Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/16d370-f632-4ca1-8b96-1be325f7a2e3/1/TMC300XPrlNH086YtCQbkA5KnvM.mft
File: TMC300XPrlNH086YtCQbkA5KnvM.mft (raw, json)
Hash identifier: EThkr8bh8ilApKgrDkw3ZgOqzuFS1Bj9xW0/F8MVrYY=
Subject key identifier: BA:CF:46:DB:3D:C6:EE:68:45:C3:65:71:D0:6D:53:DF:E1:C2:C4:0A
Authority key identifier: 4C:C0:B7:D3:45:CF:AE:53:47:D3:CE:98:B4:24:1B:90:0E:4A:9E:F3
Certificate issuer: /CN=4cc0b7d345cfae5347d3ce98b4241b900e4a9ef3
Certificate serial: 01984966034CBB94D2837E34B20CE2AD9E78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TMC300XPrlNH086YtCQbkA5KnvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/16d370-f632-4ca1-8b96-1be325f7a2e3/1/TMC300XPrlNH086YtCQbkA5KnvM.mft
Manifest number: 0774
Signing time: Sun 27 Jul 2025 01:01:18 +0000
Manifest this update: Sun 27 Jul 2025 01:01:18 +0000
Manifest next update: Mon 28 Jul 2025 01:01:18 +0000
Files and hashes: 1: TMC300XPrlNH086YtCQbkA5KnvM.crl (hash: lWpB3Xb+M6OhgtjcLuFxZMR+2NGXvH+t/YVGXt45dh8=)
2: Vh_JUxD0F48NbjyYRcDhXuGyEXI.roa (hash: RX3aXV1jt4pV7znP3Nr6a04cOEHqVMLgDW/kqRB9jNI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/16d370-f632-4ca1-8b96-1be325f7a2e3/1/TMC300XPrlNH086YtCQbkA5KnvM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/16d370-f632-4ca1-8b96-1be325f7a2e3/1/TMC300XPrlNH086YtCQbkA5KnvM.mft
rsync://rpki.ripe.net/repository/DEFAULT/TMC300XPrlNH086YtCQbkA5KnvM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:03:4c:bb:94:d2:83:7e:34:b2:0c:e2:ad:9e:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cc0b7d345cfae5347d3ce98b4241b900e4a9ef3
Validity
Not Before: Jul 27 01:01:18 2025 GMT
Not After : Jul 28 01:01:18 2025 GMT
Subject: CN=bacf46db3dc6ee6845c36571d06d53dfe1c2c40a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:aa:f0:3c:c8:7a:09:c9:f7:d3:38:a5:11:83:
2c:89:90:50:c8:5e:dc:4d:86:59:6b:4f:cc:c8:40:
c8:0f:2f:59:70:1e:73:68:da:5d:5b:79:d0:bf:21:
3d:86:11:60:19:08:0f:68:cc:f0:7a:ee:35:a8:3d:
4b:d5:5b:d6:9f:c6:1d:5b:85:3b:3a:47:2a:1e:c0:
83:f9:c3:61:72:6f:f3:f5:40:6f:5d:df:8a:c7:af:
63:ff:28:c4:09:48:92:77:18:db:78:28:59:ec:50:
ba:89:ee:c1:63:df:e3:c5:77:72:be:c7:56:46:80:
84:4e:58:b7:8d:67:16:10:3d:3c:ec:ef:c9:6f:20:
55:bf:24:99:a9:75:db:02:58:99:dd:c8:ac:df:79:
f2:d8:a3:4f:aa:99:98:aa:5a:ff:e7:04:32:1d:ba:
39:6a:6f:b0:88:e0:90:b3:27:b9:aa:1a:f1:2f:a7:
d9:f0:e3:f9:0d:68:2c:84:08:8b:5c:2c:ef:d3:79:
fb:9f:e4:54:58:7f:ba:1a:4b:3d:32:19:db:f9:29:
e2:3d:12:03:09:e7:89:05:de:77:32:d5:48:50:5d:
34:eb:ee:7e:4f:76:db:81:95:db:5c:ee:e5:ff:18:
96:7d:85:22:2e:24:17:b9:63:74:5b:52:fd:79:8c:
9d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:CF:46:DB:3D:C6:EE:68:45:C3:65:71:D0:6D:53:DF:E1:C2:C4:0A
X509v3 Authority Key Identifier:
keyid:4C:C0:B7:D3:45:CF:AE:53:47:D3:CE:98:B4:24:1B:90:0E:4A:9E:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TMC300XPrlNH086YtCQbkA5KnvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/16d370-f632-4ca1-8b96-1be325f7a2e3/1/TMC300XPrlNH086YtCQbkA5KnvM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/16d370-f632-4ca1-8b96-1be325f7a2e3/1/TMC300XPrlNH086YtCQbkA5KnvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:d2:49:45:58:45:d4:ab:39:1f:ed:93:3d:ec:e5:de:8e:c0:
d2:89:e4:5b:02:0d:8e:22:9a:f3:7d:4b:f4:14:e9:ef:5f:50:
75:77:b9:57:c7:2f:59:7a:e5:de:36:cb:71:18:aa:ca:9f:b9:
c1:3b:be:d9:08:54:04:b4:95:61:6a:d7:6a:ff:87:35:5b:9b:
67:2c:fa:2e:02:9d:b9:aa:a3:15:e7:91:4e:72:53:72:65:23:
49:4f:5c:d1:03:cf:a3:40:e9:42:e3:62:82:2c:25:5a:89:0c:
92:2d:2e:0a:0e:d6:06:40:d4:13:99:f7:54:e7:80:eb:d1:b4:
38:a6:5a:94:81:07:7e:79:22:a2:a4:5e:80:c6:fe:f0:80:b5:
93:94:cd:61:e2:9c:0f:85:2e:c7:fa:29:26:b2:8e:17:2a:45:
34:08:21:5c:a1:33:ff:30:a0:b5:e5:a0:10:dc:c0:86:cb:cf:
5c:95:b5:6f:63:8f:73:29:1a:a9:25:43:1a:6f:2e:76:ea:05:
8d:08:0f:11:70:4d:62:c7:17:c0:3b:17:ee:3d:be:9e:c4:52:
3b:5c:c6:93:bd:26:86:20:a3:1e:12:c9:44:e2:1e:d5:64:9e:
59:31:26:37:6c:9b:6c:f5:87:6b:d6:7c:bc:fb:5a:34:c5:10:
97:45:a9:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:32:39 2025 by rpki-client