Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/278398-7339-44b2-b0b0-73a01ae5de8f/1/TNcfWgBQ-K5kRMY4dpujdf3bzhk.mft
File: TNcfWgBQ-K5kRMY4dpujdf3bzhk.mft (raw, json)
Hash identifier: IbX2Kr1lHxvbNyoMhlv2qBZpIauZzx/28TpvYmy6o/I=
Subject key identifier: C4:7C:F0:D5:DA:CC:EA:38:16:8D:A5:5E:4B:57:DD:74:6E:4F:61:1A
Authority key identifier: 4C:D7:1F:5A:00:50:F8:AE:64:44:C6:38:76:9B:A3:75:FD:DB:CE:19
Certificate issuer: /CN=4cd71f5a0050f8ae6444c638769ba375fddbce19
Certificate serial: 01993FF2455CA46DB2C8287239CAB0D0BD16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TNcfWgBQ-K5kRMY4dpujdf3bzhk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/278398-7339-44b2-b0b0-73a01ae5de8f/1/TNcfWgBQ-K5kRMY4dpujdf3bzhk.mft
Manifest number: 136C
Signing time: Fri 12 Sep 2025 22:01:06 +0000
Manifest this update: Fri 12 Sep 2025 22:01:06 +0000
Manifest next update: Sat 13 Sep 2025 22:01:06 +0000
Files and hashes: 1: R8OfYueHd1P1AWWtdGiixwllIMs.roa (hash: ZKzgreBUlCJXbuPQDDLtfbqfZaf5YaZJohzFfYmemPA=)
2: TNcfWgBQ-K5kRMY4dpujdf3bzhk.crl (hash: IveFp9ir7JGqk8RxXPzB/rumgpxiLCGv5xZUpcM/XkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/278398-7339-44b2-b0b0-73a01ae5de8f/1/TNcfWgBQ-K5kRMY4dpujdf3bzhk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/278398-7339-44b2-b0b0-73a01ae5de8f/1/TNcfWgBQ-K5kRMY4dpujdf3bzhk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TNcfWgBQ-K5kRMY4dpujdf3bzhk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Sep 2025 22:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:3f:f2:45:5c:a4:6d:b2:c8:28:72:39:ca:b0:d0:bd:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cd71f5a0050f8ae6444c638769ba375fddbce19
Validity
Not Before: Sep 12 22:01:06 2025 GMT
Not After : Sep 13 22:01:06 2025 GMT
Subject: CN=c47cf0d5daccea38168da55e4b57dd746e4f611a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:7d:c5:21:ed:69:1a:4d:b9:41:51:3e:37:65:
7a:31:c4:c3:40:69:07:45:93:9e:4c:77:3f:66:a8:
79:1c:6a:8a:3c:ae:e1:54:e6:63:a9:29:5b:f7:7b:
ea:1d:6f:05:51:f0:db:83:d9:32:2c:d6:77:57:0b:
74:4d:fa:2c:9f:9b:89:5f:d1:d3:2b:30:d6:ff:1e:
9e:39:19:95:36:5d:9c:62:c5:b3:3f:37:22:c2:e8:
35:25:cf:6c:1f:82:dd:72:dc:6b:a5:20:b6:7b:3d:
f6:a1:8b:20:6f:23:c5:d3:18:da:24:dc:4a:01:f0:
77:79:35:fa:79:0a:43:01:d4:f0:77:0f:13:c3:b7:
9f:87:6e:e2:9b:6d:10:da:6b:5c:94:ae:b2:b1:c6:
92:e5:8b:fe:71:97:5a:66:16:cf:6d:06:8d:a3:b5:
ad:6f:8e:6e:11:53:ef:63:b6:16:6c:7a:f2:54:7d:
32:ad:d1:f5:64:da:af:88:af:9e:22:36:18:6f:56:
2d:46:fa:10:4d:25:55:a8:da:d3:10:9f:6e:77:5d:
03:60:9c:97:c1:63:a5:eb:4c:54:95:04:cf:c7:7a:
5b:9d:98:de:ec:35:75:ce:ec:dd:37:58:b9:7a:5f:
30:46:2d:b1:de:ae:11:a7:ff:9d:73:7e:00:eb:92:
5f:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:7C:F0:D5:DA:CC:EA:38:16:8D:A5:5E:4B:57:DD:74:6E:4F:61:1A
X509v3 Authority Key Identifier:
keyid:4C:D7:1F:5A:00:50:F8:AE:64:44:C6:38:76:9B:A3:75:FD:DB:CE:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TNcfWgBQ-K5kRMY4dpujdf3bzhk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/278398-7339-44b2-b0b0-73a01ae5de8f/1/TNcfWgBQ-K5kRMY4dpujdf3bzhk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/278398-7339-44b2-b0b0-73a01ae5de8f/1/TNcfWgBQ-K5kRMY4dpujdf3bzhk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:16:47:bf:2e:05:27:9a:e1:8c:a4:54:f5:59:90:0c:27:f4:
be:32:69:50:02:1b:10:79:6d:76:4f:50:61:6d:cc:9d:28:fe:
23:c8:cd:c7:77:55:be:de:0e:4a:ad:40:cc:ef:a3:3c:23:62:
a9:73:46:ff:c7:64:d4:1d:5e:ca:62:cf:87:db:2d:14:66:b4:
08:8d:69:31:8b:a6:a8:36:c9:72:80:62:17:97:d4:af:0e:de:
69:67:56:f5:23:7f:be:d4:df:7b:56:0b:98:f7:f2:36:0b:d4:
47:e7:d8:11:05:17:c5:00:4e:fe:8b:96:e9:01:da:40:26:b3:
ff:f1:9a:cf:1c:ec:ac:e0:bf:aa:50:36:67:9a:9f:c0:29:29:
e9:fc:ad:20:11:00:c2:6b:da:19:cb:52:40:76:37:7a:d4:c1:
a0:00:08:17:d4:fd:86:8d:4c:4f:e1:ff:ae:7d:70:d9:df:33:
78:04:95:c9:e9:0c:01:16:9c:68:e0:9e:c6:bf:9a:ec:a4:23:
e6:52:46:9e:69:1c:d0:7d:98:6e:a8:06:fd:57:f7:b6:bb:87:
92:32:33:81:4a:6f:f5:2b:ec:f3:f0:b3:d0:83:6b:b7:ac:4c:
a2:42:b4:f9:96:0c:42:1c:0f:0d:c3:c0:4b:3f:07:62:de:72:
a8:a3:d8:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 13 06:39:29 2025 by rpki-client