Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/TMxgSVsqNNiSEcwceVJOq2G6FlY.mft
File: TMxgSVsqNNiSEcwceVJOq2G6FlY.mft (raw, json)
Hash identifier: s6R87xWYMh9M1fGJhGrgyKDWYkmVLPJEljPqV5eRorc=
Subject key identifier: 5E:A4:1D:EB:E0:D1:B4:63:82:2C:76:93:22:33:D2:C9:DC:39:9B:42
Authority key identifier: 4C:CC:60:49:5B:2A:34:D8:92:11:CC:1C:79:52:4E:AB:61:BA:16:56
Certificate issuer: /CN=4ccc60495b2a34d89211cc1c79524eab61ba1656
Certificate serial: 01992DEC9738972D0E776FD3D6953966EFB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TMxgSVsqNNiSEcwceVJOq2G6FlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/TMxgSVsqNNiSEcwceVJOq2G6FlY.mft
Manifest number: 1677
Signing time: Tue 09 Sep 2025 10:01:43 +0000
Manifest this update: Tue 09 Sep 2025 10:01:43 +0000
Manifest next update: Wed 10 Sep 2025 10:01:43 +0000
Files and hashes: 1: LHdFFtkhND-G29Bb5TNwX3ZX6HI.roa (hash: 5JCuzcczihsYGo60q4ytQ60HO2vUMA1Wb8XrWH6WiqE=)
2: TMxgSVsqNNiSEcwceVJOq2G6FlY.crl (hash: NO8w0wKvCUPloZ1MfenC9ejmyu1kDlTF/nrWXxwDL9w=)
3: VYrJyKdSTfJ9aOSPJMCRhItn6O0.roa (hash: EVl6QPoQm24Wnsg0W0HBnWjfCtTCiCv6xfCekdHCwzI=)
4: XGm_swis7gPqLxLCw4_WpqKe8Ac.roa (hash: HuoRGpzlvzmJtj6Rn/56OaSHzb/3wfWOGTlv62srzB8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/TMxgSVsqNNiSEcwceVJOq2G6FlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/TMxgSVsqNNiSEcwceVJOq2G6FlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/TMxgSVsqNNiSEcwceVJOq2G6FlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 10:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2d:ec:97:38:97:2d:0e:77:6f:d3:d6:95:39:66:ef:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ccc60495b2a34d89211cc1c79524eab61ba1656
Validity
Not Before: Sep 9 10:01:43 2025 GMT
Not After : Sep 10 10:01:43 2025 GMT
Subject: CN=5ea41debe0d1b463822c76932233d2c9dc399b42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:8a:8f:2c:b8:d3:59:a1:48:9f:e3:d6:77:98:
fe:5f:ea:80:23:6b:9c:ca:71:b9:b5:d1:7f:eb:c6:
95:4e:2c:4b:21:8c:44:70:e3:fc:60:12:a9:94:fa:
27:85:a7:0a:12:92:59:ce:20:04:1f:cd:e8:d0:8b:
7e:ad:26:e6:73:0a:8a:2d:84:9d:db:d6:63:6c:53:
da:bb:30:b5:42:b0:2b:ae:5f:88:e6:1c:4e:3c:e2:
1c:2b:03:f0:7b:6b:f4:9c:92:09:e4:a8:c5:65:61:
15:03:36:67:f6:d8:33:67:d5:02:61:b8:3b:5d:c7:
2b:b1:e8:03:76:bb:b9:3b:b0:bd:fa:dd:b2:d3:b3:
34:2b:60:4b:c5:49:76:9f:e6:27:0b:59:e2:a1:e0:
c5:ca:7c:02:e1:a6:71:f4:93:ff:68:dd:ac:75:fc:
49:3a:49:f5:7f:db:cd:ca:65:28:27:eb:f8:67:a5:
83:13:89:bf:7f:90:26:a4:64:ed:68:ad:7a:19:50:
80:2a:25:42:cf:8b:80:ad:f6:1d:93:ca:40:17:9e:
07:9b:30:1c:bd:c6:b4:e7:f4:74:f7:87:d3:dd:4f:
7c:32:e1:7d:3d:37:bb:d0:0c:fc:f8:4b:eb:e7:97:
32:57:5e:fb:c2:40:e6:ae:db:f9:13:72:26:2b:cb:
89:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:A4:1D:EB:E0:D1:B4:63:82:2C:76:93:22:33:D2:C9:DC:39:9B:42
X509v3 Authority Key Identifier:
keyid:4C:CC:60:49:5B:2A:34:D8:92:11:CC:1C:79:52:4E:AB:61:BA:16:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TMxgSVsqNNiSEcwceVJOq2G6FlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/TMxgSVsqNNiSEcwceVJOq2G6FlY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/TMxgSVsqNNiSEcwceVJOq2G6FlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:fe:8a:a9:76:f1:6a:ea:1c:00:1e:01:ee:3d:57:12:ac:0a:
d3:9a:92:65:b6:72:a2:ce:12:91:1c:1e:c9:a5:71:ab:ad:32:
14:31:ff:c1:b5:63:a5:ca:d9:dd:5f:b4:ea:a3:83:04:f5:88:
db:eb:2b:62:f4:7a:e1:70:7c:6f:38:5d:d5:c8:74:c3:f6:9b:
44:a7:1e:9a:a5:dd:be:ab:5b:94:47:3c:2f:9a:9d:c3:25:28:
74:27:b6:24:b1:ce:5b:cc:25:2b:f9:20:bb:2e:da:a7:81:ac:
cc:c7:5e:5c:52:89:4b:be:9e:a2:7c:c2:e8:8e:f0:ea:81:a0:
34:1a:03:9c:c1:6f:83:38:e7:b9:d5:e7:b3:5d:40:8a:29:09:
2b:44:f9:88:0f:b2:89:3b:24:7a:25:ea:6b:18:4d:6a:9a:cc:
f1:70:51:83:d2:9c:80:01:f2:a5:fe:07:e4:41:26:c6:03:0a:
b1:d3:11:94:37:fb:fa:e9:8e:da:a8:7c:a6:cb:85:96:56:1d:
49:04:3d:39:0d:c3:54:1e:9c:80:2e:91:1c:ac:02:7e:31:6e:
6c:dc:51:fa:69:1a:c1:b7:82:3c:64:f1:95:73:45:20:04:bb:
20:62:2f:93:1a:b7:0b:82:8e:87:95:6f:72:d5:26:03:af:60:
b9:c4:66:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 18:50:04 2025 by rpki-client