Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/77f99c-35cb-47a6-bac3-caba81c9a152/1/tcr-HjrqL22RHtEHoIqv7peaT1E.mft
File: tcr-HjrqL22RHtEHoIqv7peaT1E.mft (raw, json)
Hash identifier: +NQCooznwnLOIkwkj3hBVMhcOqETGhUy10J7X5TDsNk=
Subject key identifier: CD:B4:60:97:70:2D:5E:37:AD:0E:E0:EB:A5:45:DE:83:F5:5E:23:A8
Authority key identifier: B5:CA:FE:1E:3A:EA:2F:6D:91:1E:D1:07:A0:8A:AF:EE:97:9A:4F:51
Certificate issuer: /CN=b5cafe1e3aea2f6d911ed107a08aafee979a4f51
Certificate serial: 019934C9202C8B941F4849F2A72A21B167DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tcr-HjrqL22RHtEHoIqv7peaT1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/77f99c-35cb-47a6-bac3-caba81c9a152/1/tcr-HjrqL22RHtEHoIqv7peaT1E.mft
Manifest number: 09C3
Signing time: Wed 10 Sep 2025 18:00:20 +0000
Manifest this update: Wed 10 Sep 2025 18:00:20 +0000
Manifest next update: Thu 11 Sep 2025 18:00:20 +0000
Files and hashes: 1: ISfPRM-SEBMwIZmnHT5jIS_-gBU.roa (hash: pS/+rKjXtCUTD0CGwmyiuK46+VtmU6rEgbnmTRXJgas=)
2: RbtpOQvxKOhivyATsaFRApG8DvI.roa (hash: rcUrQ9qXVTCmRSSGNqyeO7AKgTyqtF4rizry0Ad9las=)
3: S6bzH3vR-9_Z8W37FxbGY_bsSRI.roa (hash: mXMMwIa+4CrlkQM+hSljAaJyd1k858ZniaKc/09JBeY=)
4: a0RRgx7_17MRQY0QEGYvnSPepZU.roa (hash: YVzxS9jFVMbMgJf+c2GFQwY/wSVZdg9tW30Q3WHGzsg=)
5: tcr-HjrqL22RHtEHoIqv7peaT1E.crl (hash: MkyfIRXPVUC+tfvpMCPz+1PZrHjXeeQbSmJMoLEYc3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/77f99c-35cb-47a6-bac3-caba81c9a152/1/tcr-HjrqL22RHtEHoIqv7peaT1E.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/77f99c-35cb-47a6-bac3-caba81c9a152/1/tcr-HjrqL22RHtEHoIqv7peaT1E.mft
rsync://rpki.ripe.net/repository/DEFAULT/tcr-HjrqL22RHtEHoIqv7peaT1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 18:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:34:c9:20:2c:8b:94:1f:48:49:f2:a7:2a:21:b1:67:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5cafe1e3aea2f6d911ed107a08aafee979a4f51
Validity
Not Before: Sep 10 18:00:20 2025 GMT
Not After : Sep 11 18:00:20 2025 GMT
Subject: CN=cdb46097702d5e37ad0ee0eba545de83f55e23a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f9:43:e4:ee:be:5c:56:8e:4b:9f:41:3c:35:
3f:33:82:11:f8:47:de:e8:c4:21:75:38:86:31:5b:
3c:92:f3:6f:94:7e:a4:fd:2d:cd:b2:79:f3:a0:6d:
a3:60:6a:69:ef:d9:d2:b4:f3:a6:9e:81:75:fe:2f:
cc:ca:53:af:89:15:68:76:bc:82:7b:6c:2d:73:79:
17:7a:5d:6a:19:fe:fe:a4:ac:c4:1d:62:69:3c:b0:
f8:b9:e8:bf:4b:c6:6a:b7:f5:87:a9:57:f8:5d:44:
a4:d9:b1:86:35:ef:86:f5:02:c8:1e:4a:7a:ef:b7:
eb:5c:62:fc:02:a1:ed:10:b1:8a:f3:7e:1d:e0:f4:
c6:71:bc:37:93:1b:23:9a:a6:b9:6e:e2:be:d8:ca:
01:06:46:5a:e2:2b:cf:9f:52:26:91:e0:b0:45:08:
d3:11:66:8e:6c:18:ba:a8:6a:9a:44:64:4b:42:be:
6d:cb:e5:f1:76:9b:64:1c:20:7d:9e:9e:43:a0:20:
93:ef:d6:de:cb:77:cd:fa:f9:aa:0e:41:d2:81:35:
a8:c6:2a:32:5c:fa:69:02:7b:bd:ce:99:29:1f:c8:
0e:e3:92:b7:58:d3:95:e4:8e:c6:1b:5a:b9:99:c4:
f3:09:5f:23:09:c4:00:5a:4b:9b:cd:6b:04:f6:84:
25:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:B4:60:97:70:2D:5E:37:AD:0E:E0:EB:A5:45:DE:83:F5:5E:23:A8
X509v3 Authority Key Identifier:
keyid:B5:CA:FE:1E:3A:EA:2F:6D:91:1E:D1:07:A0:8A:AF:EE:97:9A:4F:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tcr-HjrqL22RHtEHoIqv7peaT1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/77f99c-35cb-47a6-bac3-caba81c9a152/1/tcr-HjrqL22RHtEHoIqv7peaT1E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/77f99c-35cb-47a6-bac3-caba81c9a152/1/tcr-HjrqL22RHtEHoIqv7peaT1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:54:42:a0:ac:d3:7e:ce:8d:21:14:08:1f:3c:db:ea:ba:97:
7e:54:3f:59:5e:bb:a6:af:b9:86:99:16:65:15:50:71:20:56:
00:c2:fc:4c:0d:51:61:d7:97:60:a6:31:43:92:68:6a:99:b9:
d5:50:2d:0b:b7:a3:7a:03:28:fa:db:d6:d8:92:18:89:6c:d0:
cb:60:71:4c:6e:23:f0:4a:66:ce:27:d9:01:48:82:8c:9a:7c:
b2:ee:ea:9f:21:17:ac:3d:2f:49:0f:7d:b5:86:29:2c:00:3e:
d2:27:b1:ba:5a:a2:58:2d:7e:62:e9:87:5c:ee:ba:5f:59:3f:
b4:91:51:f0:ba:e2:7f:38:52:d0:4c:7a:9f:a7:b4:6b:4d:0c:
d1:f3:70:87:cf:d7:9e:45:6e:a8:ac:95:f6:1d:18:52:47:9e:
5b:39:9e:53:10:d7:43:93:dc:50:5c:44:c3:60:9d:d8:af:9a:
47:25:4f:91:78:99:9f:da:f9:5b:27:60:c6:b1:e8:af:6b:82:
51:37:11:9b:4b:7d:73:59:21:fd:7c:bd:de:0e:fa:6e:66:4f:
41:40:18:cb:d3:bf:18:24:2b:cf:b2:d5:9c:ba:9b:c9:ea:6e:
35:76:0c:b5:30:de:5e:6e:24:b0:e7:3e:e9:74:95:dc:ff:1c:
45:71:2b:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 22:18:58 2025 by rpki-client