Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/5ca294-897b-4e49-a9c7-bc48b41f498b/1/TNR7i4qp-8zP89UHgU_HRGSiq_A.mft
File: TNR7i4qp-8zP89UHgU_HRGSiq_A.mft (raw, json)
Hash identifier: 35NfW8gFtO4ejroLqosrUFhzDstca4MLYZxa0wQ/PPM=
Subject key identifier: 0B:82:D3:65:DF:74:F4:20:33:CD:6F:9E:5A:E3:F2:F4:DA:F8:D5:9D
Authority key identifier: 4C:D4:7B:8B:8A:A9:FB:CC:CF:F3:D5:07:81:4F:C7:44:64:A2:AB:F0
Certificate issuer: /CN=4cd47b8b8aa9fbcccff3d507814fc74464a2abf0
Certificate serial: 0199240CCB51A214C394B0723BF0E2F058C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TNR7i4qp-8zP89UHgU_HRGSiq_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/5ca294-897b-4e49-a9c7-bc48b41f498b/1/TNR7i4qp-8zP89UHgU_HRGSiq_A.mft
Manifest number: 0D67
Signing time: Sun 07 Sep 2025 12:00:42 +0000
Manifest this update: Sun 07 Sep 2025 12:00:42 +0000
Manifest next update: Mon 08 Sep 2025 12:00:42 +0000
Files and hashes: 1: TNR7i4qp-8zP89UHgU_HRGSiq_A.crl (hash: 3G9//Z+5Yf/eQrpILx5QLPWHAKvFp3r1dr1zh6NiAMY=)
2: zYBlb8-4iJi2Xsk5poztWDw6ukY.roa (hash: veXHQ0WmE+2KQkfYtO+EXvFrciAIGT+yWdclt50BTQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/5ca294-897b-4e49-a9c7-bc48b41f498b/1/TNR7i4qp-8zP89UHgU_HRGSiq_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/5ca294-897b-4e49-a9c7-bc48b41f498b/1/TNR7i4qp-8zP89UHgU_HRGSiq_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/TNR7i4qp-8zP89UHgU_HRGSiq_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:24:0c:cb:51:a2:14:c3:94:b0:72:3b:f0:e2:f0:58:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cd47b8b8aa9fbcccff3d507814fc74464a2abf0
Validity
Not Before: Sep 7 12:00:42 2025 GMT
Not After : Sep 8 12:00:42 2025 GMT
Subject: CN=0b82d365df74f42033cd6f9e5ae3f2f4daf8d59d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ca:50:44:ef:7a:97:6e:be:79:1b:d6:7e:ec:
bf:89:00:1e:30:ff:ee:8c:c5:01:12:e0:0e:c4:9d:
22:bd:21:fd:f2:18:42:f5:e5:c4:ed:a8:b7:07:18:
58:55:7b:9f:ef:c5:d8:7d:63:1b:13:e4:0e:71:2c:
e0:e4:7c:82:4c:0b:11:6e:c1:21:1e:1e:c5:17:0d:
c0:d3:19:93:79:87:8b:19:60:9a:61:af:74:47:03:
ac:8e:1d:1f:0a:85:a6:af:bb:82:d3:6e:0d:82:6d:
eb:f3:ac:af:4b:c2:04:19:26:85:5d:16:8f:75:36:
f0:d7:6f:03:23:8f:f7:91:d4:39:ce:6b:56:fa:36:
36:23:ef:7d:e5:2a:a6:94:10:97:14:bd:11:cf:46:
a3:2b:f5:ec:86:32:c2:e4:89:de:65:a4:f6:6d:24:
86:d1:40:c4:cb:a2:ee:b4:99:99:34:c1:27:45:1b:
93:e3:0b:07:43:cf:8b:9d:64:90:98:3e:42:d0:0e:
60:5d:8e:40:13:b3:65:57:30:62:96:16:16:66:ca:
5c:e0:9f:4d:32:69:55:28:16:3c:bb:d7:f0:e4:3f:
d1:9f:59:c9:f9:0c:8d:d3:0f:a6:96:fd:b6:1b:9a:
4a:c1:15:c9:87:3b:97:cb:04:59:87:63:09:94:cc:
b5:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:82:D3:65:DF:74:F4:20:33:CD:6F:9E:5A:E3:F2:F4:DA:F8:D5:9D
X509v3 Authority Key Identifier:
keyid:4C:D4:7B:8B:8A:A9:FB:CC:CF:F3:D5:07:81:4F:C7:44:64:A2:AB:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TNR7i4qp-8zP89UHgU_HRGSiq_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/5ca294-897b-4e49-a9c7-bc48b41f498b/1/TNR7i4qp-8zP89UHgU_HRGSiq_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/5ca294-897b-4e49-a9c7-bc48b41f498b/1/TNR7i4qp-8zP89UHgU_HRGSiq_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:4e:6a:fa:a5:73:f3:36:16:5b:89:0d:00:9a:13:23:7a:c4:
2b:16:f7:00:7c:9b:6b:94:85:ca:d7:db:5a:5a:d9:ac:93:b7:
ae:69:1a:09:db:6d:c5:12:c8:c6:84:5a:70:8e:da:6d:b5:04:
e5:fa:cb:43:3f:8e:1a:24:86:ec:58:04:85:31:5f:4e:61:15:
56:4d:c4:d0:ca:50:9f:8d:b6:71:1e:97:39:34:7f:8f:3c:ca:
e5:c6:d8:94:ca:16:29:d0:d9:38:f7:6f:06:9e:49:53:31:08:
8a:de:62:93:b1:d1:0c:62:31:24:9e:5f:a7:7c:29:14:ba:7b:
8b:16:98:b3:a0:95:06:ba:e1:55:54:54:ed:87:4d:77:63:7b:
f2:89:71:a5:6f:9d:71:51:1e:b5:3c:22:c2:78:69:18:0c:91:
cc:be:4d:75:aa:0a:a0:c6:eb:3a:f9:03:82:32:05:fc:99:43:
fa:33:f2:56:fe:12:5c:c2:26:3f:c5:74:1f:bf:00:26:41:33:
b3:ed:7d:13:1c:bb:d7:00:43:9d:95:41:42:eb:39:46:9e:bd:
bf:53:0a:6c:9d:a4:e2:8b:ba:77:81:67:b1:f3:a9:28:ca:5b:
d1:27:0b:35:3f:16:e4:b1:5c:e7:1b:ea:81:b2:b3:2a:f0:be:
12:e9:81:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:46:47 2025 by rpki-client