Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/65646f-bea4-4f93-96be-48fea345fa13/1/TCFvZlYK4WunWU9GrwYPNR4OtJ4.mft
File: TCFvZlYK4WunWU9GrwYPNR4OtJ4.mft (raw, json)
Hash identifier: vbYpKEGJ/Rzvu3qZxcEOYXAiLcp+mHKQaaa2ycEXysM=
Subject key identifier: 92:A2:20:31:36:00:C4:AA:4B:CA:80:3B:93:4A:96:FE:A6:5F:F0:6C
Authority key identifier: 4C:21:6F:66:56:0A:E1:6B:A7:59:4F:46:AF:06:0F:35:1E:0E:B4:9E
Certificate issuer: /CN=4c216f66560ae16ba7594f46af060f351e0eb49e
Certificate serial: 0198D5834D4E7C9CACAE6BD6CDB62F8DBCF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TCFvZlYK4WunWU9GrwYPNR4OtJ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/65646f-bea4-4f93-96be-48fea345fa13/1/TCFvZlYK4WunWU9GrwYPNR4OtJ4.mft
Manifest number: 0C74
Signing time: Sat 23 Aug 2025 06:00:08 +0000
Manifest this update: Sat 23 Aug 2025 06:00:08 +0000
Manifest next update: Sun 24 Aug 2025 06:00:08 +0000
Files and hashes: 1: MhvE3qmmLRT0N7DSbTLw9Csy23Q.roa (hash: JVGSBwpVFJHRhnHW5L6AwZ0tkeTLczM6lU9i030j0HQ=)
2: TCFvZlYK4WunWU9GrwYPNR4OtJ4.crl (hash: Cs5gSx2YQrgtu4EmkO86EhAs02eJEH86iAtbH2E5NQ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/65646f-bea4-4f93-96be-48fea345fa13/1/TCFvZlYK4WunWU9GrwYPNR4OtJ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/65646f-bea4-4f93-96be-48fea345fa13/1/TCFvZlYK4WunWU9GrwYPNR4OtJ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TCFvZlYK4WunWU9GrwYPNR4OtJ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 06:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:4d:4e:7c:9c:ac:ae:6b:d6:cd:b6:2f:8d:bc:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c216f66560ae16ba7594f46af060f351e0eb49e
Validity
Not Before: Aug 23 06:00:08 2025 GMT
Not After : Aug 24 06:00:08 2025 GMT
Subject: CN=92a220313600c4aa4bca803b934a96fea65ff06c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:69:5f:1c:32:fb:c7:8d:af:15:96:29:ed:c6:
6d:91:aa:c1:41:5f:54:a9:59:b4:a3:24:d0:46:3a:
ed:d1:14:a2:5c:cf:f1:af:d9:dd:2d:53:fe:38:ce:
6b:72:0c:53:45:b0:8a:3f:f2:fa:4c:49:53:b3:98:
57:ab:68:70:87:02:62:15:7a:0b:fa:3e:65:de:a3:
f7:e9:e1:00:9e:59:ec:1a:49:0e:ce:00:11:d3:fc:
d2:39:f1:53:57:63:05:15:e3:43:ea:bb:39:b0:bf:
40:52:09:53:97:b1:95:f6:1c:63:2a:96:d3:10:d2:
fd:4e:26:9f:be:e2:a7:52:e7:0e:09:1f:59:35:9c:
d3:e8:7c:be:1d:c1:f1:f6:a3:1a:5f:a8:33:4a:49:
8f:56:04:50:2a:41:8e:7e:85:28:e8:15:22:f5:3c:
5f:5d:b8:5c:28:c9:79:97:95:aa:2c:e4:4d:ab:97:
25:c3:36:4d:bf:ee:7c:7b:33:ae:66:8f:97:e3:3f:
f3:29:64:06:bb:60:c4:e2:b6:ea:69:85:75:96:05:
98:66:29:b5:72:9d:6c:41:8b:77:39:d4:eb:ef:cd:
af:f3:fa:1a:15:1b:c3:c2:8f:ed:8b:05:38:7d:66:
a9:82:00:9f:a8:75:29:f1:c2:90:0d:2f:cd:9b:90:
f9:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:A2:20:31:36:00:C4:AA:4B:CA:80:3B:93:4A:96:FE:A6:5F:F0:6C
X509v3 Authority Key Identifier:
keyid:4C:21:6F:66:56:0A:E1:6B:A7:59:4F:46:AF:06:0F:35:1E:0E:B4:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TCFvZlYK4WunWU9GrwYPNR4OtJ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/65646f-bea4-4f93-96be-48fea345fa13/1/TCFvZlYK4WunWU9GrwYPNR4OtJ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/65646f-bea4-4f93-96be-48fea345fa13/1/TCFvZlYK4WunWU9GrwYPNR4OtJ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:0a:a1:79:73:d2:92:77:ab:95:14:62:b9:b2:05:02:0f:8f:
d9:b7:c0:10:5b:70:e7:c0:80:f7:8b:bd:b0:a7:10:59:50:f9:
38:30:16:29:b6:63:3a:ea:63:8b:36:a0:d1:5d:2a:97:e8:b5:
45:d4:7f:70:19:e7:eb:49:52:ad:ea:1c:ea:5b:c0:f3:0d:af:
f1:59:8b:00:26:8c:c8:2d:38:f9:96:11:03:2f:1d:18:a9:59:
31:83:29:76:93:a9:5a:c1:f1:70:cf:93:01:f2:0b:6c:a5:5f:
24:48:20:03:84:06:63:67:88:78:ee:0c:37:89:25:2d:94:85:
03:f1:f9:03:de:b2:33:47:a7:b5:c2:6a:f5:b2:03:7c:a7:02:
ea:df:d4:f0:60:b1:db:07:f0:80:e3:bf:e4:7a:09:44:97:c8:
6a:3e:6d:c8:0d:d8:da:f4:c1:8d:20:e4:d7:d4:fb:a5:e7:cf:
49:89:e0:c3:3b:e1:fe:90:ae:44:01:bd:cf:0f:61:3e:6f:2b:
f2:14:74:c9:6a:c8:4f:14:60:11:fc:6b:84:4b:0c:f3:c6:58:
da:0b:a9:97:e5:4d:71:ab:b6:42:ef:4b:f4:02:2d:b3:62:fc:
ee:51:ed:f9:e4:ee:27:be:04:5b:8e:6a:69:09:07:61:13:db:
86:02:42:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:12:12 2025 by rpki-client