Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/TBsMQJaQgJV_zO4fuKP7S7OL9dw.mft
File: TBsMQJaQgJV_zO4fuKP7S7OL9dw.mft (raw, json)
Hash identifier: 2cxZo7wkPx2P3EulIHUsaQq3GQMW6FJmtD7w6UK7S+E=
Subject key identifier: 9C:E8:D9:CA:69:2A:43:30:CE:34:BC:61:3F:A5:DB:A3:8E:D6:5B:66
Authority key identifier: 4C:1B:0C:40:96:90:80:95:7F:CC:EE:1F:B8:A3:FB:4B:B3:8B:F5:DC
Certificate issuer: /CN=4c1b0c40969080957fccee1fb8a3fb4bb38bf5dc
Certificate serial: 0198CACA8B6D542A55EAD0270324E8FAA099
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TBsMQJaQgJV_zO4fuKP7S7OL9dw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/TBsMQJaQgJV_zO4fuKP7S7OL9dw.mft
Manifest number: 1332
Signing time: Thu 21 Aug 2025 04:02:08 +0000
Manifest this update: Thu 21 Aug 2025 04:02:08 +0000
Manifest next update: Fri 22 Aug 2025 04:02:08 +0000
Files and hashes: 1: H36xXwuB9FJ3ESjpo_XmH_KZ2R4.roa (hash: CUtTMRPtfP9rNsMoQeZ2J44Z+jwTnsWRsKW5k/0LKug=)
2: TBsMQJaQgJV_zO4fuKP7S7OL9dw.crl (hash: 8MMJHoigXE3KeQG9HzH/7cQRJjtFk5mI1+VKlFQJ8FI=)
3: tpqvdlW8wuSttlFQd80uk4F5YQY.roa (hash: yDvp+gGPiyhARcManoLZEVb02KcZ7k4JkC3clhGu75w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/TBsMQJaQgJV_zO4fuKP7S7OL9dw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/TBsMQJaQgJV_zO4fuKP7S7OL9dw.mft
rsync://rpki.ripe.net/repository/DEFAULT/TBsMQJaQgJV_zO4fuKP7S7OL9dw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 23:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:ca:ca:8b:6d:54:2a:55:ea:d0:27:03:24:e8:fa:a0:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c1b0c40969080957fccee1fb8a3fb4bb38bf5dc
Validity
Not Before: Aug 21 04:02:08 2025 GMT
Not After : Aug 22 04:02:08 2025 GMT
Subject: CN=9ce8d9ca692a4330ce34bc613fa5dba38ed65b66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:6a:a1:69:c5:9e:28:d7:94:82:0e:0d:63:c3:
7d:58:de:d6:73:c1:54:ed:f2:4d:86:dc:53:7b:62:
6c:b2:ab:64:15:60:ba:dc:86:fd:4a:89:00:16:4a:
4c:0d:6b:1a:cf:b6:9e:b9:bc:5e:56:4c:2b:77:3e:
98:f5:6f:8b:f0:c7:15:cb:5c:eb:08:ac:09:88:5c:
e2:be:42:68:23:69:24:21:56:19:b3:a4:60:b0:dd:
c0:0a:9b:76:de:a1:0d:b3:45:a8:21:3e:31:74:e3:
f2:18:72:f2:23:76:dd:7b:d8:11:01:36:80:8f:d1:
92:b5:02:23:05:a8:96:50:30:25:81:c1:7e:3d:9b:
f2:b4:a7:5a:ce:d4:5b:27:31:b5:95:f5:2f:44:49:
89:d5:08:83:57:be:c7:7c:67:d0:e8:01:39:6a:80:
dc:b0:24:f5:02:f0:8b:59:b7:a0:27:03:c1:fa:df:
e7:2c:68:36:8d:58:ff:ec:c9:aa:e3:f3:c2:f1:79:
88:df:74:d3:a0:b7:2c:96:72:9d:97:c9:33:7b:26:
08:3b:c6:9c:d3:f6:fb:30:c8:ef:ff:26:a7:29:1d:
02:d5:6a:0f:72:45:ad:5b:53:ba:c2:bb:e3:41:fd:
ff:a9:09:df:e4:51:ae:c4:78:bf:42:97:35:49:3a:
88:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:E8:D9:CA:69:2A:43:30:CE:34:BC:61:3F:A5:DB:A3:8E:D6:5B:66
X509v3 Authority Key Identifier:
keyid:4C:1B:0C:40:96:90:80:95:7F:CC:EE:1F:B8:A3:FB:4B:B3:8B:F5:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TBsMQJaQgJV_zO4fuKP7S7OL9dw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/TBsMQJaQgJV_zO4fuKP7S7OL9dw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/TBsMQJaQgJV_zO4fuKP7S7OL9dw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:af:28:70:9a:83:57:94:90:34:72:4d:5b:79:e1:79:0a:87:
6d:c4:77:e2:d9:ad:74:be:f6:05:c9:c1:f4:8c:29:4f:5c:87:
6e:df:6f:89:72:d3:36:7a:92:e0:7c:5b:d6:7e:16:db:a5:99:
04:bb:c7:8d:42:f8:3c:05:fa:dc:c4:51:d9:e3:61:fe:9b:6a:
12:52:76:67:af:b8:46:23:33:9f:27:ab:d5:b0:fb:36:5d:59:
c4:b5:fc:fd:d8:fa:24:06:e0:c3:1c:66:9e:ae:d4:50:a1:29:
d6:ab:13:dc:84:fc:c9:4c:7c:24:f1:7c:b6:d6:f0:b6:01:42:
c1:9b:d7:a0:47:17:b1:25:40:90:62:90:57:6b:15:cd:21:31:
04:8b:e5:dd:cd:01:74:ae:b6:d2:72:40:a5:60:8f:91:df:9a:
36:b3:a9:18:3c:e7:2b:99:4e:6e:f3:fb:90:da:b1:68:fb:b4:
76:d9:90:dc:cc:ee:14:8a:3b:2b:df:7b:11:dd:02:3e:2f:a0:
92:e8:c6:6e:72:15:29:a2:8a:82:9d:07:cc:e0:e7:d2:13:7c:
11:6e:b8:0f:6c:bd:04:9d:ab:a4:61:a4:c6:8e:87:1d:45:43:
ff:38:ab:00:2e:22:d0:ad:b4:3a:e0:34:95:28:ac:e4:8c:40:
24:f0:06:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 07:52:44 2025 by rpki-client