Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/5ca294-897b-4e49-a9c7-bc48b41f498b/1/TNR7i4qp-8zP89UHgU_HRGSiq_A.mft
File: TNR7i4qp-8zP89UHgU_HRGSiq_A.mft (raw, json)
Hash identifier: YjDeKr9IALfSLimVXctYDNG6l7Nig1I2uBvs3rtvEM4=
Subject key identifier: 87:04:32:03:F6:3A:FF:84:93:72:B5:F7:EE:3F:23:B8:28:6B:F8:62
Authority key identifier: 4C:D4:7B:8B:8A:A9:FB:CC:CF:F3:D5:07:81:4F:C7:44:64:A2:AB:F0
Certificate issuer: /CN=4cd47b8b8aa9fbcccff3d507814fc74464a2abf0
Certificate serial: 0197B70F056CE5CBFBBE7BD7A73A4DD8DBEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TNR7i4qp-8zP89UHgU_HRGSiq_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/5ca294-897b-4e49-a9c7-bc48b41f498b/1/TNR7i4qp-8zP89UHgU_HRGSiq_A.mft
Manifest number: 0CAA
Signing time: Sat 28 Jun 2025 15:01:44 +0000
Manifest this update: Sat 28 Jun 2025 15:01:44 +0000
Manifest next update: Sun 29 Jun 2025 15:01:44 +0000
Files and hashes: 1: TNR7i4qp-8zP89UHgU_HRGSiq_A.crl (hash: fbB7tbcteYA8FzNPDmtuU3CwHB0Hlsvzvav7mxWKz5Q=)
2: zYBlb8-4iJi2Xsk5poztWDw6ukY.roa (hash: veXHQ0WmE+2KQkfYtO+EXvFrciAIGT+yWdclt50BTQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/5ca294-897b-4e49-a9c7-bc48b41f498b/1/TNR7i4qp-8zP89UHgU_HRGSiq_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/5ca294-897b-4e49-a9c7-bc48b41f498b/1/TNR7i4qp-8zP89UHgU_HRGSiq_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/TNR7i4qp-8zP89UHgU_HRGSiq_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:05:6c:e5:cb:fb:be:7b:d7:a7:3a:4d:d8:db:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cd47b8b8aa9fbcccff3d507814fc74464a2abf0
Validity
Not Before: Jun 28 15:01:44 2025 GMT
Not After : Jun 29 15:01:44 2025 GMT
Subject: CN=87043203f63aff849372b5f7ee3f23b8286bf862
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:bc:91:8d:fd:46:35:4e:85:ed:09:16:03:be:
c1:96:b0:02:3e:a8:bb:e3:7a:90:44:09:58:ba:66:
8f:55:be:1b:dc:fc:24:c4:ab:1a:73:83:a5:5e:8f:
50:8f:5d:a2:5f:5c:25:3e:2d:9f:e9:93:6b:69:84:
5f:84:bd:b7:35:58:ae:3b:91:96:68:8f:77:00:b1:
b9:c6:08:c1:d5:b8:b1:83:79:c3:fa:9b:46:09:31:
d9:1d:52:29:e9:b2:ae:30:23:94:71:39:00:33:cd:
bb:48:bd:1f:c4:2f:f3:d5:ae:ee:00:fc:99:eb:e2:
f4:e1:20:93:e8:93:ac:cc:16:4e:c8:f2:43:d7:71:
d9:e7:c6:d2:ad:6e:77:94:b8:11:1e:97:c0:aa:46:
45:a1:dc:8c:99:9f:52:58:9c:a0:7b:23:37:04:58:
ec:40:08:93:a8:be:ac:a0:ce:13:4c:b1:0f:9d:2b:
6b:1e:d4:af:33:02:f1:d1:9a:79:ef:4b:83:a2:f9:
a8:2b:2c:ec:67:3b:c0:15:6d:b9:10:5d:1f:dc:68:
4a:96:34:47:4e:9b:7d:a2:15:7f:e3:5f:5f:b4:2d:
de:a7:8b:cb:7b:20:d1:ed:40:55:f7:3a:05:6d:25:
da:f8:a4:95:6d:8a:c7:e9:4a:c9:f0:59:c4:fd:4b:
97:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:04:32:03:F6:3A:FF:84:93:72:B5:F7:EE:3F:23:B8:28:6B:F8:62
X509v3 Authority Key Identifier:
keyid:4C:D4:7B:8B:8A:A9:FB:CC:CF:F3:D5:07:81:4F:C7:44:64:A2:AB:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TNR7i4qp-8zP89UHgU_HRGSiq_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/5ca294-897b-4e49-a9c7-bc48b41f498b/1/TNR7i4qp-8zP89UHgU_HRGSiq_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/5ca294-897b-4e49-a9c7-bc48b41f498b/1/TNR7i4qp-8zP89UHgU_HRGSiq_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:57:2f:1a:d8:19:4a:3a:f9:5e:2c:dc:fb:31:80:79:45:11:
06:94:c9:69:65:50:2b:64:c8:42:83:f2:24:7e:4b:53:bf:33:
aa:01:d6:6e:f5:93:a0:19:4f:a4:0c:03:e1:e8:e1:db:7b:33:
4f:78:cf:90:b1:d0:4c:09:43:64:0f:68:f1:66:ed:bf:5a:3b:
e9:28:67:0d:3a:82:a9:91:4f:34:1c:f6:76:38:23:50:f5:82:
d7:01:bf:d6:79:d7:54:9c:2c:98:a3:79:71:9d:93:48:48:f3:
3c:d1:35:b0:f0:f4:7c:cd:01:8b:5e:77:d5:63:5c:e5:70:5c:
78:ec:3e:89:c1:a0:74:6e:f9:bd:b3:b4:1f:ae:12:f7:80:6c:
6f:6b:93:b5:e3:8c:13:9d:ff:da:c7:28:cc:ac:e2:21:d4:d3:
68:6a:c7:7d:c7:ce:78:a1:de:38:7f:a9:f3:bc:84:21:f7:dc:
bf:58:cb:8c:41:d4:61:74:59:fc:21:a2:4f:bd:8e:54:8a:50:
ea:db:fe:81:ef:76:4a:7e:a6:2a:41:ed:67:50:b6:fe:cc:71:
79:b9:74:f9:65:4d:87:25:52:5a:cc:8d:df:cf:11:8a:e5:43:
e9:51:d6:33:68:73:66:d4:bf:62:e1:63:38:4c:35:65:53:66:
f7:e9:e1:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:21:52 2025 by rpki-client