Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/TMxgSVsqNNiSEcwceVJOq2G6FlY.mft
File: TMxgSVsqNNiSEcwceVJOq2G6FlY.mft (raw, json)
Hash identifier: 4O24dwpqZou77/eEJuBONN4GQdk9NEpIqWkcOAWON4k=
Subject key identifier: F9:40:C3:B0:48:17:75:F7:7A:9C:43:25:90:CE:1B:F7:21:3C:36:28
Authority key identifier: 4C:CC:60:49:5B:2A:34:D8:92:11:CC:1C:79:52:4E:AB:61:BA:16:56
Certificate issuer: /CN=4ccc60495b2a34d89211cc1c79524eab61ba1656
Certificate serial: 019840626BF5CE6A0305761286420704E9FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TMxgSVsqNNiSEcwceVJOq2G6FlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/TMxgSVsqNNiSEcwceVJOq2G6FlY.mft
Manifest number: 15FC
Signing time: Fri 25 Jul 2025 07:00:48 +0000
Manifest this update: Fri 25 Jul 2025 07:00:48 +0000
Manifest next update: Sat 26 Jul 2025 07:00:48 +0000
Files and hashes: 1: LHdFFtkhND-G29Bb5TNwX3ZX6HI.roa (hash: 5JCuzcczihsYGo60q4ytQ60HO2vUMA1Wb8XrWH6WiqE=)
2: TMxgSVsqNNiSEcwceVJOq2G6FlY.crl (hash: QdW3Qx53QvBTiAwQ6T2HYXHlKXaYRJ/gGzGpglk9ytA=)
3: VYrJyKdSTfJ9aOSPJMCRhItn6O0.roa (hash: EVl6QPoQm24Wnsg0W0HBnWjfCtTCiCv6xfCekdHCwzI=)
4: XGm_swis7gPqLxLCw4_WpqKe8Ac.roa (hash: HuoRGpzlvzmJtj6Rn/56OaSHzb/3wfWOGTlv62srzB8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/TMxgSVsqNNiSEcwceVJOq2G6FlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/TMxgSVsqNNiSEcwceVJOq2G6FlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/TMxgSVsqNNiSEcwceVJOq2G6FlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:40:62:6b:f5:ce:6a:03:05:76:12:86:42:07:04:e9:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ccc60495b2a34d89211cc1c79524eab61ba1656
Validity
Not Before: Jul 25 07:00:48 2025 GMT
Not After : Jul 26 07:00:48 2025 GMT
Subject: CN=f940c3b0481775f77a9c432590ce1bf7213c3628
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:2c:e5:98:6d:ee:47:39:4b:89:db:01:79:a1:
8b:cc:06:e1:76:3a:6c:8d:65:24:ff:ad:b0:3d:71:
6c:c1:1f:92:7c:08:47:82:b7:fb:4f:8f:7c:81:15:
ac:8c:51:b2:ed:a2:d3:b4:4a:30:8e:7f:c4:18:65:
1c:4f:4f:4b:5e:b6:11:fc:61:f9:2d:2f:d2:08:df:
fc:b3:a1:ca:aa:32:e7:8e:39:29:d2:34:ed:5f:4a:
33:07:47:52:8e:57:a4:d0:ee:d7:95:09:73:a4:bb:
9b:2c:d4:da:00:45:f9:75:da:f6:a0:a8:6f:cd:67:
e1:65:0f:97:71:87:80:a3:92:2d:9c:0f:90:c5:e9:
a0:b1:c2:d0:2e:b9:76:3c:d0:fa:2c:57:1e:86:ff:
e7:48:e6:17:e9:22:79:dc:d4:8f:80:27:1d:77:25:
8e:ed:83:37:e6:71:36:d3:3c:f4:58:3b:ba:c0:7b:
d4:d7:35:bc:cc:4d:c5:25:1b:e4:a6:02:8d:52:be:
0d:03:30:2f:e6:e3:10:c1:7c:79:80:92:af:64:c1:
62:35:24:c9:1e:92:c0:35:87:cd:ef:17:d5:79:de:
c1:16:39:5f:9e:42:d3:c3:1e:5e:05:c8:7c:e7:c2:
bc:f8:94:19:4f:c4:52:e4:c8:cb:bb:9a:6b:d5:2a:
44:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:40:C3:B0:48:17:75:F7:7A:9C:43:25:90:CE:1B:F7:21:3C:36:28
X509v3 Authority Key Identifier:
keyid:4C:CC:60:49:5B:2A:34:D8:92:11:CC:1C:79:52:4E:AB:61:BA:16:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TMxgSVsqNNiSEcwceVJOq2G6FlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/TMxgSVsqNNiSEcwceVJOq2G6FlY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/TMxgSVsqNNiSEcwceVJOq2G6FlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:3b:19:42:53:1a:e1:c3:11:12:08:73:e1:1e:90:77:2f:4d:
cb:f5:65:e7:85:10:6f:0d:09:9f:76:9f:e7:c6:90:7b:be:31:
b4:01:e1:02:bc:aa:e1:2e:fa:5d:a2:3f:0c:58:63:ea:07:fe:
d9:88:98:7e:84:ef:6b:e0:cd:41:8f:f7:58:7b:fb:90:9f:c2:
a3:1c:9b:77:66:65:3a:40:28:e4:ed:50:cb:7b:9d:71:e7:a0:
b7:5e:0e:45:73:46:6c:d0:80:85:ea:3d:fe:9a:41:5f:4b:50:
e9:4d:64:7c:88:45:2d:8b:3e:82:5d:9f:93:ce:7d:85:c0:e2:
d2:ec:08:f4:ea:f5:d0:90:f5:44:8c:d0:6e:fe:5a:38:79:7e:
1c:00:13:85:45:38:31:ee:31:bc:0a:7e:19:83:25:c5:00:8b:
5d:a4:8f:24:36:f2:6e:7f:fd:ee:eb:c4:73:50:7b:7d:b9:ae:
de:93:22:a7:b4:1a:72:b3:21:df:0f:0e:e0:c6:74:dc:81:6d:
31:30:58:3f:17:9c:40:02:33:37:a9:8d:e2:5b:07:26:a3:1f:
8c:99:0a:73:cc:24:a3:06:60:60:b1:32:23:25:65:65:fe:05:
ee:09:a4:34:92:82:51:88:5a:97:8d:c5:dc:18:d7:be:4b:0d:
be:a8:b2:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 13:15:27 2025 by rpki-client