Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/TPgIAsZXmk1KEGCNz5LprOmQWxY.mft
File: TPgIAsZXmk1KEGCNz5LprOmQWxY.mft (raw, json)
Hash identifier: aCArAqEvrkMoCLp4zDFsKULXlLh5GaqxQ280YVvZgsA=
Subject key identifier: D5:D6:CD:AB:17:5C:D3:40:08:54:41:87:16:A2:EF:CF:DC:DE:BF:09
Authority key identifier: 4C:F8:08:02:C6:57:9A:4D:4A:10:60:8D:CF:92:E9:AC:E9:90:5B:16
Certificate issuer: /CN=4cf80802c6579a4d4a10608dcf92e9ace9905b16
Certificate serial: 0198D629870DCB39BD81CF57E867218A9A39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TPgIAsZXmk1KEGCNz5LprOmQWxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/TPgIAsZXmk1KEGCNz5LprOmQWxY.mft
Manifest number: 050B
Signing time: Sat 23 Aug 2025 09:01:42 +0000
Manifest this update: Sat 23 Aug 2025 09:01:42 +0000
Manifest next update: Sun 24 Aug 2025 09:01:42 +0000
Files and hashes: 1: 3bqib6Vf9__QQmrt5lwxWaCIYDg.roa (hash: nBz+tND5F4lJlZbTQii6SKZ6iYxW0Iv4ninjHe9dyBI=)
2: TPgIAsZXmk1KEGCNz5LprOmQWxY.crl (hash: XafZYnTft/DNXFqOdUXG7+ZnS5EpOLA15QSorKcdn9k=)
3: V3x4-1WXGWfdIqvzomsHhdbzXSs.roa (hash: zh2EOf1/AdU8UOAuoYHykO5WxiDzPCEaB7bgSCkL3Ec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/TPgIAsZXmk1KEGCNz5LprOmQWxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/TPgIAsZXmk1KEGCNz5LprOmQWxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/TPgIAsZXmk1KEGCNz5LprOmQWxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:29:87:0d:cb:39:bd:81:cf:57:e8:67:21:8a:9a:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cf80802c6579a4d4a10608dcf92e9ace9905b16
Validity
Not Before: Aug 23 09:01:42 2025 GMT
Not After : Aug 24 09:01:42 2025 GMT
Subject: CN=d5d6cdab175cd3400854418716a2efcfdcdebf09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:fa:96:3a:c3:14:26:10:4a:6b:29:ff:92:76:
7e:3a:43:5e:66:f5:23:53:36:6c:c8:2c:9c:0d:07:
a8:9b:cc:c0:87:78:39:0b:bd:15:6c:78:79:c1:47:
f2:fe:72:87:16:8c:18:62:d5:95:8e:c4:3e:b5:23:
ca:e5:65:da:e6:53:5d:b7:25:c4:33:c8:6f:87:f2:
7f:5c:27:49:d3:ac:92:f1:1c:28:3d:5c:44:fb:51:
c6:bd:c2:0d:2c:5f:82:d2:1e:a8:dc:cc:a0:9b:db:
01:c9:9f:f8:be:b5:bb:78:33:42:f9:07:49:13:79:
9d:84:f9:71:e3:c3:83:85:b8:3c:2f:f6:db:28:93:
16:37:ed:6b:49:35:02:db:cf:eb:61:1f:61:26:61:
02:a2:ec:23:a8:91:e0:f3:9c:f5:00:4a:6b:55:07:
0d:a1:ab:c0:01:91:7a:61:0a:73:29:6f:82:f9:d6:
7f:bc:40:aa:f4:e7:17:a9:ba:f3:95:3a:da:7a:fc:
47:fb:04:e7:db:08:70:ca:6f:4f:03:2a:5a:3a:2a:
cc:f3:a5:8e:7a:92:4e:45:c3:e9:65:f8:48:65:2c:
9e:b3:0c:c0:00:78:ee:6d:5b:ee:fa:55:a4:54:69:
18:0e:d3:56:37:b2:72:be:30:be:ec:41:a7:db:47:
82:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:D6:CD:AB:17:5C:D3:40:08:54:41:87:16:A2:EF:CF:DC:DE:BF:09
X509v3 Authority Key Identifier:
keyid:4C:F8:08:02:C6:57:9A:4D:4A:10:60:8D:CF:92:E9:AC:E9:90:5B:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TPgIAsZXmk1KEGCNz5LprOmQWxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/TPgIAsZXmk1KEGCNz5LprOmQWxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/TPgIAsZXmk1KEGCNz5LprOmQWxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:4e:11:45:3e:f9:10:cd:aa:65:c5:89:cb:a8:0d:c0:ba:a7:
be:f3:f9:f6:ad:ea:16:45:00:02:8b:8e:62:32:ba:07:89:3b:
f1:14:4c:94:64:7c:e7:07:ba:9b:5f:69:16:4c:73:55:4b:07:
e9:9f:03:e8:c6:19:e9:44:4b:88:73:b6:34:ac:3e:a3:61:8f:
bb:e5:49:c5:15:65:9c:8f:f9:e9:b4:f0:a1:ce:66:e6:0a:57:
e9:64:67:cf:c1:d6:a8:f6:1d:03:bc:06:18:72:32:ae:d5:7d:
80:02:8a:9a:e8:ae:dc:19:cf:db:a0:07:fb:c6:0d:84:6a:ad:
16:39:9e:34:a1:72:59:46:ed:08:38:90:db:69:ca:fd:1a:56:
c5:f3:d5:02:67:75:68:46:32:8e:5f:7a:b8:74:d7:ad:4a:b3:
ef:17:77:b8:9c:a5:ae:d4:6d:e6:72:18:e7:fc:64:34:d2:a5:
69:9b:c2:ed:ce:b5:a1:3c:30:6b:09:43:08:f2:49:ba:b8:a3:
ea:b7:93:89:03:c4:d3:da:54:7f:16:03:f0:2b:b2:3e:6d:c6:
5a:95:95:04:45:ac:c5:72:47:cf:8f:90:59:89:52:00:96:85:
5e:36:44:a3:54:73:d7:8a:23:f2:61:a3:09:5c:ea:44:28:2d:
6b:c8:d5:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:26:54 2025 by rpki-client