Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/7358bd-c72f-4d9b-bb0d-0b4f717aa363/1/TVg7b1bPCSco3lk62VKuoZzjGIY.mft
File: TVg7b1bPCSco3lk62VKuoZzjGIY.mft (raw, json)
Hash identifier: bAM+24hrCjBo+Kip98QaGjWKEh0lxS8WFThPVjGflbs=
Subject key identifier: 97:06:BE:D9:C5:D8:D2:CF:68:51:4F:72:BE:8B:9D:FF:A7:62:4C:04
Authority key identifier: 4D:58:3B:6F:56:CF:09:27:28:DE:59:3A:D9:52:AE:A1:9C:E3:18:86
Certificate issuer: /CN=4d583b6f56cf092728de593ad952aea19ce31886
Certificate serial: 0199277B8B482B37528A10E184BE0D5DA8FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TVg7b1bPCSco3lk62VKuoZzjGIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/7358bd-c72f-4d9b-bb0d-0b4f717aa363/1/TVg7b1bPCSco3lk62VKuoZzjGIY.mft
Manifest number: 15CA
Signing time: Mon 08 Sep 2025 04:00:31 +0000
Manifest this update: Mon 08 Sep 2025 04:00:31 +0000
Manifest next update: Tue 09 Sep 2025 04:00:31 +0000
Files and hashes: 1: TVg7b1bPCSco3lk62VKuoZzjGIY.crl (hash: MgXzbpUmUA7Bd0b0cM62M+zexFTua+0MMIlLjHuqA0c=)
2: bOLohqMKHagd_oJ4fhpVo7NmmeM.roa (hash: zc2jSYa3eGI9kHGQfF97SUcixmU4Ya6CBO+chtxYjPg=)
3: rAEXG8LVncu-VzH6pWQ3O-v7vJk.roa (hash: pHtLRGskuQm7vCqkOegxgViLMoHSueDTg44n3jic3FY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/7358bd-c72f-4d9b-bb0d-0b4f717aa363/1/TVg7b1bPCSco3lk62VKuoZzjGIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/7358bd-c72f-4d9b-bb0d-0b4f717aa363/1/TVg7b1bPCSco3lk62VKuoZzjGIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/TVg7b1bPCSco3lk62VKuoZzjGIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 01:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:27:7b:8b:48:2b:37:52:8a:10:e1:84:be:0d:5d:a8:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d583b6f56cf092728de593ad952aea19ce31886
Validity
Not Before: Sep 8 04:00:31 2025 GMT
Not After : Sep 9 04:00:31 2025 GMT
Subject: CN=9706bed9c5d8d2cf68514f72be8b9dffa7624c04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:6a:75:4e:c9:42:06:00:cd:ba:72:83:55:72:
52:df:96:1b:3d:fd:23:13:ba:41:82:96:c5:48:cb:
1e:69:06:d9:d3:b9:69:60:48:be:d0:69:18:b5:aa:
db:3b:66:ce:7a:e3:05:09:1e:07:90:22:65:21:03:
8b:d3:74:ff:64:2d:29:35:d6:9c:bf:6a:fb:9c:03:
79:70:69:12:d1:3e:cc:76:74:0f:0e:f4:ee:53:e8:
4e:ea:62:1c:15:88:3b:57:3d:59:61:4d:55:91:16:
62:7f:69:89:22:cd:fc:60:2b:69:4e:02:55:ac:d1:
4a:36:6d:ee:ce:bb:80:69:55:a7:ab:a6:03:19:c9:
43:21:db:64:1f:60:a1:02:de:5f:db:33:c8:61:7e:
f2:fa:a6:08:d4:42:1b:ae:74:e2:3b:5e:b4:52:08:
43:cf:5d:f0:c3:01:0e:71:af:12:59:c1:d9:99:c9:
4e:05:db:72:84:e4:d6:25:8f:1b:bc:b5:88:79:6c:
b5:46:f0:1f:1c:6e:bd:33:11:15:f9:71:08:85:99:
4b:77:bc:a8:88:67:39:9e:30:ef:b6:28:bd:c1:5a:
00:e8:28:f9:a4:bf:cc:b1:2f:bd:9c:a0:c8:82:d9:
29:96:ee:6f:c1:87:bc:96:85:41:03:76:17:47:b0:
9c:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:06:BE:D9:C5:D8:D2:CF:68:51:4F:72:BE:8B:9D:FF:A7:62:4C:04
X509v3 Authority Key Identifier:
keyid:4D:58:3B:6F:56:CF:09:27:28:DE:59:3A:D9:52:AE:A1:9C:E3:18:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TVg7b1bPCSco3lk62VKuoZzjGIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/7358bd-c72f-4d9b-bb0d-0b4f717aa363/1/TVg7b1bPCSco3lk62VKuoZzjGIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/7358bd-c72f-4d9b-bb0d-0b4f717aa363/1/TVg7b1bPCSco3lk62VKuoZzjGIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:10:f5:9e:ea:ed:34:ff:85:d9:16:69:e2:30:13:f0:45:67:
13:c9:d2:93:07:c9:0b:26:f9:4a:ea:8e:5d:6e:03:4d:c2:33:
38:c7:73:37:34:c6:4b:e9:7f:41:9d:9a:2c:35:10:d3:19:81:
72:c2:07:98:31:98:e1:63:88:f0:97:0a:ca:43:82:81:62:7c:
b8:44:19:a2:8d:d4:9d:cf:35:69:89:89:b7:b1:4c:61:ef:ed:
e0:b2:92:d4:08:d1:ee:4b:b4:f7:b6:11:60:ee:ab:9f:32:08:
d9:61:00:5a:95:0d:c4:0b:9a:05:19:19:f0:20:76:fb:c9:88:
b9:7e:da:b6:c5:17:3a:06:d1:54:7b:a3:6e:03:ee:a9:f7:77:
61:3c:01:b0:ae:e9:b7:e6:ad:88:d3:b6:9c:0e:3e:11:e5:5c:
16:d8:1b:30:18:5e:a5:ce:d9:c9:9b:25:52:b7:5b:3e:bc:7d:
51:28:f5:48:23:a1:db:41:b1:0f:a2:d6:54:a2:1c:bf:df:3d:
e2:c5:d0:30:8f:dc:ff:d0:53:80:19:90:d0:be:3a:1e:e5:ff:
1a:92:77:cf:26:58:e1:87:0c:3b:2b:8e:16:7d:f2:73:2a:a6:
11:04:f0:3e:06:36:34:78:12:2e:4e:ab:c9:a6:e0:2a:42:75:
04:00:fb:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 08:36:52 2025 by rpki-client