Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/4afeab-02b9-4ebd-bfa2-8e80b496a03e/1/TgTgpximE5qcZfDUiGu4JxTaZoI.mft
File: TgTgpximE5qcZfDUiGu4JxTaZoI.mft (raw, json)
Hash identifier: w3unz+FVzqAJ4Xtn9jg2j9Db+iDSMHS22L17iXPu6y4=
Subject key identifier: 01:73:1F:66:53:54:C9:09:F2:6C:29:75:80:BC:08:49:CB:A9:33:26
Authority key identifier: 4E:04:E0:A7:18:A6:13:9A:9C:65:F0:D4:88:6B:B8:27:14:DA:66:82
Certificate issuer: /CN=4e04e0a718a6139a9c65f0d4886bb82714da6682
Certificate serial: 0198D473D08E261BB929042597233CBEFB4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TgTgpximE5qcZfDUiGu4JxTaZoI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/4afeab-02b9-4ebd-bfa2-8e80b496a03e/1/TgTgpximE5qcZfDUiGu4JxTaZoI.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 01:03:36 +0000
Manifest this update: Sat 23 Aug 2025 01:03:36 +0000
Manifest next update: Sun 24 Aug 2025 01:03:36 +0000
Files and hashes: 1: TgTgpximE5qcZfDUiGu4JxTaZoI.crl (hash: NtcS+lf+lmuL4vP57bsk0hrv04hFmgq2IkECHCUQEdc=)
2: _DVbXJIlrc4WueVJodx5_dUQQGU.roa (hash: qLnLYdx/R1C59idEfb9lAoJsSeK5qnRHJhL7xW0LEkE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/4afeab-02b9-4ebd-bfa2-8e80b496a03e/1/TgTgpximE5qcZfDUiGu4JxTaZoI.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/4afeab-02b9-4ebd-bfa2-8e80b496a03e/1/TgTgpximE5qcZfDUiGu4JxTaZoI.mft
rsync://rpki.ripe.net/repository/DEFAULT/TgTgpximE5qcZfDUiGu4JxTaZoI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:d0:8e:26:1b:b9:29:04:25:97:23:3c:be:fb:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e04e0a718a6139a9c65f0d4886bb82714da6682
Validity
Not Before: Aug 23 01:03:36 2025 GMT
Not After : Aug 24 01:03:36 2025 GMT
Subject: CN=01731f665354c909f26c297580bc0849cba93326
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a5:98:45:b7:f9:04:26:72:47:34:85:6b:ae:
a7:06:34:e1:45:55:2d:19:cb:bd:70:e5:03:e3:eb:
fd:d0:ce:8c:51:05:10:c1:df:79:2e:1a:ae:cf:3c:
9f:8a:1d:a4:46:9b:32:b6:c5:7d:0b:81:74:00:d0:
3b:b1:e8:9b:34:e9:43:b5:d4:10:fc:e4:fc:50:14:
3d:ef:b5:8b:b8:a4:50:92:57:76:f5:95:ac:87:ab:
45:dc:db:2b:8a:c8:8b:3f:f0:93:83:e3:43:73:31:
51:cb:29:c3:75:1e:68:13:38:21:a4:29:30:3a:5e:
bf:12:6e:63:23:19:ca:39:0c:9e:d5:ed:7b:92:b1:
c0:b3:d4:d0:73:90:9d:5a:70:42:2b:4e:a3:78:25:
9f:1b:90:62:80:1e:83:99:64:39:6f:9d:5b:f0:86:
e4:3a:39:0a:53:aa:0f:d3:08:ee:41:77:15:75:a3:
6c:00:9d:12:29:fd:d7:6c:51:f7:fc:5c:d8:c2:3d:
8a:b2:10:a6:07:50:2c:b0:7e:55:6f:18:5b:c1:31:
6f:81:bf:d5:4d:cf:5e:14:a5:71:52:6a:a1:cc:a1:
9f:56:cb:4a:1b:4b:df:de:e0:7d:85:31:31:2a:b5:
f6:7d:78:97:26:e9:21:ec:04:0c:77:62:32:44:3c:
f0:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:73:1F:66:53:54:C9:09:F2:6C:29:75:80:BC:08:49:CB:A9:33:26
X509v3 Authority Key Identifier:
keyid:4E:04:E0:A7:18:A6:13:9A:9C:65:F0:D4:88:6B:B8:27:14:DA:66:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TgTgpximE5qcZfDUiGu4JxTaZoI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4afeab-02b9-4ebd-bfa2-8e80b496a03e/1/TgTgpximE5qcZfDUiGu4JxTaZoI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4afeab-02b9-4ebd-bfa2-8e80b496a03e/1/TgTgpximE5qcZfDUiGu4JxTaZoI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:43:49:7a:a9:92:bb:5d:60:93:1e:31:c8:76:08:6c:eb:79:
0a:76:50:50:9d:d7:22:78:60:a9:77:19:fc:d2:bc:74:be:1a:
22:13:06:f0:5f:c8:2c:39:a0:99:35:62:4d:49:be:e7:c0:43:
fa:65:4d:19:e5:fe:95:b9:3d:d1:4a:df:34:5b:2e:db:56:ff:
88:21:55:6b:2e:22:81:07:07:23:45:f8:a2:ea:92:35:06:f5:
4d:99:32:53:64:2a:cf:0c:f5:2f:bb:8b:39:ef:81:ae:09:e6:
6f:2e:f2:5e:fa:ea:36:cc:8a:e3:6b:0a:29:f1:84:de:a6:06:
63:f6:68:e0:cf:47:6c:23:4c:80:c0:87:2f:6d:10:92:42:b3:
a8:78:42:29:97:88:9b:59:03:3f:0c:bc:af:49:49:9f:02:cd:
95:43:6b:c6:5c:9e:ee:a8:d7:9b:af:0a:21:22:9c:ea:44:6a:
b6:63:0f:6e:27:3a:57:5e:d9:33:69:c5:ac:fb:b7:7a:5a:0f:
15:cc:dd:6b:95:cf:54:dc:f4:94:9c:be:3a:2f:b9:a2:73:29:
3d:6b:6d:82:17:ba:2d:37:54:89:d3:b9:3e:d6:bd:3b:9c:dc:
df:71:40:32:3b:e2:85:ac:d6:e7:40:4f:8b:0a:aa:9b:7f:36:
54:23:c0:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:37:59 2025 by rpki-client