Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/TPgIAsZXmk1KEGCNz5LprOmQWxY.mft
File: TPgIAsZXmk1KEGCNz5LprOmQWxY.mft (raw, json)
Hash identifier: 8gxKodlKJNg1l/2fybuN4ExBmL89SlU36lRaLXMdGyg=
Subject key identifier: 30:CF:C5:5E:85:89:BD:AA:4A:D9:40:0C:D6:89:4F:9D:F5:02:03:80
Authority key identifier: 4C:F8:08:02:C6:57:9A:4D:4A:10:60:8D:CF:92:E9:AC:E9:90:5B:16
Certificate issuer: /CN=4cf80802c6579a4d4a10608dcf92e9ace9905b16
Certificate serial: 019934C90E62DF86E012A747E54AE75510BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TPgIAsZXmk1KEGCNz5LprOmQWxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/TPgIAsZXmk1KEGCNz5LprOmQWxY.mft
Manifest number: 053C
Signing time: Wed 10 Sep 2025 18:00:15 +0000
Manifest this update: Wed 10 Sep 2025 18:00:15 +0000
Manifest next update: Thu 11 Sep 2025 18:00:15 +0000
Files and hashes: 1: 3bqib6Vf9__QQmrt5lwxWaCIYDg.roa (hash: nBz+tND5F4lJlZbTQii6SKZ6iYxW0Iv4ninjHe9dyBI=)
2: TPgIAsZXmk1KEGCNz5LprOmQWxY.crl (hash: JFaEuD36M21/ZaXrj0pyV66frBDrSx6ncwjZ8evB61Y=)
3: V3x4-1WXGWfdIqvzomsHhdbzXSs.roa (hash: zh2EOf1/AdU8UOAuoYHykO5WxiDzPCEaB7bgSCkL3Ec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/TPgIAsZXmk1KEGCNz5LprOmQWxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/TPgIAsZXmk1KEGCNz5LprOmQWxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/TPgIAsZXmk1KEGCNz5LprOmQWxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:34:c9:0e:62:df:86:e0:12:a7:47:e5:4a:e7:55:10:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cf80802c6579a4d4a10608dcf92e9ace9905b16
Validity
Not Before: Sep 10 18:00:15 2025 GMT
Not After : Sep 11 18:00:15 2025 GMT
Subject: CN=30cfc55e8589bdaa4ad9400cd6894f9df5020380
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:22:12:73:d6:20:76:5b:5b:26:3f:e2:9a:de:
25:26:27:73:6b:a6:b5:55:9b:2b:2b:5b:58:50:df:
74:7a:eb:d7:7f:75:a2:5c:48:77:60:22:37:60:da:
7e:3f:24:84:cd:66:5a:ab:b5:dd:6a:e3:89:2a:d1:
3c:d4:cf:df:b0:41:20:e8:02:3f:73:a7:5d:39:ed:
11:40:15:1d:1e:08:d4:92:6f:fc:87:07:ca:b9:e9:
0b:38:ac:a7:bd:28:38:4e:a5:c0:a6:a2:04:a8:6e:
29:b0:17:d6:07:0e:13:5d:94:10:a2:37:65:37:a2:
6c:89:74:34:92:5b:03:c1:9a:91:7f:74:45:26:30:
7f:07:b7:d8:48:4f:b9:a2:9a:51:a2:1d:60:f1:7a:
9e:02:6f:e4:04:d4:a8:66:68:63:51:6e:6a:76:46:
16:8d:d3:1f:45:d6:6e:aa:eb:ad:01:be:eb:40:ba:
04:ca:c6:ad:46:0b:2d:09:f5:4b:60:68:8f:ae:11:
82:57:74:f7:5c:c2:49:84:f9:12:8a:2d:c2:30:71:
81:dd:f9:98:c0:d6:0f:8c:f4:ca:a9:2a:65:7d:46:
b5:b3:a1:14:9a:ea:b0:81:04:71:85:e7:2b:6b:a0:
03:a7:ce:63:09:1d:f4:2f:0e:25:80:1a:4a:d3:9e:
ce:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:CF:C5:5E:85:89:BD:AA:4A:D9:40:0C:D6:89:4F:9D:F5:02:03:80
X509v3 Authority Key Identifier:
keyid:4C:F8:08:02:C6:57:9A:4D:4A:10:60:8D:CF:92:E9:AC:E9:90:5B:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TPgIAsZXmk1KEGCNz5LprOmQWxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/TPgIAsZXmk1KEGCNz5LprOmQWxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/TPgIAsZXmk1KEGCNz5LprOmQWxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:e9:11:d6:24:24:06:4b:16:24:2f:9c:ee:dd:44:b2:d8:17:
1a:d7:12:0a:28:2e:cb:3f:8c:a6:c7:e6:2e:6e:08:fb:61:26:
fd:89:33:4f:43:1e:41:be:a5:12:94:f3:85:d7:98:d7:82:0e:
b2:46:71:1a:14:ce:19:13:ac:b7:be:76:24:21:ee:19:86:54:
76:97:a5:ce:9f:77:fc:67:18:04:a3:e9:75:de:07:02:6e:c4:
e2:75:0a:72:1d:17:c4:a8:8d:8e:b9:17:18:3c:79:6c:b3:bf:
47:b2:71:a3:02:2e:1f:fe:c7:f6:8f:23:b0:22:9e:bd:e9:9b:
b2:1f:0d:d8:c8:af:09:56:4d:31:d5:8c:7f:58:66:40:f9:6a:
b2:af:da:45:09:87:00:5e:cc:2b:e2:9a:b7:28:5d:e0:f8:25:
27:73:b4:38:05:39:d7:29:4a:04:f0:3a:20:1a:23:16:de:7c:
48:1c:65:5c:9d:d5:a4:ba:5e:72:1e:a3:43:33:49:f2:14:67:
19:01:cc:8a:7f:bd:5e:9c:13:8d:16:f2:f7:72:86:b9:64:32:
b9:5f:7e:2a:44:9b:0f:58:cd:72:0c:56:0a:e0:30:1f:79:da:
3d:59:4e:1c:69:ac:82:e9:c1:17:ad:c9:dd:ec:c6:19:4c:d3:
ef:29:65:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 20:32:54 2025 by rpki-client