Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/2c8482-5331-4e57-9974-40837d48473d/1/TaTWGZrsgo9pieLoTOwXdlusXNU.mft
File: TaTWGZrsgo9pieLoTOwXdlusXNU.mft (raw, json)
Hash identifier: Fej2bVL6eUhtRRXuLKnZIpxijri04Sy0QDfXzaPR4oc=
Subject key identifier: 2F:09:93:D4:37:18:67:FA:FE:33:45:C4:73:87:6E:9A:04:65:9B:25
Authority key identifier: 4D:A4:D6:19:9A:EC:82:8F:69:89:E2:E8:4C:EC:17:76:5B:AC:5C:D5
Certificate issuer: /CN=4da4d6199aec828f6989e2e84cec17765bac5cd5
Certificate serial: 0198D7731A26EA1FE9A9EBB29E7A5095BA8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TaTWGZrsgo9pieLoTOwXdlusXNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/2c8482-5331-4e57-9974-40837d48473d/1/TaTWGZrsgo9pieLoTOwXdlusXNU.mft
Manifest number: 1651
Signing time: Sat 23 Aug 2025 15:01:41 +0000
Manifest this update: Sat 23 Aug 2025 15:01:41 +0000
Manifest next update: Sun 24 Aug 2025 15:01:41 +0000
Files and hashes: 1: BhaT-M-zQEVQbEPTvK_whwRLo3g.roa (hash: yoydrscKhHCdRvyWQAObyBBT0xMyfOzTOU389MtWZv4=)
2: TaTWGZrsgo9pieLoTOwXdlusXNU.crl (hash: flMpQGLQSmCqePJG1TKCYywtJcL2eCUwM6O+YRuIE8k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/2c8482-5331-4e57-9974-40837d48473d/1/TaTWGZrsgo9pieLoTOwXdlusXNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/2c8482-5331-4e57-9974-40837d48473d/1/TaTWGZrsgo9pieLoTOwXdlusXNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TaTWGZrsgo9pieLoTOwXdlusXNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:73:1a:26:ea:1f:e9:a9:eb:b2:9e:7a:50:95:ba:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4da4d6199aec828f6989e2e84cec17765bac5cd5
Validity
Not Before: Aug 23 15:01:41 2025 GMT
Not After : Aug 24 15:01:41 2025 GMT
Subject: CN=2f0993d4371867fafe3345c473876e9a04659b25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:73:93:e9:f3:86:e7:b4:69:4a:d2:6a:4b:d3:
99:d8:3d:f8:51:47:f9:ef:11:64:34:ec:c0:73:c3:
f5:7c:2e:5d:1b:9c:a8:36:d4:87:c9:61:09:d7:42:
ca:4d:29:54:db:bc:76:40:0a:16:4c:1d:ab:5d:e1:
f1:c6:a5:a6:39:6c:87:79:cf:c3:4e:d3:7c:34:ac:
de:53:09:92:d3:4b:83:35:0b:10:4f:82:71:04:39:
bd:f9:63:1c:cf:7d:97:13:a7:13:c0:28:90:b0:2f:
10:19:a6:a2:3c:fe:6e:3e:6c:8b:84:3c:a6:c2:6f:
4b:97:88:6a:34:eb:0d:c8:a2:af:f3:e2:e5:fe:87:
c6:84:3d:d1:bc:1e:f2:f8:92:51:ae:12:9e:c6:b3:
48:21:85:cb:52:c4:e5:ab:ed:48:93:c7:bc:d9:ad:
bd:29:5d:6e:c7:25:2b:e2:ae:80:22:29:68:4e:f9:
60:96:af:e6:cc:4c:7a:8a:bb:4c:ed:5e:2b:12:fc:
a0:d5:86:fe:0c:ec:a0:a4:93:d1:5a:ab:86:b1:82:
ea:40:21:b2:71:31:c7:67:7f:11:c8:19:fa:a6:d8:
31:06:03:ff:cb:9b:4d:ef:a1:78:b9:10:a6:4f:08:
04:34:bc:4b:67:64:a8:2b:5d:4f:e0:fd:f3:53:e5:
1f:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:09:93:D4:37:18:67:FA:FE:33:45:C4:73:87:6E:9A:04:65:9B:25
X509v3 Authority Key Identifier:
keyid:4D:A4:D6:19:9A:EC:82:8F:69:89:E2:E8:4C:EC:17:76:5B:AC:5C:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TaTWGZrsgo9pieLoTOwXdlusXNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/2c8482-5331-4e57-9974-40837d48473d/1/TaTWGZrsgo9pieLoTOwXdlusXNU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/2c8482-5331-4e57-9974-40837d48473d/1/TaTWGZrsgo9pieLoTOwXdlusXNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:48:3f:70:46:b6:67:2c:3a:74:87:2c:e3:f9:6a:63:45:b1:
e9:39:e3:5d:76:a3:2b:5c:15:8a:1f:b6:fa:78:c8:3a:df:92:
de:e6:99:2b:e5:56:4d:82:aa:ad:40:82:4f:aa:02:1c:48:10:
1a:09:27:25:77:8d:c0:a2:e1:e2:a9:57:64:6a:c5:bc:1f:0e:
40:21:81:9a:24:9e:c7:1b:8f:bc:56:b2:d7:47:84:9c:69:8f:
b9:88:c5:2e:bf:ae:81:17:8c:1e:b7:e1:c6:b7:3f:ce:b6:ee:
95:a4:10:b6:1c:ac:24:bb:ff:d3:44:4e:2d:55:e3:38:4c:fb:
4f:5e:0c:be:f3:6f:d8:ee:f6:34:61:96:f3:56:f0:6b:85:28:
a9:77:28:6e:94:42:71:94:ab:93:7a:3f:85:29:70:8d:4d:9d:
ca:e8:00:af:cc:6e:22:17:b3:a0:2e:88:a8:6d:64:ed:34:2c:
20:01:a5:e3:e4:7a:25:c4:cc:96:0b:74:db:09:dd:93:92:95:
ca:57:d1:fb:63:ac:14:1f:b0:4d:ef:a1:94:42:c1:4d:ef:17:
4e:b4:8a:76:6f:28:91:b6:56:df:f9:e8:85:77:4a:0d:75:3a:
4a:da:4c:0d:b1:3e:ff:ab:3c:cf:22:41:32:e7:98:c6:3b:69:
da:24:40:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:53:19 2025 by rpki-client