Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/355efb-26b0-4112-b4b5-93c29640bbfe/1/Tchxtd3wdAsxfR4042smgQu5gCY.mft
File: Tchxtd3wdAsxfR4042smgQu5gCY.mft (raw, json)
Hash identifier: trOdg8nJf7JEaXLRxcCkngsYnCaUyz+d9nX/3XMNthM=
Subject key identifier: A7:D0:AF:64:2A:79:99:75:12:9E:A4:99:43:27:CB:ED:B1:76:1D:99
Authority key identifier: 4D:C8:71:B5:DD:F0:74:0B:31:7D:1E:34:E3:6B:26:81:0B:B9:80:26
Certificate issuer: /CN=4dc871b5ddf0740b317d1e34e36b26810bb98026
Certificate serial: 0198D5F1266E0E295A1AAD2F2D3C41052ED0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tchxtd3wdAsxfR4042smgQu5gCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/355efb-26b0-4112-b4b5-93c29640bbfe/1/Tchxtd3wdAsxfR4042smgQu5gCY.mft
Manifest number: 091B
Signing time: Sat 23 Aug 2025 08:00:07 +0000
Manifest this update: Sat 23 Aug 2025 08:00:07 +0000
Manifest next update: Sun 24 Aug 2025 08:00:07 +0000
Files and hashes: 1: Tchxtd3wdAsxfR4042smgQu5gCY.crl (hash: h0k5m7kmvNKICnsiCbx2wC580CexZN8zrYsrD39a64w=)
2: paYxpLOj5q1m1CkvSIrYuNJXnfY.roa (hash: oASY8mwNlrx1vBXDbDUsEVfC2Mdva3sHjU/P5M6cgKw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/355efb-26b0-4112-b4b5-93c29640bbfe/1/Tchxtd3wdAsxfR4042smgQu5gCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/355efb-26b0-4112-b4b5-93c29640bbfe/1/Tchxtd3wdAsxfR4042smgQu5gCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tchxtd3wdAsxfR4042smgQu5gCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:26:6e:0e:29:5a:1a:ad:2f:2d:3c:41:05:2e:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dc871b5ddf0740b317d1e34e36b26810bb98026
Validity
Not Before: Aug 23 08:00:07 2025 GMT
Not After : Aug 24 08:00:07 2025 GMT
Subject: CN=a7d0af642a799975129ea4994327cbedb1761d99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:94:52:a1:f0:e7:0d:5d:2c:9e:7d:e3:1c:be:
9a:fe:ca:d8:47:7c:b9:58:82:b2:37:ff:50:02:4f:
f0:ae:19:c6:8e:23:ee:02:45:53:e8:8e:ea:7c:c3:
01:88:8d:0b:2d:8d:72:d3:fb:9e:cc:3e:fb:71:a4:
f0:58:ea:7b:21:cc:15:95:e0:13:ca:09:6a:bc:60:
54:6b:73:f9:c5:1d:c9:6b:47:42:8a:cd:96:e8:fc:
03:bd:d5:a7:9b:79:e5:dc:a6:1d:5c:50:f3:a5:6e:
8b:f5:41:9d:2f:5f:3a:6a:38:c9:ac:92:12:3c:0d:
7e:aa:b4:af:b5:a2:61:70:a2:0b:d7:82:35:eb:66:
0b:e0:7d:74:e9:b2:da:82:ce:52:4d:e3:ad:69:9e:
71:b9:77:90:51:44:33:a4:43:05:00:7e:5d:12:df:
88:c9:4b:a2:ba:01:7e:0d:44:cb:61:6c:5b:26:eb:
a5:7f:ff:01:09:12:7f:b9:02:58:a3:56:f7:6b:e5:
e8:39:66:55:58:c3:62:d9:05:0b:93:7f:e5:09:c7:
99:d9:4b:33:a5:73:8d:3e:da:62:60:fe:bb:18:9a:
45:ba:36:2e:28:7a:b8:2b:4c:31:02:61:63:4d:5b:
df:70:ba:a1:83:8a:8c:45:6f:8a:01:85:b0:07:8e:
48:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:D0:AF:64:2A:79:99:75:12:9E:A4:99:43:27:CB:ED:B1:76:1D:99
X509v3 Authority Key Identifier:
keyid:4D:C8:71:B5:DD:F0:74:0B:31:7D:1E:34:E3:6B:26:81:0B:B9:80:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tchxtd3wdAsxfR4042smgQu5gCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/355efb-26b0-4112-b4b5-93c29640bbfe/1/Tchxtd3wdAsxfR4042smgQu5gCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/355efb-26b0-4112-b4b5-93c29640bbfe/1/Tchxtd3wdAsxfR4042smgQu5gCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:79:3b:1b:09:92:1f:c1:79:b6:d3:2a:35:1d:e9:68:c6:08:
81:33:20:63:2b:47:8d:be:c5:63:cd:4c:b4:1a:c6:bc:ce:0c:
1d:da:2e:63:41:7d:1b:af:3a:e2:ce:d9:87:48:2b:4b:e4:80:
aa:28:4c:25:0a:22:d1:fc:4a:7f:0b:8d:57:b5:97:63:20:a4:
6e:88:2b:3a:86:01:34:23:81:f2:d8:87:69:ac:d0:a3:03:1c:
a8:89:7c:25:c5:f3:77:39:82:6d:46:56:ed:e9:58:ba:83:e7:
3a:98:62:3b:09:53:68:1f:51:3e:d8:9d:6e:b8:8d:4d:59:e3:
0a:b2:b3:9b:dd:ad:f6:e4:03:d1:68:d3:ea:6f:e1:e2:5a:8d:
ce:66:be:a5:79:b8:da:92:fd:83:08:4e:0e:ab:b9:b2:13:6e:
a9:42:22:3f:cd:ba:57:ff:28:a5:d5:79:04:d5:96:3f:cd:03:
1a:15:0e:59:34:a5:a5:34:4d:6b:32:c5:82:a0:91:ef:d5:a0:
c4:a5:8c:04:7d:dc:1a:b9:bb:ce:8b:b5:f3:38:a6:6d:ad:85:
69:2e:48:0a:cd:e2:e0:1e:24:81:ea:e5:08:96:d1:ce:d9:25:
51:72:5d:27:6e:74:c4:ac:c4:c7:40:79:44:72:d3:6f:5a:b6:
cc:69:c1:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:39:11 2025 by rpki-client