Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.mft
File: TSPi7bMh4ailzp7j4tlapA8N6KA.mft (raw, json)
Hash identifier: 113KrEgddpAyr7uGoUT40W2fiJtyUDDR16NgHrHdNS0=
Subject key identifier: B5:5F:B7:7F:0F:EF:F2:88:C0:44:C4:1E:F5:E9:65:09:26:F8:AE:FC
Authority key identifier: 4D:23:E2:ED:B3:21:E1:A8:A5:CE:9E:E3:E2:D9:5A:A4:0F:0D:E8:A0
Certificate issuer: /CN=4d23e2edb321e1a8a5ce9ee3e2d95aa40f0de8a0
Certificate serial: 019847ADB8C1EA139031461D1DDF0CA66DE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TSPi7bMh4ailzp7j4tlapA8N6KA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.mft
Manifest number: 0AB6
Signing time: Sat 26 Jul 2025 17:00:23 +0000
Manifest this update: Sat 26 Jul 2025 17:00:23 +0000
Manifest next update: Sun 27 Jul 2025 17:00:23 +0000
Files and hashes: 1: E8fqlMMExB61QIsEKMENcZNpWcs.roa (hash: BmnUAt4AevLzEKuzLNe+ibP+z5vcZguaEireBbRJdHM=)
2: TSPi7bMh4ailzp7j4tlapA8N6KA.crl (hash: iB6KcX5zrR09tgquBKoz2T+kKQtORecPVaaWP/Gr3Lg=)
3: gXlhbbxVLQVqCMGvhejieNdtoBY.roa (hash: 8u7C6SqKmEB/oIEa7cYGrPkrur0B3bFj0WV0Kh36+qQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.mft
rsync://rpki.ripe.net/repository/DEFAULT/TSPi7bMh4ailzp7j4tlapA8N6KA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:ad:b8:c1:ea:13:90:31:46:1d:1d:df:0c:a6:6d:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d23e2edb321e1a8a5ce9ee3e2d95aa40f0de8a0
Validity
Not Before: Jul 26 17:00:23 2025 GMT
Not After : Jul 27 17:00:23 2025 GMT
Subject: CN=b55fb77f0feff288c044c41ef5e9650926f8aefc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:7a:1f:fd:34:23:6c:0c:b2:c8:3a:49:04:d8:
98:10:cd:79:20:05:62:98:57:d9:1f:3f:21:9b:ff:
69:64:ec:6b:d3:f3:31:9b:45:8f:c8:61:1f:35:55:
07:00:fd:c2:3a:75:ae:fe:ad:50:c9:4c:77:84:b0:
1c:a9:6b:1b:ce:1f:2c:32:62:dd:7c:34:6d:20:ba:
7c:9b:0d:5e:9b:ec:8b:e8:0d:f2:7d:88:bb:69:76:
3a:3c:8a:06:ad:4a:45:fd:96:e0:15:75:a3:6e:63:
53:71:c9:f9:1b:68:84:fe:d6:8a:0f:8d:3f:63:c0:
6f:ab:d1:92:83:b6:82:70:5c:00:47:e4:87:63:62:
22:a1:f2:5b:ea:72:a2:50:7d:11:b3:1e:43:9c:22:
90:eb:97:bc:78:3e:b3:5b:96:92:2c:39:53:eb:61:
cd:2d:93:c6:2c:63:e9:5b:be:1b:cc:b7:0e:c0:b4:
b6:ab:e6:ff:65:03:54:63:7b:ad:86:c4:9e:1a:f5:
ba:49:16:eb:fc:6f:ee:07:dd:98:3b:8a:26:3b:8d:
0e:4a:d4:31:1c:c9:39:00:66:10:76:f7:7a:a4:e9:
2a:8e:55:fd:59:f3:69:e6:64:86:ff:fa:38:c4:05:
a3:81:10:18:78:2c:3c:71:b7:2f:f4:d1:52:91:4d:
2a:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:5F:B7:7F:0F:EF:F2:88:C0:44:C4:1E:F5:E9:65:09:26:F8:AE:FC
X509v3 Authority Key Identifier:
keyid:4D:23:E2:ED:B3:21:E1:A8:A5:CE:9E:E3:E2:D9:5A:A4:0F:0D:E8:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TSPi7bMh4ailzp7j4tlapA8N6KA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:2f:6a:61:7f:96:3d:9e:ae:6b:2e:02:37:36:66:97:48:1f:
4c:be:27:bb:0a:93:3e:8d:47:eb:28:bb:c0:a1:47:12:e6:cd:
01:b5:b4:c3:f1:83:f9:d2:02:8b:56:4a:e2:cc:f0:75:f1:2b:
11:2c:66:72:96:2d:97:7a:51:40:85:dd:67:22:c8:bb:5a:ae:
c6:ee:5a:92:b7:75:e0:c3:8c:88:2e:c4:7d:a0:03:f2:39:cd:
8d:dc:33:ce:2c:4d:86:f5:3d:c6:7e:9d:d8:7a:44:99:6b:7a:
95:6b:9e:4b:09:35:0a:05:e9:ed:2a:9f:97:dd:80:02:c4:6b:
78:6b:fd:4b:f9:af:ec:34:59:72:98:ae:c8:f7:cc:5a:2b:86:
d3:56:7b:8c:68:8f:8f:58:52:c9:83:93:ea:c6:15:2c:6e:f7:
d8:1f:e4:bd:c5:f8:f2:5b:c3:49:87:46:fe:56:50:97:ea:35:
01:67:44:74:db:5b:c7:db:13:45:e8:58:06:1b:1f:e9:86:95:
0a:a8:da:b8:5a:1d:8c:71:27:7e:38:57:44:36:44:24:bf:df:
03:f8:01:e6:c4:f6:9c:d7:f1:fb:b7:6c:67:a9:92:d1:d8:df:
fc:18:49:c5:ba:47:18:9c:ce:e7:9c:8d:ec:c4:75:9f:a7:00:
41:f7:69:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:49:14 2025 by rpki-client