Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/a35f7f-2194-46d3-91bd-cc0f50bda159/1/TN1pc0k84MOEm4uRm3UCul-gE9c.mft
File: TN1pc0k84MOEm4uRm3UCul-gE9c.mft (raw, json)
Hash identifier: vD/wFHUgbGvckZxsUyIPSAHCj1sWLefFeQ3zFD2L2Ug=
Subject key identifier: 23:91:BE:B7:AC:16:81:D6:38:35:90:86:A6:DF:8F:21:8F:6C:0F:15
Authority key identifier: 4C:DD:69:73:49:3C:E0:C3:84:9B:8B:91:9B:75:02:BA:5F:A0:13:D7
Certificate issuer: /CN=4cdd6973493ce0c3849b8b919b7502ba5fa013d7
Certificate serial: 0198586B1AE9CFDE97539374AED503665F08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TN1pc0k84MOEm4uRm3UCul-gE9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/a35f7f-2194-46d3-91bd-cc0f50bda159/1/TN1pc0k84MOEm4uRm3UCul-gE9c.mft
Manifest number: 0291
Signing time: Tue 29 Jul 2025 23:01:10 +0000
Manifest this update: Tue 29 Jul 2025 23:01:10 +0000
Manifest next update: Wed 30 Jul 2025 23:01:10 +0000
Files and hashes: 1: TN1pc0k84MOEm4uRm3UCul-gE9c.crl (hash: LxFLKaLZSTPMWsBzEyFmNmYxPMFUceo+TMAEBLdDdd8=)
2: iTC7AIloz6nQaL3mT_rFGYZ-wig.roa (hash: fesaTZGLmhO2WzwSQegYz6bFqw2Ey8O4XUX49y7XEFA=)
3: uAJKiTWW3Ub4f2F2pRQzTM4uTxQ.roa (hash: QYC9wZJDQP4jalSd59izpnWdNPoZL5WfK7FyvYaliJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/a35f7f-2194-46d3-91bd-cc0f50bda159/1/TN1pc0k84MOEm4uRm3UCul-gE9c.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/a35f7f-2194-46d3-91bd-cc0f50bda159/1/TN1pc0k84MOEm4uRm3UCul-gE9c.mft
rsync://rpki.ripe.net/repository/DEFAULT/TN1pc0k84MOEm4uRm3UCul-gE9c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:58:6b:1a:e9:cf:de:97:53:93:74:ae:d5:03:66:5f:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cdd6973493ce0c3849b8b919b7502ba5fa013d7
Validity
Not Before: Jul 29 23:01:10 2025 GMT
Not After : Jul 30 23:01:10 2025 GMT
Subject: CN=2391beb7ac1681d638359086a6df8f218f6c0f15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:0e:da:b6:11:1f:b0:01:02:71:ff:6a:b2:bc:
a5:33:b2:5f:6c:89:a2:84:a7:a4:f3:0a:d2:c7:5f:
af:f6:77:fc:3e:3b:38:cc:f1:9b:bd:7f:ae:bc:99:
2e:5a:43:95:0f:0c:1c:77:14:39:db:7a:f9:02:fb:
94:68:55:fa:b4:c3:a0:66:18:63:43:ec:b1:01:0c:
68:f3:f8:8e:6b:9a:ae:9c:e5:a7:ae:e8:b0:28:86:
50:79:47:6d:8b:52:8f:27:ec:fe:23:6e:36:a9:89:
3d:ca:57:9c:0c:38:3a:1c:40:c0:c7:d6:80:1b:a9:
d4:09:b8:dc:73:62:17:0a:03:87:b0:91:f8:d2:9f:
a7:81:44:c2:a0:21:ca:35:2d:7a:34:fe:6b:ad:93:
48:de:13:27:3f:a5:ea:3e:34:2d:6d:6f:4c:0e:6c:
ea:e9:fc:e1:1e:59:17:45:2d:33:03:d6:f6:59:87:
bb:41:77:da:f5:b8:f4:a6:df:dd:23:c3:7d:36:5d:
ee:5c:3d:5d:4f:ee:66:29:a0:f8:9f:c4:4a:8b:53:
c6:5c:34:a8:82:19:e6:a7:8b:61:2b:3f:36:9a:c5:
a7:65:a6:7b:15:34:a7:e2:49:9f:11:73:59:1e:8e:
40:79:59:c8:a5:7f:52:be:8a:2d:c2:6c:29:58:8e:
a3:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:91:BE:B7:AC:16:81:D6:38:35:90:86:A6:DF:8F:21:8F:6C:0F:15
X509v3 Authority Key Identifier:
keyid:4C:DD:69:73:49:3C:E0:C3:84:9B:8B:91:9B:75:02:BA:5F:A0:13:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TN1pc0k84MOEm4uRm3UCul-gE9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a35f7f-2194-46d3-91bd-cc0f50bda159/1/TN1pc0k84MOEm4uRm3UCul-gE9c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a35f7f-2194-46d3-91bd-cc0f50bda159/1/TN1pc0k84MOEm4uRm3UCul-gE9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:4e:6d:1e:b8:4d:b3:be:dd:97:d9:62:c0:7f:ba:6f:6c:bf:
85:60:23:a4:e3:8b:f0:76:ff:9e:7f:41:3c:4b:60:1c:3b:90:
e3:f6:8f:f7:f8:e2:9c:b9:fb:17:34:f8:a7:09:f8:07:72:7b:
c0:03:15:7e:13:83:12:e0:e9:b0:1c:56:04:d0:04:13:6d:1d:
88:e7:f6:a5:46:79:ac:fc:27:be:01:c5:1c:0b:fd:7a:9a:f1:
ac:90:11:bc:4b:99:a5:4e:6b:73:5f:5e:6d:16:a5:72:89:fd:
52:df:10:36:fa:57:69:79:be:6c:78:45:0d:13:13:6b:65:20:
01:f8:eb:e4:fa:39:73:4a:ca:8f:f8:7a:b5:44:e8:0b:a5:32:
c0:b0:de:45:69:02:19:26:9d:ac:f5:a2:45:6b:48:74:b3:cf:
52:bc:29:34:48:47:c5:45:6c:ef:e2:29:b8:74:50:dc:aa:5d:
24:45:f1:69:f3:bd:9e:a0:db:54:0a:e9:41:db:a2:cf:90:c7:
5a:89:05:c1:4b:e6:be:d2:51:83:66:07:78:8c:d1:e4:5a:c9:
50:77:27:e5:5a:67:0d:6e:20:33:29:1b:e2:8b:eb:5d:98:ad:
55:b0:aa:9d:d1:e1:b1:70:ca:8b:f7:b6:50:db:36:6b:6b:b7:
41:6e:47:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 05:21:15 2025 by rpki-client