Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/59dcbd-78bf-48ed-954d-ccaa6eb3c513/1/TBAf9Rtn7v4NZ4AOdtNgbfTJRyE.mft
File: TBAf9Rtn7v4NZ4AOdtNgbfTJRyE.mft (raw, json)
Hash identifier: 46xgDpOk/JEj1fljLoiFUIhTJ/A7GStfhcTG48BUV0A=
Subject key identifier: B7:7B:1F:F9:3F:06:50:26:1B:9E:9E:63:11:57:67:47:B7:3F:94:DF
Authority key identifier: 4C:10:1F:F5:1B:67:EE:FE:0D:67:80:0E:76:D3:60:6D:F4:C9:47:21
Certificate issuer: /CN=4c101ff51b67eefe0d67800e76d3606df4c94721
Certificate serial: 019849D35663D8F4DC65498DD5FB95EE5E0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TBAf9Rtn7v4NZ4AOdtNgbfTJRyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/59dcbd-78bf-48ed-954d-ccaa6eb3c513/1/TBAf9Rtn7v4NZ4AOdtNgbfTJRyE.mft
Manifest number: 0572
Signing time: Sun 27 Jul 2025 03:00:43 +0000
Manifest this update: Sun 27 Jul 2025 03:00:43 +0000
Manifest next update: Mon 28 Jul 2025 03:00:43 +0000
Files and hashes: 1: TBAf9Rtn7v4NZ4AOdtNgbfTJRyE.crl (hash: 7qm6eKQkhk1KN+qTR0xjEylftl6kpNvf7JyHIvHumhE=)
2: cri3ULh6Rj8r6ZDUmdSIkYBmP1o.roa (hash: Lisc7jMorS/4tIMBDxqrdkl7lwX530FUMpT0ozDszqE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/59dcbd-78bf-48ed-954d-ccaa6eb3c513/1/TBAf9Rtn7v4NZ4AOdtNgbfTJRyE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/59dcbd-78bf-48ed-954d-ccaa6eb3c513/1/TBAf9Rtn7v4NZ4AOdtNgbfTJRyE.mft
rsync://rpki.ripe.net/repository/DEFAULT/TBAf9Rtn7v4NZ4AOdtNgbfTJRyE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:56:63:d8:f4:dc:65:49:8d:d5:fb:95:ee:5e:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c101ff51b67eefe0d67800e76d3606df4c94721
Validity
Not Before: Jul 27 03:00:43 2025 GMT
Not After : Jul 28 03:00:43 2025 GMT
Subject: CN=b77b1ff93f0650261b9e9e6311576747b73f94df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d0:85:29:a4:ce:1e:37:5b:21:4e:13:58:d1:
fc:7e:ff:ed:f4:91:ab:3a:4b:d2:03:3b:be:f3:46:
a1:e3:03:7c:28:ba:7f:07:6c:dc:45:de:26:ea:46:
b5:77:f9:b3:5a:ad:5d:5d:b0:4e:24:00:ff:1b:40:
95:bc:a1:d4:ec:f9:2d:b6:7d:87:6c:c0:9a:b4:ae:
4a:e2:c5:22:d5:c4:7a:b5:fb:64:c3:3f:ee:98:b3:
80:b2:5a:80:63:6d:9b:2f:ce:6d:0b:db:b9:c1:55:
c6:95:97:e4:54:f0:cc:76:58:7f:ed:95:2e:61:b5:
26:f7:03:23:3c:08:12:f4:2f:95:2f:56:98:16:71:
f1:a8:5a:78:cb:dc:0c:3a:90:b6:13:8d:78:79:34:
da:1b:e2:ce:6b:1f:c9:4c:0a:8c:ea:2b:99:9c:ce:
13:3e:8a:40:75:86:08:ce:d8:b3:53:7d:a6:9b:b0:
5e:b3:df:28:1d:e3:17:5a:df:5f:c3:36:98:a0:d1:
de:b5:3a:41:d9:2d:ba:91:19:73:cb:b4:8f:97:af:
ca:65:c2:04:42:83:0d:ce:77:a4:31:de:5a:42:60:
84:55:70:e6:ee:5e:60:71:94:72:fe:47:8c:0e:18:
b7:be:6b:d2:6b:fe:a6:b0:27:2e:5c:51:fa:59:2b:
6a:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:7B:1F:F9:3F:06:50:26:1B:9E:9E:63:11:57:67:47:B7:3F:94:DF
X509v3 Authority Key Identifier:
keyid:4C:10:1F:F5:1B:67:EE:FE:0D:67:80:0E:76:D3:60:6D:F4:C9:47:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TBAf9Rtn7v4NZ4AOdtNgbfTJRyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/59dcbd-78bf-48ed-954d-ccaa6eb3c513/1/TBAf9Rtn7v4NZ4AOdtNgbfTJRyE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/59dcbd-78bf-48ed-954d-ccaa6eb3c513/1/TBAf9Rtn7v4NZ4AOdtNgbfTJRyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:c2:4c:7e:40:45:eb:3c:0e:cb:22:8e:df:ef:f2:c9:d9:85:
13:82:15:da:eb:2a:f7:45:6c:70:26:ea:d6:ff:6c:a0:fe:db:
33:43:cf:2c:02:10:4f:13:78:af:06:4d:82:73:0f:ca:44:d2:
fc:d8:e4:eb:1e:e5:eb:73:f6:dd:29:60:b8:28:74:6f:ee:20:
b3:cd:d7:ba:be:43:37:8a:e5:09:44:a1:1e:78:96:7e:8e:69:
85:8a:7e:34:0a:20:41:c5:c1:50:4a:3e:bb:9f:75:62:f4:9a:
0b:96:91:0d:58:60:1d:a2:36:91:f1:12:4c:3e:9e:0e:7b:8d:
59:c6:5c:6e:76:0d:b2:79:cf:e5:92:8e:5c:1f:c6:58:9a:83:
38:7c:1b:0f:58:73:1d:08:53:98:1c:43:9c:31:97:6e:61:21:
84:f5:4d:50:f4:07:d9:d8:15:f9:f9:36:47:b5:07:31:ea:90:
7c:d9:1d:9e:ef:c5:85:b6:aa:86:cf:cd:f0:eb:55:d3:33:ed:
21:a8:f1:51:a3:e0:92:19:c4:0e:5f:a9:b5:38:3f:11:2d:33:
0d:d0:77:04:c5:2f:f7:61:2c:5b:c1:c3:a4:cd:56:61:f6:df:
73:56:2c:77:9c:24:6f:49:22:bd:fd:20:1d:8c:90:8e:e3:ce:
72:b6:f8:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:54:02 2025 by rpki-client