Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/77f99c-35cb-47a6-bac3-caba81c9a152/1/tcr-HjrqL22RHtEHoIqv7peaT1E.mft
File: tcr-HjrqL22RHtEHoIqv7peaT1E.mft (raw, json)
Hash identifier: vua6o5V9NDSjPiB2Dgt0mu3/tlLlM4gGjffbLHdntao=
Subject key identifier: C1:55:E5:F9:44:AB:6F:36:48:67:25:9C:DB:FA:D3:5E:88:AB:C5:A1
Authority key identifier: B5:CA:FE:1E:3A:EA:2F:6D:91:1E:D1:07:A0:8A:AF:EE:97:9A:4F:51
Certificate issuer: /CN=b5cafe1e3aea2f6d911ed107a08aafee979a4f51
Certificate serial: 0198D4E064BF4C5B9176B5BA5F43EBB53684
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tcr-HjrqL22RHtEHoIqv7peaT1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/77f99c-35cb-47a6-bac3-caba81c9a152/1/tcr-HjrqL22RHtEHoIqv7peaT1E.mft
Manifest number: 0991
Signing time: Sat 23 Aug 2025 03:02:12 +0000
Manifest this update: Sat 23 Aug 2025 03:02:12 +0000
Manifest next update: Sun 24 Aug 2025 03:02:12 +0000
Files and hashes: 1: RbtpOQvxKOhivyATsaFRApG8DvI.roa (hash: rcUrQ9qXVTCmRSSGNqyeO7AKgTyqtF4rizry0Ad9las=)
2: S6bzH3vR-9_Z8W37FxbGY_bsSRI.roa (hash: mXMMwIa+4CrlkQM+hSljAaJyd1k858ZniaKc/09JBeY=)
3: a0RRgx7_17MRQY0QEGYvnSPepZU.roa (hash: YVzxS9jFVMbMgJf+c2GFQwY/wSVZdg9tW30Q3WHGzsg=)
4: tcr-HjrqL22RHtEHoIqv7peaT1E.crl (hash: 0iDPa/Rrv+zjem/5ZW2reJkOW5XQqnBzk+GB9CGJXyc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/77f99c-35cb-47a6-bac3-caba81c9a152/1/tcr-HjrqL22RHtEHoIqv7peaT1E.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/77f99c-35cb-47a6-bac3-caba81c9a152/1/tcr-HjrqL22RHtEHoIqv7peaT1E.mft
rsync://rpki.ripe.net/repository/DEFAULT/tcr-HjrqL22RHtEHoIqv7peaT1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:64:bf:4c:5b:91:76:b5:ba:5f:43:eb:b5:36:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5cafe1e3aea2f6d911ed107a08aafee979a4f51
Validity
Not Before: Aug 23 03:02:12 2025 GMT
Not After : Aug 24 03:02:12 2025 GMT
Subject: CN=c155e5f944ab6f364867259cdbfad35e88abc5a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f5:6f:0d:8d:09:08:d1:cd:5e:51:8e:d1:7a:
c8:64:f3:fc:24:72:92:9b:3e:83:15:8d:f3:9b:41:
cc:cf:ea:96:7f:a2:bc:d4:07:90:44:67:87:33:72:
89:8e:d4:09:87:dc:f4:07:80:73:33:4f:32:61:5d:
54:6f:c2:a2:7d:c7:7b:d3:03:69:8d:7a:68:f9:74:
e2:ef:e2:12:4f:1d:3d:18:c1:3a:60:ff:60:cf:42:
83:ed:5a:a9:e3:40:1a:33:23:21:d5:9e:ff:81:d8:
42:d0:4e:63:88:ef:77:b8:5f:3f:2c:59:8a:18:71:
6b:2d:97:7c:34:6e:fe:4c:9e:74:70:46:38:b1:06:
c4:c4:73:a0:17:be:d9:7c:fe:aa:86:6d:53:09:cd:
cc:f3:ce:11:57:ec:95:de:1c:0b:fb:f1:70:b6:20:
53:11:fe:37:3a:c9:ab:fe:61:d0:d7:68:07:da:4e:
af:89:a2:c1:da:e1:e7:f2:bf:28:b6:76:59:c2:4b:
3d:11:8e:ba:b7:cc:35:08:53:ea:d3:f0:10:00:ba:
11:0d:af:70:aa:82:08:a1:49:0a:e3:d4:2d:ef:5d:
8f:e6:17:e6:72:a2:cd:b5:54:77:78:d8:49:c4:63:
2c:53:66:d4:52:29:31:98:59:9a:b2:73:8d:36:98:
22:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:55:E5:F9:44:AB:6F:36:48:67:25:9C:DB:FA:D3:5E:88:AB:C5:A1
X509v3 Authority Key Identifier:
keyid:B5:CA:FE:1E:3A:EA:2F:6D:91:1E:D1:07:A0:8A:AF:EE:97:9A:4F:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tcr-HjrqL22RHtEHoIqv7peaT1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/77f99c-35cb-47a6-bac3-caba81c9a152/1/tcr-HjrqL22RHtEHoIqv7peaT1E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/77f99c-35cb-47a6-bac3-caba81c9a152/1/tcr-HjrqL22RHtEHoIqv7peaT1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:da:43:38:13:6f:fd:54:fe:0a:2f:3a:ba:95:43:01:8b:8f:
db:fc:1c:94:f1:3f:b7:c6:a0:29:e7:a8:66:6e:a4:b9:52:f4:
43:66:d1:62:85:41:56:de:e4:60:a6:48:3b:1a:39:7f:6f:4e:
a7:1b:8d:63:ec:38:90:0b:63:a0:78:70:22:9b:38:d6:b2:83:
a1:2b:d6:3a:4a:49:22:2e:8a:ba:c8:40:35:1d:80:51:5f:9f:
f2:1b:88:bb:40:ca:3f:cb:13:3c:12:5c:ba:ca:bf:46:71:57:
b8:37:2d:4b:25:93:b1:1d:24:e7:a9:d8:17:d0:1c:10:be:99:
c0:4a:a0:da:d5:39:03:1e:82:11:11:ec:3c:d5:59:f5:fc:f8:
dc:40:d8:fa:61:9d:d5:10:64:c7:40:d8:2f:6d:4b:82:d0:cb:
5d:a5:fa:ce:df:40:fb:c5:a7:3c:6c:85:81:47:73:dd:58:a6:
a4:59:69:e7:37:77:37:0f:d6:17:d8:83:b9:cc:3b:0f:67:e9:
e7:cd:06:63:78:65:62:54:79:5a:a9:e0:c4:04:d2:4e:b0:c9:
8d:e5:a8:8f:c6:54:50:29:c7:a1:66:f3:4a:18:0c:01:5b:93:
8c:dc:9e:5b:86:2a:a3:c6:55:77:9c:1c:74:09:90:ec:84:87:
dc:c3:4f:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:06 2025 by rpki-client