Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/TKRH97Ondvck2LyBQL4xdmYsJNA.mft
File: TKRH97Ondvck2LyBQL4xdmYsJNA.mft (raw, json)
Hash identifier: 3VDMkd1uTJqkNeMsoLwx/+AT/b3jqaPKfnRUxGXq5lM=
Subject key identifier: AF:1C:AF:9A:E1:60:FB:7E:3E:4C:17:45:D2:B6:6E:01:82:8D:02:AC
Authority key identifier: 4C:A4:47:F7:B3:A7:76:F7:24:D8:BC:81:40:BE:31:76:66:2C:24:D0
Certificate issuer: /CN=4ca447f7b3a776f724d8bc8140be3176662c24d0
Certificate serial: 0198D54EB88E0817BEDEC85ABC567B89DA87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TKRH97Ondvck2LyBQL4xdmYsJNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/TKRH97Ondvck2LyBQL4xdmYsJNA.mft
Manifest number: 06DB
Signing time: Sat 23 Aug 2025 05:02:42 +0000
Manifest this update: Sat 23 Aug 2025 05:02:42 +0000
Manifest next update: Sun 24 Aug 2025 05:02:42 +0000
Files and hashes: 1: TKRH97Ondvck2LyBQL4xdmYsJNA.crl (hash: SeQTxStEfGUyN68RyY7SBJNrjiJ1oH6dRPExA1AW1Lg=)
2: fIoweheWq1JqzVdLBCrrD-x4kK4.roa (hash: yoQba86aaUs4p2P/E/UoxSeIL5NEm/wDobQOVMT4e5A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/TKRH97Ondvck2LyBQL4xdmYsJNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/TKRH97Ondvck2LyBQL4xdmYsJNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/TKRH97Ondvck2LyBQL4xdmYsJNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:b8:8e:08:17:be:de:c8:5a:bc:56:7b:89:da:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ca447f7b3a776f724d8bc8140be3176662c24d0
Validity
Not Before: Aug 23 05:02:42 2025 GMT
Not After : Aug 24 05:02:42 2025 GMT
Subject: CN=af1caf9ae160fb7e3e4c1745d2b66e01828d02ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:83:5d:a8:ba:dc:01:96:20:ed:78:99:a6:04:
05:9a:a9:a4:f0:b3:5e:7c:7c:91:48:c6:a4:bf:50:
aa:49:7a:a2:9b:75:21:61:cc:78:39:ee:9c:da:cb:
b2:c0:3e:d1:3e:e2:1d:53:71:a9:51:ed:f7:f5:29:
01:d4:b4:05:bc:7e:b2:0f:9c:f8:9e:39:33:01:8b:
5e:37:7f:3f:a9:41:6b:55:c7:d8:10:50:76:a7:fd:
88:3d:68:db:1e:87:a6:ed:1e:6e:ec:15:b8:e6:40:
3d:67:90:4a:61:73:12:ed:fd:ab:11:a7:01:a7:9d:
5a:ef:47:41:f3:7d:31:26:bd:15:04:e5:40:40:cc:
58:d8:ad:4e:c5:66:79:52:ee:ce:00:e3:cd:1a:d7:
91:ca:d0:22:62:6b:44:a8:7b:43:7f:e5:6d:b9:2d:
1b:40:e1:8f:59:52:01:c4:86:35:3f:a3:b6:ac:73:
12:10:fb:2d:53:56:c3:ca:94:ec:e1:06:0d:9b:ea:
59:d7:cc:93:1f:34:98:08:02:bf:22:33:58:d1:3b:
38:b8:20:df:c0:23:99:34:17:cd:81:a8:ba:b8:0b:
2a:d7:20:42:05:72:61:40:b2:80:06:75:b9:e6:03:
bb:33:2f:6f:18:d9:45:83:3b:9c:e2:95:5b:4c:d5:
52:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:1C:AF:9A:E1:60:FB:7E:3E:4C:17:45:D2:B6:6E:01:82:8D:02:AC
X509v3 Authority Key Identifier:
keyid:4C:A4:47:F7:B3:A7:76:F7:24:D8:BC:81:40:BE:31:76:66:2C:24:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TKRH97Ondvck2LyBQL4xdmYsJNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/TKRH97Ondvck2LyBQL4xdmYsJNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/TKRH97Ondvck2LyBQL4xdmYsJNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:ca:24:54:4f:4d:e8:02:25:82:5e:75:d1:2b:98:85:a9:eb:
b2:7c:af:72:5d:5a:4b:a6:5f:d3:34:09:f0:aa:e9:c2:04:23:
ce:78:37:f1:d4:73:a6:e9:59:95:d1:fc:1f:5c:d5:33:af:18:
1b:c8:ce:32:30:62:0a:4f:23:08:8a:0b:eb:b7:8c:84:55:b0:
56:c1:93:d0:2d:05:0c:71:5c:1c:44:0c:1c:12:cf:7a:75:a6:
df:21:86:c2:67:27:50:f4:eb:b3:1f:7a:db:0b:9f:93:65:ed:
70:fb:23:db:48:68:88:1a:0c:59:ea:d5:27:1c:ca:6d:43:90:
c3:44:e1:2a:b5:16:b8:ec:6f:d7:fb:b2:5e:e9:06:e2:26:40:
3f:a0:09:7d:e6:ac:4c:92:b2:10:14:3a:4b:6f:af:a2:d1:e0:
6f:b0:31:5a:e6:ea:37:76:46:38:27:1e:9d:83:63:7a:38:9c:
6d:16:66:10:1b:f8:d3:95:ba:93:20:45:fb:84:6c:85:ea:93:
53:85:93:72:bb:4c:cf:27:95:89:ae:23:7c:9e:91:ab:0e:45:
09:b2:5c:d8:e2:22:b8:ef:3f:92:9c:af:83:3b:85:e5:cc:c3:
ba:a5:71:d8:00:34:7e:94:96:9a:66:77:fb:77:77:97:c6:1d:
6e:1f:36:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:34:57 2025 by rpki-client