Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/65646f-bea4-4f93-96be-48fea345fa13/1/TCFvZlYK4WunWU9GrwYPNR4OtJ4.mft
File: TCFvZlYK4WunWU9GrwYPNR4OtJ4.mft (raw, json)
Hash identifier: z5tKLEkb/DpaC09OS3yMDP9rzQSG/+TA4C5O4ITUNWo=
Subject key identifier: F4:58:94:D3:F7:C1:F5:D5:2F:45:2C:D3:39:43:40:B2:2D:A5:03:F8
Authority key identifier: 4C:21:6F:66:56:0A:E1:6B:A7:59:4F:46:AF:06:0F:35:1E:0E:B4:9E
Certificate issuer: /CN=4c216f66560ae16ba7594f46af060f351e0eb49e
Certificate serial: 0197B7B2F9B1A83E7E8DA3CC658841910123
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TCFvZlYK4WunWU9GrwYPNR4OtJ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/65646f-bea4-4f93-96be-48fea345fa13/1/TCFvZlYK4WunWU9GrwYPNR4OtJ4.mft
Manifest number: 0BE0
Signing time: Sat 28 Jun 2025 18:00:49 +0000
Manifest this update: Sat 28 Jun 2025 18:00:49 +0000
Manifest next update: Sun 29 Jun 2025 18:00:49 +0000
Files and hashes: 1: MhvE3qmmLRT0N7DSbTLw9Csy23Q.roa (hash: JVGSBwpVFJHRhnHW5L6AwZ0tkeTLczM6lU9i030j0HQ=)
2: TCFvZlYK4WunWU9GrwYPNR4OtJ4.crl (hash: 5GscSqCTHetUR+d6UPGQb2affN1itAJgmQ4YX6qMepo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/65646f-bea4-4f93-96be-48fea345fa13/1/TCFvZlYK4WunWU9GrwYPNR4OtJ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/65646f-bea4-4f93-96be-48fea345fa13/1/TCFvZlYK4WunWU9GrwYPNR4OtJ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TCFvZlYK4WunWU9GrwYPNR4OtJ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b2:f9:b1:a8:3e:7e:8d:a3:cc:65:88:41:91:01:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c216f66560ae16ba7594f46af060f351e0eb49e
Validity
Not Before: Jun 28 18:00:49 2025 GMT
Not After : Jun 29 18:00:49 2025 GMT
Subject: CN=f45894d3f7c1f5d52f452cd3394340b22da503f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:03:36:0d:9d:83:37:5d:0f:1f:2f:78:fd:16:
97:97:20:34:17:ff:18:1f:64:bf:b1:be:c1:30:c4:
96:af:9d:5e:d3:64:ce:01:30:8a:b7:94:36:20:a6:
51:6a:85:44:6f:a4:03:0c:f6:4d:87:4e:05:63:06:
6b:1d:0b:9c:fd:fb:5c:2b:de:75:b7:9e:8c:7c:5f:
73:0f:96:aa:26:3f:fe:ef:dc:c7:5b:87:f4:f5:09:
da:29:70:6b:f8:dd:32:19:99:78:60:c3:51:63:e6:
f8:cd:f3:0c:17:7b:08:19:a6:50:31:ff:fc:62:81:
fa:2f:ec:93:52:53:7f:15:53:33:2a:69:c4:60:26:
90:3a:61:80:01:eb:85:76:a4:f2:19:b6:2b:64:f3:
1c:72:c8:7c:9c:78:41:69:dc:71:08:dc:8d:45:52:
f2:48:f8:a0:e2:0c:2f:7c:7a:01:1a:dc:b9:34:a9:
35:fd:2f:6b:6d:74:62:13:2f:6d:6b:ab:ae:0c:49:
b2:38:2c:86:3f:a4:af:8a:c1:fd:eb:72:a6:d0:92:
4b:65:59:f4:43:0a:b9:55:38:51:45:85:2f:42:ac:
2a:d9:e6:ac:3c:d5:cc:06:67:91:a9:c8:21:07:9d:
59:e7:a3:a1:91:bf:c9:fa:0c:76:5c:5d:50:42:44:
ec:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:58:94:D3:F7:C1:F5:D5:2F:45:2C:D3:39:43:40:B2:2D:A5:03:F8
X509v3 Authority Key Identifier:
keyid:4C:21:6F:66:56:0A:E1:6B:A7:59:4F:46:AF:06:0F:35:1E:0E:B4:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TCFvZlYK4WunWU9GrwYPNR4OtJ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/65646f-bea4-4f93-96be-48fea345fa13/1/TCFvZlYK4WunWU9GrwYPNR4OtJ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/65646f-bea4-4f93-96be-48fea345fa13/1/TCFvZlYK4WunWU9GrwYPNR4OtJ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:fd:cd:fa:b9:fd:42:5d:fa:46:cf:bb:b1:6a:ab:36:e4:6a:
88:cb:bb:34:d4:42:32:05:30:e2:01:68:89:13:14:1e:ca:84:
0f:81:79:d8:4e:75:04:e2:48:1f:d6:4d:04:ba:5b:e8:bb:5a:
2a:df:02:77:39:46:48:b7:03:77:70:8e:4c:95:d7:0d:1b:13:
8c:42:59:f7:86:b6:46:3d:95:6a:3c:86:16:95:72:d7:ee:b5:
67:45:e6:c8:49:f0:30:06:4a:a1:55:84:82:76:a1:5e:e9:4f:
63:40:b2:81:db:f3:e5:05:49:aa:2e:75:92:c4:fa:27:e1:ba:
f0:3c:df:77:cc:14:48:02:a8:84:8a:2b:d0:86:3b:ed:4f:41:
d4:2a:98:f1:26:8d:b9:dc:d4:fe:75:18:3a:62:2b:f5:cf:e2:
66:61:13:15:6d:f3:0e:88:49:78:d4:85:99:bf:35:df:ac:64:
1d:7a:9e:89:60:4a:df:1b:df:85:91:d3:29:27:ea:4d:51:27:
cd:6d:17:65:5f:90:04:23:fb:28:ed:4d:77:28:58:f7:f3:86:
ce:33:a2:c8:ba:70:58:4b:fe:8e:aa:f4:47:1e:00:b9:7d:ee:
6c:15:46:91:5d:00:19:1e:b9:b7:82:1d:b4:fc:89:1d:b8:0b:
e0:87:7a:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:27:43 2025 by rpki-client