
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/ee71c6-1bae-4858-af3a-bc289dc17d20/1/TAf2nWArfrt_YzDXFcnsPlq6MPo.mft
File: TAf2nWArfrt_YzDXFcnsPlq6MPo.mft (raw, json)
Hash identifier: xIu7WLJ3E2gng+Vtby/kGvcv23AkwSwhFeO5a1/sXvU=
Subject key identifier: 97:83:C0:BE:50:9B:FC:78:41:84:28:FB:F7:1B:B4:13:41:9A:62:32
Authority key identifier: 4C:07:F6:9D:60:2B:7E:BB:7F:63:30:D7:15:C9:EC:3E:5A:BA:30:FA
Certificate issuer: /CN=4c07f69d602b7ebb7f6330d715c9ec3e5aba30fa
Certificate serial: 0198D58391B3BF94D62A299AA21BF6D09F5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TAf2nWArfrt_YzDXFcnsPlq6MPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/ee71c6-1bae-4858-af3a-bc289dc17d20/1/TAf2nWArfrt_YzDXFcnsPlq6MPo.mft
Manifest number: 0A39
Signing time: Sat 23 Aug 2025 06:00:26 +0000
Manifest this update: Sat 23 Aug 2025 06:00:26 +0000
Manifest next update: Sun 24 Aug 2025 06:00:26 +0000
Files and hashes: 1: TAf2nWArfrt_YzDXFcnsPlq6MPo.crl (hash: pPhs2rSuTH3wq944QXkAhL09iXF7RluOY6djYYThpns=)
2: nXGx5bSqdUW_hrhQiJHYlpD8vR8.roa (hash: BZPTD4TDsLLlN6D+oiM71I+DEGQ39DwwkOK3NvmzOh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/ee71c6-1bae-4858-af3a-bc289dc17d20/1/TAf2nWArfrt_YzDXFcnsPlq6MPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/ee71c6-1bae-4858-af3a-bc289dc17d20/1/TAf2nWArfrt_YzDXFcnsPlq6MPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/TAf2nWArfrt_YzDXFcnsPlq6MPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:91:b3:bf:94:d6:2a:29:9a:a2:1b:f6:d0:9f:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c07f69d602b7ebb7f6330d715c9ec3e5aba30fa
Validity
Not Before: Aug 23 06:00:26 2025 GMT
Not After : Aug 24 06:00:26 2025 GMT
Subject: CN=9783c0be509bfc78418428fbf71bb413419a6232
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:83:19:13:23:56:80:fd:9f:cf:b8:2d:8e:92:
cc:e8:1c:31:5b:01:c6:63:d1:8c:ee:0a:d4:98:f0:
89:77:65:12:02:74:98:c8:97:61:56:83:fe:d7:59:
32:f1:c7:58:c1:ce:e5:09:1d:b7:f7:3b:3c:72:bc:
9f:59:dd:bd:1e:82:a7:00:f2:51:e4:d9:72:66:0a:
f2:c4:8f:35:04:36:ae:d2:ba:bb:21:b6:a4:8d:e4:
12:ae:d8:ae:45:e5:70:cc:e1:46:d5:57:53:69:fb:
59:56:eb:ed:02:b3:4c:db:63:03:45:e6:e2:0a:a2:
af:81:8d:09:4c:d8:81:8c:fd:44:7b:5e:c4:81:ed:
ce:b4:83:cf:c8:d9:02:45:c7:be:b7:f0:1f:3c:c2:
d9:d5:63:0f:d3:5e:8b:a6:25:31:27:9e:bf:d1:8f:
41:52:4a:24:84:ed:0b:50:b1:5e:f6:b1:43:ec:c5:
2b:32:13:ac:e9:04:e9:8e:be:12:50:e1:df:09:76:
80:c3:a0:a5:0c:c8:d2:16:2d:15:10:c2:10:fb:4d:
8c:f0:95:cb:7f:fb:0d:7c:95:d6:51:97:1c:ad:17:
e6:48:8f:f7:f2:c0:8d:32:8e:3e:6c:93:b3:af:fb:
1b:d2:85:25:7c:06:e8:b5:eb:ef:3d:04:9b:19:51:
47:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:83:C0:BE:50:9B:FC:78:41:84:28:FB:F7:1B:B4:13:41:9A:62:32
X509v3 Authority Key Identifier:
keyid:4C:07:F6:9D:60:2B:7E:BB:7F:63:30:D7:15:C9:EC:3E:5A:BA:30:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TAf2nWArfrt_YzDXFcnsPlq6MPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ee71c6-1bae-4858-af3a-bc289dc17d20/1/TAf2nWArfrt_YzDXFcnsPlq6MPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ee71c6-1bae-4858-af3a-bc289dc17d20/1/TAf2nWArfrt_YzDXFcnsPlq6MPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:68:0d:dc:22:15:80:da:0d:d6:b4:f8:3b:cb:8a:d3:67:ed:
ec:47:37:af:d9:4e:e7:ff:27:0e:33:47:dc:71:f8:79:d0:00:
f6:e5:99:2a:5c:cc:11:64:5c:ac:58:49:83:c8:70:e0:6c:5d:
61:c2:43:4d:61:61:b9:9c:99:70:73:2f:64:a3:6e:fa:95:47:
92:87:ea:19:0b:78:30:0d:56:40:eb:f2:6d:d7:df:a7:81:ea:
17:be:0f:52:0a:05:d6:c5:58:52:79:c5:bb:2f:37:18:07:ee:
8d:af:b4:74:09:90:0c:ec:4c:d4:7b:90:4b:ce:75:b9:87:be:
c6:1a:d9:a4:dd:1f:96:35:b4:04:55:04:35:ad:25:a9:2d:e9:
85:7a:9e:2e:e7:90:bd:0a:79:7f:8f:81:08:3f:8f:db:29:fc:
63:98:f3:9b:c1:bf:07:fc:26:57:0e:20:4c:65:a0:be:2d:a7:
44:cc:6a:e9:e0:a1:e8:78:60:06:20:ff:d5:bb:2a:a6:3d:e6:
e6:29:ce:e1:78:67:5e:05:eb:67:22:4a:1b:b4:cf:54:82:45:
6f:ce:df:ac:85:a2:35:51:1c:70:5d:e9:05:2e:0a:a7:85:1d:
0e:81:8e:a2:88:2b:ca:07:68:1c:b5:4d:ae:16:61:59:34:b6:
e0:0c:ee:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:03:34 2025 by rpki-client