Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/66e6ba-0177-42f3-aa90-09a2c9ca7155/1/TsVuJbACVuJM2jJN6yGqnRMBX2U.mft
File: TsVuJbACVuJM2jJN6yGqnRMBX2U.mft (raw, json)
Hash identifier: Gl10sHG/9EtDa1Tb1eKhDPov4hpHG2zE9pIc4mEomd0=
Subject key identifier: 38:3C:4B:5B:2E:F6:60:C0:2C:34:07:D0:68:82:2E:8E:CF:0C:A6:67
Authority key identifier: 4E:C5:6E:25:B0:02:56:E2:4C:DA:32:4D:EB:21:AA:9D:13:01:5F:65
Certificate issuer: /CN=4ec56e25b00256e24cda324deb21aa9d13015f65
Certificate serial: 0198D54EB2592205AC766251170D1A58F386
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TsVuJbACVuJM2jJN6yGqnRMBX2U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/66e6ba-0177-42f3-aa90-09a2c9ca7155/1/TsVuJbACVuJM2jJN6yGqnRMBX2U.mft
Manifest number: 04
Signing time: Sat 23 Aug 2025 05:02:41 +0000
Manifest this update: Sat 23 Aug 2025 05:02:41 +0000
Manifest next update: Sun 24 Aug 2025 05:02:41 +0000
Files and hashes: 1: Ium09zmGvJCt2AU9c-Fdjqpa5l8.roa (hash: wf3B9W4I0o93C3K/6FUMd+RJ7+UQTH/bjXgr4nrzINY=)
2: TsVuJbACVuJM2jJN6yGqnRMBX2U.crl (hash: /O6DMRQ5F7WTGi7x98DgI0UiuvHTydOGOdlBmPuWfsg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/66e6ba-0177-42f3-aa90-09a2c9ca7155/1/TsVuJbACVuJM2jJN6yGqnRMBX2U.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/66e6ba-0177-42f3-aa90-09a2c9ca7155/1/TsVuJbACVuJM2jJN6yGqnRMBX2U.mft
rsync://rpki.ripe.net/repository/DEFAULT/TsVuJbACVuJM2jJN6yGqnRMBX2U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:b2:59:22:05:ac:76:62:51:17:0d:1a:58:f3:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ec56e25b00256e24cda324deb21aa9d13015f65
Validity
Not Before: Aug 23 05:02:41 2025 GMT
Not After : Aug 24 05:02:41 2025 GMT
Subject: CN=383c4b5b2ef660c02c3407d068822e8ecf0ca667
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c0:57:69:54:2e:a4:5a:b7:d6:0a:43:87:b9:
2c:aa:98:06:4d:66:45:5e:c1:33:b6:fe:3f:e9:53:
48:ee:51:f4:37:63:90:5a:b1:a1:bf:ac:ea:f7:5c:
e8:55:1b:56:57:1e:41:91:c8:80:8c:68:79:f0:1c:
70:9c:07:f5:62:b5:7b:82:d8:fc:a2:6e:dd:29:87:
47:7f:de:ef:7a:60:cd:6f:a2:97:85:81:2d:b7:c2:
aa:74:e9:dc:7b:c1:65:f4:16:d6:3b:4d:ef:e7:f6:
e4:67:11:f2:1f:4f:0f:b1:ba:da:9d:ab:92:40:26:
5a:d4:de:93:02:6f:05:47:4b:37:42:74:72:8b:0a:
56:37:ad:60:7e:6c:6c:0f:6a:9f:2a:15:fd:67:db:
b2:27:2c:49:d3:23:6b:56:b4:ec:58:a3:56:ef:5b:
9a:5f:c5:01:ed:96:df:38:ab:b8:17:9e:f9:21:2a:
61:b2:54:c2:12:38:71:0d:a3:33:a7:56:c8:42:0f:
39:79:99:6d:86:69:e2:eb:d7:1d:54:37:8a:a1:38:
84:f3:e6:f2:4f:0f:43:67:3d:ad:6a:75:42:9c:8d:
69:c4:6a:de:ed:53:8d:fc:7a:8b:f2:1e:4a:bc:41:
6b:26:8c:7d:a5:fa:30:dc:9b:a3:1b:aa:39:d8:7b:
29:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:3C:4B:5B:2E:F6:60:C0:2C:34:07:D0:68:82:2E:8E:CF:0C:A6:67
X509v3 Authority Key Identifier:
keyid:4E:C5:6E:25:B0:02:56:E2:4C:DA:32:4D:EB:21:AA:9D:13:01:5F:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TsVuJbACVuJM2jJN6yGqnRMBX2U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/66e6ba-0177-42f3-aa90-09a2c9ca7155/1/TsVuJbACVuJM2jJN6yGqnRMBX2U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/66e6ba-0177-42f3-aa90-09a2c9ca7155/1/TsVuJbACVuJM2jJN6yGqnRMBX2U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
da:42:1a:4b:f0:aa:5c:75:70:38:ca:98:e6:2e:71:75:3e:94:
a7:18:6c:96:56:33:0a:62:6f:7f:b9:9d:cd:65:81:6c:a9:8a:
d3:39:80:be:e5:c5:b6:9f:20:d0:fc:4d:18:e2:39:1b:1a:86:
86:a4:10:86:3a:26:c7:2d:ae:c8:13:ac:04:7c:66:ec:4b:8b:
2d:14:2f:23:b5:5d:02:dd:ac:eb:49:d0:42:85:3f:54:0c:46:
21:93:c6:45:e9:78:8e:55:21:9a:57:b5:dd:dd:aa:39:92:85:
56:cf:d0:01:8f:9a:ff:b5:28:dc:2c:24:5d:01:cc:9f:6d:47:
0a:64:d7:e9:f9:e9:42:b0:45:b8:d4:e4:a6:c2:07:bd:27:e6:
64:4f:26:8e:1e:8a:80:06:1f:e6:7f:85:fa:23:35:a6:82:db:
ae:e8:b9:c6:1b:65:75:7a:cb:7c:ae:7c:e1:dd:4c:60:e6:7c:
27:ab:cf:00:93:d1:7f:65:97:c1:be:c1:6a:6f:ac:e3:f9:3e:
5e:24:a7:2e:f3:33:db:d6:00:98:97:d2:df:bb:7e:57:51:64:
80:9d:90:f5:a5:12:33:ac:89:bd:e5:d5:1c:84:13:12:18:df:
b1:aa:19:91:e6:a3:40:3a:17:12:cb:de:f9:51:3d:85:bb:26:
b3:7c:02:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:49:01 2025 by rpki-client