Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/6eeb5c-d251-470a-a7cd-318362004e8a/1/Tm32g40DOAFB635O5V3AXYcGHck.mft
File: Tm32g40DOAFB635O5V3AXYcGHck.mft (raw, json)
Hash identifier: EtkQ1H+Mfnjslpzi6kPSyNDUMzo68+xRKzWYh8R1Lnc=
Subject key identifier: 56:E5:EE:08:BA:58:80:06:04:F6:89:31:53:50:BD:52:BE:98:FD:D8
Authority key identifier: 4E:6D:F6:83:8D:03:38:01:41:EB:7E:4E:E5:5D:C0:5D:87:06:1D:C9
Certificate issuer: /CN=4e6df6838d03380141eb7e4ee55dc05d87061dc9
Certificate serial: 0198D705E17C2C0A652BB9F62144C7749D28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tm32g40DOAFB635O5V3AXYcGHck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/6eeb5c-d251-470a-a7cd-318362004e8a/1/Tm32g40DOAFB635O5V3AXYcGHck.mft
Manifest number: 1098
Signing time: Sat 23 Aug 2025 13:02:23 +0000
Manifest this update: Sat 23 Aug 2025 13:02:23 +0000
Manifest next update: Sun 24 Aug 2025 13:02:23 +0000
Files and hashes: 1: 6zGLvq4k5vmzCBWK5uxpgKx-SpM.roa (hash: d72RjXOy3TrPnzNgu1Y/cwJXn9F8xvKoAfaZ+LW3oR4=)
2: Tm32g40DOAFB635O5V3AXYcGHck.crl (hash: 9US3olUGDzObO80mPPxJbuzQa4rfE4lFTDKyMgUW5z4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/6eeb5c-d251-470a-a7cd-318362004e8a/1/Tm32g40DOAFB635O5V3AXYcGHck.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/6eeb5c-d251-470a-a7cd-318362004e8a/1/Tm32g40DOAFB635O5V3AXYcGHck.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tm32g40DOAFB635O5V3AXYcGHck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:e1:7c:2c:0a:65:2b:b9:f6:21:44:c7:74:9d:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e6df6838d03380141eb7e4ee55dc05d87061dc9
Validity
Not Before: Aug 23 13:02:23 2025 GMT
Not After : Aug 24 13:02:23 2025 GMT
Subject: CN=56e5ee08ba58800604f689315350bd52be98fdd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:16:1a:cc:64:03:23:8c:64:b3:3a:a7:9d:0c:
03:d0:80:44:cd:18:1f:2b:14:42:6f:a4:cb:54:ac:
11:ee:da:c0:8f:03:89:0c:f9:a1:a6:fe:92:61:dc:
65:4d:2b:b3:06:d3:c6:ee:ba:81:69:43:9f:48:58:
be:81:e0:d5:bb:21:ef:53:75:63:67:ad:19:ef:87:
26:72:50:74:85:09:c4:72:15:3a:57:30:f8:02:e5:
81:f3:9c:45:86:33:d5:cd:13:e3:87:9c:b0:34:6e:
bd:1e:0e:45:45:6c:42:7b:68:bf:37:b2:7b:c3:21:
0d:47:3e:83:39:03:3a:0f:ad:d5:e5:89:41:09:43:
17:10:89:c9:a5:0e:40:f2:06:5f:62:ae:9e:ab:ee:
f9:8b:20:f5:9f:cc:31:97:15:6b:ff:94:47:e2:cb:
c6:c0:9a:91:44:db:82:76:84:71:5b:03:48:20:e7:
56:81:27:7e:ae:67:09:59:63:65:e6:f0:2a:ec:7e:
8e:fc:92:11:7d:3e:77:17:e5:23:65:b9:8e:b4:3a:
9a:57:85:4a:ea:eb:23:d4:2e:69:61:3f:e1:cf:f2:
86:7b:2a:24:80:94:23:31:29:b2:b2:73:00:73:b0:
83:2d:8d:e9:eb:df:b9:ce:fc:90:4c:18:41:00:9b:
cf:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:E5:EE:08:BA:58:80:06:04:F6:89:31:53:50:BD:52:BE:98:FD:D8
X509v3 Authority Key Identifier:
keyid:4E:6D:F6:83:8D:03:38:01:41:EB:7E:4E:E5:5D:C0:5D:87:06:1D:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tm32g40DOAFB635O5V3AXYcGHck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/6eeb5c-d251-470a-a7cd-318362004e8a/1/Tm32g40DOAFB635O5V3AXYcGHck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/6eeb5c-d251-470a-a7cd-318362004e8a/1/Tm32g40DOAFB635O5V3AXYcGHck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:60:94:15:e9:4e:ab:85:42:74:44:03:56:4f:10:06:99:79:
54:93:9d:e2:5b:38:e6:8a:29:f5:a5:03:6e:fe:f6:76:fb:e2:
db:57:ce:ec:73:9b:08:bf:4d:d3:c4:d6:f1:47:8d:7f:3e:13:
b6:65:0c:08:2a:93:fd:c7:64:57:cd:4d:26:b9:32:47:1c:2e:
9e:79:ad:34:eb:e3:b8:a0:ab:47:7c:d5:4b:2e:0a:35:1a:c2:
c0:ce:3a:b5:82:8a:89:87:29:4c:1a:2a:63:20:6a:2a:d5:4e:
6f:47:23:b0:40:7b:40:59:46:06:69:c2:e7:8a:41:4b:52:d0:
fa:76:d6:ae:24:f4:ab:01:fe:5b:c7:11:1c:5e:c7:39:c3:6e:
cf:84:7d:a0:27:b1:b5:a2:fb:2d:41:e4:d1:46:77:70:42:08:
08:80:1c:ad:73:36:14:73:f0:33:fb:e8:7e:88:e4:84:1f:85:
92:0d:f3:38:9a:bb:04:3e:93:bb:51:f3:4b:25:12:1f:de:cc:
cf:3a:73:33:16:c7:62:24:9e:42:d7:7d:c7:71:17:82:93:59:
0f:0f:94:d2:9f:08:d2:d3:ad:d1:a5:22:89:62:6a:4b:8d:aa:
81:8f:d7:4e:96:4d:1a:17:33:bc:49:c5:28:ff:8e:7b:41:66:
99:dd:6f:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:36:52 2025 by rpki-client