Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/d9d3c9-f194-4b26-8f10-ff6a9cde6335/1/tcR4e4CrSAGrYrG9v7KOBtMM32o.mft
File: tcR4e4CrSAGrYrG9v7KOBtMM32o.mft (raw, json)
Hash identifier: +p9F61gWgB8C0otz/m0VjB6lEH0S6XX/8qkKk3i4Kuc=
Subject key identifier: 5B:7B:A0:DB:A7:39:8E:4B:0A:68:83:5A:44:C5:E3:96:98:A5:81:AE
Authority key identifier: B5:C4:78:7B:80:AB:48:01:AB:62:B1:BD:BF:B2:8E:06:D3:0C:DF:6A
Certificate issuer: /CN=b5c4787b80ab4801ab62b1bdbfb28e06d30cdf6a
Certificate serial: 0198D7059B4AF80ECAD6D3A709D8C1B63A16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tcR4e4CrSAGrYrG9v7KOBtMM32o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/d9d3c9-f194-4b26-8f10-ff6a9cde6335/1/tcR4e4CrSAGrYrG9v7KOBtMM32o.mft
Manifest number: 04A6
Signing time: Sat 23 Aug 2025 13:02:05 +0000
Manifest this update: Sat 23 Aug 2025 13:02:05 +0000
Manifest next update: Sun 24 Aug 2025 13:02:05 +0000
Files and hashes: 1: ktAbm-eMqyUysDj5Rz0ozhsQgoU.roa (hash: sOoFB/V0u6n0JOO4WrnOrE08EvrJyrBKeqUzyGdoIfI=)
2: tcR4e4CrSAGrYrG9v7KOBtMM32o.crl (hash: vxTuQjkVx7Uk2+Y8OKjj1ijM392TPQMHPW9kGRcJ2DQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/d9d3c9-f194-4b26-8f10-ff6a9cde6335/1/tcR4e4CrSAGrYrG9v7KOBtMM32o.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/d9d3c9-f194-4b26-8f10-ff6a9cde6335/1/tcR4e4CrSAGrYrG9v7KOBtMM32o.mft
rsync://rpki.ripe.net/repository/DEFAULT/tcR4e4CrSAGrYrG9v7KOBtMM32o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 13:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:9b:4a:f8:0e:ca:d6:d3:a7:09:d8:c1:b6:3a:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5c4787b80ab4801ab62b1bdbfb28e06d30cdf6a
Validity
Not Before: Aug 23 13:02:05 2025 GMT
Not After : Aug 24 13:02:05 2025 GMT
Subject: CN=5b7ba0dba7398e4b0a68835a44c5e39698a581ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b5:86:73:c5:66:3a:9c:8b:51:d1:39:96:00:
22:d2:31:5b:53:63:b9:be:fe:fe:6b:37:88:1e:1d:
d1:65:9c:73:13:6c:9b:28:c1:c1:df:c2:84:c1:1d:
61:9a:8d:0c:b1:cb:99:40:19:e6:6c:4c:45:b8:08:
39:de:d8:e0:f8:a2:f1:7e:b6:5a:24:7f:4c:e1:5e:
4b:c2:ff:53:73:2e:37:7c:af:11:5b:3d:01:b9:6c:
96:b2:06:6b:78:e0:e8:79:0f:9f:19:7d:9e:a8:bd:
64:3b:fc:89:53:16:42:e2:cc:5b:d8:ce:62:d9:80:
da:f7:00:de:81:43:10:be:43:39:39:94:0d:60:ac:
9b:0b:47:11:03:39:60:0d:2f:8c:3d:f9:75:4f:07:
c1:33:01:53:9d:0a:c7:de:1a:c6:46:73:9d:ac:6a:
44:87:95:83:57:a7:9d:4b:95:0b:ed:49:ae:ae:ac:
fb:c0:ba:5b:48:34:d8:4d:4c:f4:93:ea:9a:66:e7:
21:65:fd:db:b3:51:0a:d8:3e:1c:0f:3c:1e:1b:56:
94:5a:28:50:07:85:16:77:94:80:d7:b7:52:0d:ec:
cd:17:86:1d:ad:c0:99:d3:e7:6b:6b:1f:35:de:94:
57:f4:7e:b4:0f:6a:a9:cb:35:d9:bb:22:6d:b1:c5:
7e:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:7B:A0:DB:A7:39:8E:4B:0A:68:83:5A:44:C5:E3:96:98:A5:81:AE
X509v3 Authority Key Identifier:
keyid:B5:C4:78:7B:80:AB:48:01:AB:62:B1:BD:BF:B2:8E:06:D3:0C:DF:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tcR4e4CrSAGrYrG9v7KOBtMM32o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d9d3c9-f194-4b26-8f10-ff6a9cde6335/1/tcR4e4CrSAGrYrG9v7KOBtMM32o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d9d3c9-f194-4b26-8f10-ff6a9cde6335/1/tcR4e4CrSAGrYrG9v7KOBtMM32o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:68:38:fa:65:03:7a:c1:ed:c0:6c:8d:32:1e:ef:9a:4c:ba:
27:fe:95:ee:e9:18:7f:bd:5f:1a:81:b8:68:c8:63:b6:9f:1e:
38:2c:36:61:aa:20:52:77:6a:66:6a:97:05:51:d1:07:96:35:
21:ea:ec:7d:db:68:59:56:d7:99:63:47:b9:8c:27:35:b7:ab:
24:5e:9a:04:7e:41:3e:62:11:19:c8:e4:85:b5:21:05:1b:7f:
04:05:ff:77:21:f8:53:27:88:21:53:d2:41:ee:ab:c1:90:7b:
f0:11:77:0b:bb:6e:6b:bb:6f:40:a4:8e:10:19:34:ce:89:49:
4a:97:63:80:df:b3:88:19:49:16:6b:b4:87:a8:e8:37:2d:c5:
3c:52:ee:2e:e8:6e:71:ba:50:43:7e:05:1d:9c:cd:22:d6:a5:
58:22:2f:14:9f:ca:5d:65:86:91:9d:94:7a:17:f3:8e:1f:7b:
ca:96:ad:30:48:47:61:ae:15:2c:7e:2a:45:c0:7d:31:e9:04:
52:36:90:e0:50:be:61:35:a5:37:82:bd:b6:72:b1:5f:63:25:
4b:7a:2e:3c:33:de:c3:3e:d0:62:9d:10:30:bd:3f:10:6d:68:
54:5b:61:73:72:b4:7c:37:4c:73:af:61:b2:e3:03:3c:e0:fe:
11:0c:40:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:50:16 2025 by rpki-client