Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/5ba81e-e274-4ba3-954d-bdf94a3fb32d/1/Tc_QAaZn4WRatAxbvtifWScAT4U.mft
File: Tc_QAaZn4WRatAxbvtifWScAT4U.mft (raw, json)
Hash identifier: +hLm43/URHbVVSI3PPcUqZwd3ovQk7euZKNXSHf8tk0=
Subject key identifier: B6:AB:95:68:EB:76:A0:9E:75:8A:10:3C:3E:10:35:49:8F:07:56:71
Authority key identifier: 4D:CF:D0:01:A6:67:E1:64:5A:B4:0C:5B:BE:D8:9F:59:27:00:4F:85
Certificate issuer: /CN=4dcfd001a667e1645ab40c5bbed89f5927004f85
Certificate serial: 019918776740AF3E858F08B841E84EB2403F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tc_QAaZn4WRatAxbvtifWScAT4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/5ba81e-e274-4ba3-954d-bdf94a3fb32d/1/Tc_QAaZn4WRatAxbvtifWScAT4U.mft
Manifest number: 0A97
Signing time: Fri 05 Sep 2025 06:01:42 +0000
Manifest this update: Fri 05 Sep 2025 06:01:42 +0000
Manifest next update: Sat 06 Sep 2025 06:01:42 +0000
Files and hashes: 1: Tc_QAaZn4WRatAxbvtifWScAT4U.crl (hash: DYpjvHtSQvg6QLl+LS37IHVio5gHWD9Dz7bkrwKExHc=)
2: jdMFheDlAIgKvi6YF6C6Rm8zqwg.roa (hash: 0uopvNrGmCf9iLiAY1t8oTN34NZD3FhGP5c/aZny+2A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/5ba81e-e274-4ba3-954d-bdf94a3fb32d/1/Tc_QAaZn4WRatAxbvtifWScAT4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/5ba81e-e274-4ba3-954d-bdf94a3fb32d/1/Tc_QAaZn4WRatAxbvtifWScAT4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tc_QAaZn4WRatAxbvtifWScAT4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:18:77:67:40:af:3e:85:8f:08:b8:41:e8:4e:b2:40:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dcfd001a667e1645ab40c5bbed89f5927004f85
Validity
Not Before: Sep 5 06:01:42 2025 GMT
Not After : Sep 6 06:01:42 2025 GMT
Subject: CN=b6ab9568eb76a09e758a103c3e1035498f075671
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:0c:d3:e8:ed:c5:1f:78:00:f9:a6:1e:f1:a1:
d7:54:e7:d8:e3:41:19:3e:4b:71:65:41:15:c2:43:
a2:0b:b8:c4:3c:50:9f:a3:66:ec:4f:12:db:97:14:
31:a3:b9:d5:58:dc:64:18:fa:91:c2:7e:7b:43:72:
1f:5e:fd:1c:15:5e:97:ba:2f:63:f9:bf:92:e7:ad:
99:fa:02:d1:b6:f9:6f:3d:0f:d3:63:8f:ac:51:fb:
72:c8:fe:c5:b5:d4:50:4c:4e:18:b4:4d:73:79:76:
83:16:c0:09:42:1e:8a:62:9a:ed:84:0a:e0:e8:8b:
5a:1f:6c:9a:97:f9:f5:01:b4:51:97:e6:a3:eb:a3:
e5:ab:03:c8:8c:a4:ee:21:f0:19:4b:b9:6a:38:d5:
37:78:66:f1:2a:8e:03:64:a1:90:0b:27:26:cf:61:
c7:05:26:75:11:63:9e:6b:62:e0:44:2f:b7:77:f6:
8e:76:fd:dc:c3:8a:63:9f:f9:73:ab:df:a5:75:1d:
9f:74:34:9e:4f:ef:92:bf:f9:60:b3:82:55:86:9e:
6f:5a:36:e2:1e:72:5f:08:d3:71:ba:07:a6:67:93:
47:97:25:29:da:2a:a3:ea:09:e7:45:3f:c7:fa:2f:
4e:ce:a8:21:49:61:4b:5f:ee:16:5e:da:7b:67:9a:
8f:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:AB:95:68:EB:76:A0:9E:75:8A:10:3C:3E:10:35:49:8F:07:56:71
X509v3 Authority Key Identifier:
keyid:4D:CF:D0:01:A6:67:E1:64:5A:B4:0C:5B:BE:D8:9F:59:27:00:4F:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tc_QAaZn4WRatAxbvtifWScAT4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/5ba81e-e274-4ba3-954d-bdf94a3fb32d/1/Tc_QAaZn4WRatAxbvtifWScAT4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/5ba81e-e274-4ba3-954d-bdf94a3fb32d/1/Tc_QAaZn4WRatAxbvtifWScAT4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:e4:dc:06:4d:71:0c:55:77:43:ed:d2:d8:c8:89:f9:51:dd:
ca:e1:8f:07:3b:af:cc:9a:ea:28:71:58:a0:b3:f9:dc:6f:30:
ba:52:07:03:c0:30:e8:4f:db:b5:e1:09:71:0e:93:83:4e:95:
5f:b6:0c:e4:fe:8e:25:44:1a:70:38:b7:f0:84:72:bb:f1:f6:
bc:c3:c2:07:d0:a3:e4:6c:19:fd:66:02:99:a1:42:a7:91:75:
8c:ab:73:90:90:dd:e6:4a:00:64:2d:c9:9e:5c:3b:0d:2d:1e:
61:69:1f:77:f6:b1:e3:e3:67:bd:87:16:77:64:33:1c:7e:1a:
57:d5:48:e6:a9:78:1d:53:ef:66:9e:9d:a8:8f:f3:e6:62:e4:
33:9f:b7:17:a5:a3:72:b8:e7:c0:61:b9:46:13:56:51:50:34:
0e:f8:5d:a9:1e:9d:71:7d:19:a7:b5:82:0c:31:91:50:30:f2:
9d:46:43:8b:55:b8:45:f8:1f:23:86:74:eb:7d:77:47:52:95:
3b:2e:f6:c8:56:77:5a:a5:5f:78:b0:9f:b6:30:ba:27:c0:08:
90:e3:6c:a9:4d:a4:d3:1c:9d:99:d8:1d:60:bd:57:25:86:0a:
5d:ec:fe:ca:93:ca:d0:bb:b6:c9:6e:65:fc:0f:51:e5:39:b7:
f9:f7:f8:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 09:50:41 2025 by rpki-client