Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/1f1e7b-5907-48c1-90fd-5602712baa5b/1/TgfHPboamfW7wV94xjkKqZwmmCQ.mft
File: TgfHPboamfW7wV94xjkKqZwmmCQ.mft (raw, json)
Hash identifier: ZUqflunqk9E9LZsSUv9ruypyEMj0+gsOmtKIiTbE1I8=
Subject key identifier: 9C:9E:4F:17:D5:56:08:F9:23:78:36:F1:94:A3:0A:B6:BC:FE:9D:A9
Authority key identifier: 4E:07:C7:3D:BA:1A:99:F5:BB:C1:5F:78:C6:39:0A:A9:9C:26:98:24
Certificate issuer: /CN=4e07c73dba1a99f5bbc15f78c6390aa99c269824
Certificate serial: 0198D47260ADF4BAA94B116EEA12A4706B18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TgfHPboamfW7wV94xjkKqZwmmCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/1f1e7b-5907-48c1-90fd-5602712baa5b/1/TgfHPboamfW7wV94xjkKqZwmmCQ.mft
Manifest number: 1410
Signing time: Sat 23 Aug 2025 01:02:02 +0000
Manifest this update: Sat 23 Aug 2025 01:02:02 +0000
Manifest next update: Sun 24 Aug 2025 01:02:02 +0000
Files and hashes: 1: TgfHPboamfW7wV94xjkKqZwmmCQ.crl (hash: GDtLDeP+QJAz7TK8zUVPgK+pJ+g8IUwqAJJpR9uap18=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/1f1e7b-5907-48c1-90fd-5602712baa5b/1/TgfHPboamfW7wV94xjkKqZwmmCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/1f1e7b-5907-48c1-90fd-5602712baa5b/1/TgfHPboamfW7wV94xjkKqZwmmCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/TgfHPboamfW7wV94xjkKqZwmmCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:60:ad:f4:ba:a9:4b:11:6e:ea:12:a4:70:6b:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e07c73dba1a99f5bbc15f78c6390aa99c269824
Validity
Not Before: Aug 23 01:02:02 2025 GMT
Not After : Aug 24 01:02:02 2025 GMT
Subject: CN=9c9e4f17d55608f9237836f194a30ab6bcfe9da9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:56:e0:0b:ba:3c:53:44:a4:d9:aa:b6:cf:88:
30:cf:5a:76:e0:c7:86:d9:a5:b9:b4:09:71:ff:75:
0f:46:34:e4:70:38:6c:04:59:d3:59:04:ea:09:38:
e4:cd:e2:92:3d:dd:a7:ab:1b:e6:e4:bf:6b:2d:2a:
0f:cf:18:f5:16:1c:6c:d7:ff:36:7a:26:a0:84:05:
da:2c:73:0e:a6:08:62:3f:8b:69:7f:2e:89:ac:ce:
a3:2b:c6:b6:ae:97:bb:19:38:33:08:8f:36:74:2c:
3d:5d:03:9b:62:a8:d5:77:db:66:5d:da:37:b7:92:
4a:93:1d:f1:7d:7d:fb:41:6b:04:be:c3:ef:ae:96:
c5:7c:2a:07:20:cf:5e:1e:4f:4a:cf:bb:43:64:8b:
10:97:6b:8d:4c:1b:8d:c3:7d:19:c7:e1:44:81:fd:
29:f8:f3:f7:17:76:0b:1d:e8:2a:1e:8f:b0:49:f8:
8a:5b:92:51:94:53:04:98:ed:7c:51:99:8d:40:07:
61:e4:b4:3e:33:98:b4:8f:9b:c8:c7:69:55:79:6c:
ef:04:6f:0d:39:57:d9:df:7c:39:35:1b:b5:d2:45:
79:18:d0:9c:25:d5:b3:60:4f:46:33:10:3e:a0:8b:
28:d0:ea:7a:37:cb:f4:f8:cb:60:68:e8:86:c2:6b:
f9:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:9E:4F:17:D5:56:08:F9:23:78:36:F1:94:A3:0A:B6:BC:FE:9D:A9
X509v3 Authority Key Identifier:
keyid:4E:07:C7:3D:BA:1A:99:F5:BB:C1:5F:78:C6:39:0A:A9:9C:26:98:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TgfHPboamfW7wV94xjkKqZwmmCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/1f1e7b-5907-48c1-90fd-5602712baa5b/1/TgfHPboamfW7wV94xjkKqZwmmCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/1f1e7b-5907-48c1-90fd-5602712baa5b/1/TgfHPboamfW7wV94xjkKqZwmmCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:e0:76:0a:91:b2:dc:31:6d:45:14:89:32:9d:ac:c8:43:4a:
24:3a:dc:b7:99:0a:12:2f:e3:fd:25:fd:20:b8:e7:75:1c:eb:
07:62:2b:99:7c:5d:5e:4a:10:26:d5:c9:d0:73:85:73:3c:76:
48:90:6c:32:59:39:0c:52:d2:92:3a:ec:4c:8c:e7:5b:55:4b:
08:72:01:4f:13:cb:ce:19:9e:ea:b2:45:23:b4:2b:a4:28:ce:
8e:4f:58:33:89:56:c3:2a:41:29:0c:c0:c5:c8:12:18:b9:7c:
fc:25:42:43:9a:d6:5c:51:76:0c:36:cf:66:2c:5a:3f:f3:59:
7a:c3:c3:83:50:ae:82:ac:d7:e9:fe:4c:9c:e0:c9:8e:dc:f1:
b6:27:9e:4b:08:be:12:e4:f9:d0:0b:22:11:89:03:21:76:41:
45:f7:9a:09:fb:87:b9:5b:27:c5:5f:55:aa:3d:e6:0d:82:01:
ee:55:aa:7d:64:c4:47:a9:0b:f4:80:5f:d0:98:56:06:a1:67:
1d:0a:f2:9c:e3:54:55:f5:01:c0:59:4b:c3:09:82:7c:e8:eb:
54:13:da:3c:1e:77:ee:d1:77:6e:12:4a:b9:c2:8e:0d:34:d4:
62:52:58:8a:a0:3b:6c:4d:01:82:65:72:36:20:48:90:01:ec:
5c:bb:b4:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:44:53 2025 by rpki-client