Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/5ca294-897b-4e49-a9c7-bc48b41f498b/1/TNR7i4qp-8zP89UHgU_HRGSiq_A.mft
File: TNR7i4qp-8zP89UHgU_HRGSiq_A.mft (raw, json)
Hash identifier: u1birckW2ufGlpkm3yMLtFsjPXEa1zgd3agzbPnyfy8=
Subject key identifier: 8E:BB:A7:48:6F:9F:EA:37:92:80:CA:FF:CC:A6:DC:0C:C7:27:A7:8E
Authority key identifier: 4C:D4:7B:8B:8A:A9:FB:CC:CF:F3:D5:07:81:4F:C7:44:64:A2:AB:F0
Certificate issuer: /CN=4cd47b8b8aa9fbcccff3d507814fc74464a2abf0
Certificate serial: 0198D6CD6FADC4108C1B201BD8A762B7E6A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TNR7i4qp-8zP89UHgU_HRGSiq_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/5ca294-897b-4e49-a9c7-bc48b41f498b/1/TNR7i4qp-8zP89UHgU_HRGSiq_A.mft
Manifest number: 0D3F
Signing time: Sat 23 Aug 2025 12:00:44 +0000
Manifest this update: Sat 23 Aug 2025 12:00:44 +0000
Manifest next update: Sun 24 Aug 2025 12:00:44 +0000
Files and hashes: 1: TNR7i4qp-8zP89UHgU_HRGSiq_A.crl (hash: +8CJz8xZCDkU5OhgoSzlpTu4jS22ql0fT8cs99yXWRw=)
2: zYBlb8-4iJi2Xsk5poztWDw6ukY.roa (hash: veXHQ0WmE+2KQkfYtO+EXvFrciAIGT+yWdclt50BTQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/5ca294-897b-4e49-a9c7-bc48b41f498b/1/TNR7i4qp-8zP89UHgU_HRGSiq_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/5ca294-897b-4e49-a9c7-bc48b41f498b/1/TNR7i4qp-8zP89UHgU_HRGSiq_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/TNR7i4qp-8zP89UHgU_HRGSiq_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:6f:ad:c4:10:8c:1b:20:1b:d8:a7:62:b7:e6:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cd47b8b8aa9fbcccff3d507814fc74464a2abf0
Validity
Not Before: Aug 23 12:00:44 2025 GMT
Not After : Aug 24 12:00:44 2025 GMT
Subject: CN=8ebba7486f9fea379280caffcca6dc0cc727a78e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:14:18:68:bc:de:a6:b3:d3:af:3a:fb:a2:6f:
6d:1d:45:6f:87:48:a0:e4:ff:2c:b1:42:1a:50:9c:
f4:0f:ab:7d:ed:c5:87:ca:73:8a:bf:56:c0:e5:4b:
d6:04:89:66:67:a7:a8:63:aa:9d:5f:86:c3:72:e5:
c1:6d:8d:fa:e9:0b:ca:18:6a:9b:16:74:cb:c5:46:
6f:00:a9:23:95:2e:31:48:a6:27:cb:a4:34:be:b3:
09:0a:d1:63:5e:f2:51:35:3d:28:e0:ef:68:9c:04:
b8:53:5f:f1:e2:ab:84:f5:b3:4d:92:69:ce:2b:99:
5f:80:bd:8a:3b:19:ca:08:97:53:dc:8f:dd:ac:22:
ba:e1:9e:4b:e5:53:b8:27:a9:d2:a9:9c:4d:95:f4:
bc:00:bb:ca:f8:55:aa:64:a3:3a:e7:ef:5f:a9:c7:
cc:06:64:ad:cf:fc:dd:37:f3:bb:f1:48:ac:a9:2e:
74:04:da:8b:77:28:99:0b:c4:c5:45:04:51:a4:9d:
b5:17:2b:da:c1:e5:de:fb:30:6a:0b:95:d2:dc:ff:
7c:88:42:8e:9b:ff:f8:6c:96:d5:9e:4d:23:c2:ae:
cd:b1:87:52:2e:3f:bb:f1:15:3e:9e:a7:34:a6:4a:
92:1a:61:86:bd:1b:de:52:35:ba:b0:3a:02:fc:52:
0a:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:BB:A7:48:6F:9F:EA:37:92:80:CA:FF:CC:A6:DC:0C:C7:27:A7:8E
X509v3 Authority Key Identifier:
keyid:4C:D4:7B:8B:8A:A9:FB:CC:CF:F3:D5:07:81:4F:C7:44:64:A2:AB:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TNR7i4qp-8zP89UHgU_HRGSiq_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/5ca294-897b-4e49-a9c7-bc48b41f498b/1/TNR7i4qp-8zP89UHgU_HRGSiq_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/5ca294-897b-4e49-a9c7-bc48b41f498b/1/TNR7i4qp-8zP89UHgU_HRGSiq_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:e0:97:9d:2e:77:27:5c:0f:a0:b7:a1:da:48:fc:a4:7d:8b:
85:a8:e3:75:e9:f5:ee:15:f2:93:4e:96:cf:2d:fd:b6:61:8c:
49:08:66:7f:c9:8b:89:76:17:e2:4b:c8:3e:cb:2a:6f:01:ec:
1a:73:8c:fb:fb:cc:39:2d:b7:d9:73:5c:c4:7f:17:90:64:49:
46:23:18:7e:16:a6:af:51:b5:66:02:7a:65:2e:ee:9a:f5:9c:
71:08:70:bc:d6:2e:84:2d:84:34:78:09:3e:94:d2:24:19:d1:
cf:d1:41:5c:52:f6:be:8d:89:ad:fa:47:40:cb:3d:bc:b5:69:
24:cd:4c:e4:7c:b6:23:1b:a6:4c:80:a0:40:bf:e2:58:be:04:
27:ca:f8:65:9a:0c:11:ec:36:0b:03:9e:a5:a7:96:7a:79:fc:
b2:34:b9:a9:77:76:7c:8b:f8:b0:94:5d:0e:7a:85:eb:06:5c:
b3:45:33:25:76:e0:1e:b7:e2:50:a4:5b:f2:9c:14:f8:7b:c7:
ff:bc:a0:6a:9f:ea:e8:fe:22:c4:c7:ba:2d:b0:28:44:5b:e4:
bb:65:0b:9f:be:c4:6c:59:6f:12:91:52:34:26:91:a9:6b:ac:
c5:2c:a2:6c:b3:8d:3d:41:43:42:ab:fd:94:e2:12:bd:f8:19:
4b:0f:ec:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:32:53 2025 by rpki-client