c:13:20:00:e5:80:cd:8c:4b:2a:70:
48:4d:e4:38:ce:6c:a1:30:2b:3b:bb:05:bb:d7:5b:
32:2b:78:2c:22:f5:07:c4:7e:f6:b8:a8:db:a4:10:
f6:e9:69:7a:ec:0c:53:c4:8e:b9:42:e3:c2:3b:eb:
af:25:ee:fb:0c:bc:e2:a4:a8:02:ee:f7:fb:01:8b:
f7:c7:2f:c7:94:33:0c:32:c0:14:2e:63:8c:68:44:
de:1f:22:5c:65:f9:2a:f5:77:35:d8:ac:59:99:4e:
07:b7:cf:d6:56:bf:fd:df:b5:69:0c:1d:69:54:09:
26:78:8d:d5:20:d2:60:52:6b:a5:b6:5c:13:ae:cc:
ee:af:c3:ae:ee:66:fe:e7:e7:04:a4:09:21:fd:ed:
5c:51:c1:82:45:aa:d7:3c:82:e2:5b:cf:42:11:c5:
a8:22:4d:50:14:28:65:79:8e:19:ca:7e:ca:cb:1c:
51:9f:90:68:86:a6:c5:a0:fb:5c:db:ba:0e:c5:27:
a8:f4:39:71:7f:59:97:56:b2:41:69:81:6d:c6:a9:
2a:f1:6a:b6:b1:19:7b:c5:7d:99:b4:c2:bb:9a:2a:
e4:34:7d:27:a7:fe:e5:ba:8c:db:c7:08:29:b8:5b:
62:b2:62:75:1e:96:3d:8a:2d:29:2d:c0:10:53:c1:
81:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:FF:2C:FE:A3:5D:B2:04:01:44:F7:89:55:9E:EC:98:8C:5C:65:15
X509v3 Authority Key Identifier:
keyid:4D:C0:23:0C:D4:15:D8:6E:86:FD:88:93:13:42:87:CE:54:A6:87:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TcAjDNQV2G6G_YiTE0KHzlSmh9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/f56fa9-f9fe-40f5-a853-832ab844172b/1/TcAjDNQV2G6G_YiTE0KHzlSmh9c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/f56fa9-f9fe-40f5-a853-832ab844172b/1/TcAjDNQV2G6G_YiTE0KHzlSmh9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:8f:24:52:5e:0d:64:ad:69:8e:1b:be:51:d8:41:2e:6c:73:
82:b7:17:97:22:3b:d0:35:b1:9d:90:07:87:e7:85:95:c3:09:
18:05:04:22:a9:da:9b:78:a5:96:13:b7:4a:85:c8:43:28:f2:
49:15:07:74:5f:68:97:93:bc:a5:22:89:fc:1b:56:92:c1:24:
85:d7:74:4d:be:d0:b9:d0:9b:12:03:78:36:0f:e3:62:67:b3:
d5:8c:a2:de:d7:bd:29:86:89:ca:31:cb:99:03:8f:68:3a:af:
5e:2b:dc:0f:75:c2:78:dd:90:e0:e4:ba:89:ca:94:30:76:e7:
f9:2e:bc:15:70:67:72:54:28:2d:18:dd:49:d5:21:6e:cb:05:
fa:b9:30:ee:bc:3e:c2:f5:99:fb:9e:7e:5c:ad:eb:36:0c:5f:
96:f1:ff:5c:c6:9f:a9:ec:71:29:57:7f:6c:2c:a0:8e:9e:a7:
0a:c4:0d:d3:62:92:4a:49:d9:d5:11:28:49:6f:13:e1:a1:db:
f0:df:b2:c8:45:3f:28:78:6c:7c:23:a9:00:eb:b0:07:22:74:
63:f4:dd:23:f1:34:79:ce:37:80:95:16:7f:d7:03:c2:bf:ec:
d2:ab:b9:eb:6d:ea:5a:0f:d6:82:91:d9:ed:ac:b8:46:36:25:
2e:f3:d4:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:47:12 2025 by rpki-client