Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/8e1198-e50f-416f-9d6b-1e9bff5e4021/1/TfCXBITrJrxZ_Y-o1b98PHIS0BE.mft
File: TfCXBITrJrxZ_Y-o1b98PHIS0BE.mft (raw, json)
Hash identifier: UPoC8SB7JGWHxgC/oc1O1Fr/E9gVFAPzB/l6VUwXgu8=
Subject key identifier: 74:EA:66:C6:F2:D1:80:7D:D0:34:FD:EE:0B:FE:5F:28:FF:11:EA:C9
Authority key identifier: 4D:F0:97:04:84:EB:26:BC:59:FD:8F:A8:D5:BF:7C:3C:72:12:D0:11
Certificate issuer: /CN=4df0970484eb26bc59fd8fa8d5bf7c3c7212d011
Certificate serial: 0198D6614D5ED116B7D7FA8CE13E0E4F21DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TfCXBITrJrxZ_Y-o1b98PHIS0BE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/8e1198-e50f-416f-9d6b-1e9bff5e4021/1/TfCXBITrJrxZ_Y-o1b98PHIS0BE.mft
Manifest number: 0BEB
Signing time: Sat 23 Aug 2025 10:02:37 +0000
Manifest this update: Sat 23 Aug 2025 10:02:37 +0000
Manifest next update: Sun 24 Aug 2025 10:02:37 +0000
Files and hashes: 1: 2uYjtWwrEGy8RjTZ7XkVPtKNY1o.roa (hash: Q+J34jzVVf5yX7UskA0nUE436owKoCvouyp2C9nIn84=)
2: 8bYh9KTQNyhUoZK5Xa3Zu-_BqQk.roa (hash: Ckdj62IcP39fMv9cL87VgjiYlT1GoMjuC5C5dI+N2jA=)
3: TfCXBITrJrxZ_Y-o1b98PHIS0BE.crl (hash: 8TjSY4rtkdwQ/BeKwFoxUkq+1unMHq2I5qNI3M6Dmho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/8e1198-e50f-416f-9d6b-1e9bff5e4021/1/TfCXBITrJrxZ_Y-o1b98PHIS0BE.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/8e1198-e50f-416f-9d6b-1e9bff5e4021/1/TfCXBITrJrxZ_Y-o1b98PHIS0BE.mft
rsync://rpki.ripe.net/repository/DEFAULT/TfCXBITrJrxZ_Y-o1b98PHIS0BE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:4d:5e:d1:16:b7:d7:fa:8c:e1:3e:0e:4f:21:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4df0970484eb26bc59fd8fa8d5bf7c3c7212d011
Validity
Not Before: Aug 23 10:02:37 2025 GMT
Not After : Aug 24 10:02:37 2025 GMT
Subject: CN=74ea66c6f2d1807dd034fdee0bfe5f28ff11eac9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:12:3c:f0:bf:8b:b7:3f:7d:fa:d7:69:18:05:
cf:e6:cd:41:0a:24:91:a4:aa:9f:c0:83:47:c9:ae:
18:d5:c8:a7:a2:80:ec:1b:dc:7c:53:00:24:58:93:
fe:b1:8c:5d:0a:6f:b2:da:8f:86:08:8c:db:f8:a2:
be:6d:d9:06:67:94:69:02:53:60:cf:77:90:98:c3:
82:8f:17:2c:6c:33:58:ab:5d:71:bb:45:f8:cb:01:
00:b8:d7:af:a2:8d:21:6d:6b:f7:91:63:2d:89:7e:
81:b9:34:9e:5f:f3:29:59:10:e8:26:2a:7b:c8:97:
5e:b7:3a:5a:b9:4f:67:24:1a:61:ea:7e:18:c4:f5:
f6:5c:1d:c2:5b:ce:27:06:5d:38:80:4d:3f:fe:3a:
28:01:f4:2e:e7:aa:d5:43:66:7e:48:fa:50:6c:c2:
e7:5b:a7:56:a9:66:a7:b1:23:c3:24:c4:f2:4a:d7:
e1:60:ad:de:67:c4:c2:ec:7d:ed:df:f6:36:27:67:
ec:da:8c:0b:15:9e:61:aa:cd:17:99:13:08:d1:b8:
dd:8b:10:b9:7d:15:28:d2:b5:ce:10:e9:6f:91:ed:
8a:4a:eb:86:1c:e3:af:bf:cd:7a:87:a9:5f:4c:31:
e4:95:04:16:14:71:ec:77:e2:bd:ba:3a:d7:d3:8b:
f5:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:EA:66:C6:F2:D1:80:7D:D0:34:FD:EE:0B:FE:5F:28:FF:11:EA:C9
X509v3 Authority Key Identifier:
keyid:4D:F0:97:04:84:EB:26:BC:59:FD:8F:A8:D5:BF:7C:3C:72:12:D0:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TfCXBITrJrxZ_Y-o1b98PHIS0BE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8e1198-e50f-416f-9d6b-1e9bff5e4021/1/TfCXBITrJrxZ_Y-o1b98PHIS0BE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8e1198-e50f-416f-9d6b-1e9bff5e4021/1/TfCXBITrJrxZ_Y-o1b98PHIS0BE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:2b:79:bb:bd:06:71:bf:e0:74:4f:e2:cd:66:d7:05:13:6b:
02:8f:c2:47:38:85:0a:ca:af:e5:9b:f2:2e:a2:06:45:1b:c0:
14:e1:5c:06:4b:0b:cf:9b:28:d8:14:37:ca:03:28:29:97:36:
37:3a:19:76:a6:ec:cb:ae:d4:5e:e4:a5:e9:c5:6c:e8:15:9b:
b1:a5:2d:2b:e3:aa:ea:63:f8:e0:2f:61:d2:a1:9c:d7:da:bb:
db:4b:b2:75:0a:c6:5f:6c:45:e2:5f:74:a4:de:2f:17:56:d9:
95:f2:28:e1:77:ab:56:f9:e4:d5:9f:dc:78:30:97:56:9b:cb:
35:52:f5:1c:40:f2:96:e0:3b:cc:85:90:35:c3:af:d9:86:fa:
d0:e6:24:9b:b7:19:e4:88:6b:80:9a:35:d7:45:8f:c7:45:50:
91:59:f7:ab:22:3c:cc:96:b4:13:6c:27:48:00:08:2a:5a:8c:
d5:8f:9b:d7:c8:15:9b:67:32:54:9e:36:72:4e:0d:fb:26:50:
5b:44:3f:be:c2:e2:17:e1:6e:86:f0:6d:17:b7:00:81:84:7b:
fd:ad:2f:d9:ea:71:bf:90:f2:aa:2b:b4:bd:92:b1:59:ee:c9:
e7:6f:13:a4:56:cd:b4:2a:76:27:c5:4b:5b:46:45:dd:f7:3a:
03:06:ab:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:32:13 2025 by rpki-client