Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/f3695c-e340-4e2f-afeb-6b95d3c89c91/1/TK8RFQzl_p9w82yYBnR7toKxyiE.mft
File: TK8RFQzl_p9w82yYBnR7toKxyiE.mft (raw, json)
Hash identifier: yneglvZJkBra8kJxC3deEG5HOIkVXbYKMFVoaY/qYDc=
Subject key identifier: A3:60:9F:67:4D:26:08:E2:EB:90:13:D3:D9:62:EF:21:7A:13:CA:E2
Authority key identifier: 4C:AF:11:15:0C:E5:FE:9F:70:F3:6C:98:06:74:7B:B6:82:B1:CA:21
Certificate issuer: /CN=4caf11150ce5fe9f70f36c9806747bb682b1ca21
Certificate serial: 0198D54E358909D5868BC54FD4990D8AE755
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TK8RFQzl_p9w82yYBnR7toKxyiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/f3695c-e340-4e2f-afeb-6b95d3c89c91/1/TK8RFQzl_p9w82yYBnR7toKxyiE.mft
Manifest number: 157D
Signing time: Sat 23 Aug 2025 05:02:09 +0000
Manifest this update: Sat 23 Aug 2025 05:02:09 +0000
Manifest next update: Sun 24 Aug 2025 05:02:09 +0000
Files and hashes: 1: TK8RFQzl_p9w82yYBnR7toKxyiE.crl (hash: v5nsKKrfP5o6RV5n+5/74ruNtKVQFojYpIqN6/emv5w=)
2: fuMrSOrjtC2Pjn0DbbjzzEXmpIM.roa (hash: 82A1cuez1ZD0Bc+8PeFu3N5JKG3dUU8f0mhUHsfa/b0=)
3: tT8Bhk3TRbD92onTtD9xdUFkuBo.roa (hash: nGHXcTt4lmnaxv72VD2WiGZwBBegRpFmPrLz3wSYepE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/f3695c-e340-4e2f-afeb-6b95d3c89c91/1/TK8RFQzl_p9w82yYBnR7toKxyiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/f3695c-e340-4e2f-afeb-6b95d3c89c91/1/TK8RFQzl_p9w82yYBnR7toKxyiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/TK8RFQzl_p9w82yYBnR7toKxyiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:35:89:09:d5:86:8b:c5:4f:d4:99:0d:8a:e7:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4caf11150ce5fe9f70f36c9806747bb682b1ca21
Validity
Not Before: Aug 23 05:02:09 2025 GMT
Not After : Aug 24 05:02:09 2025 GMT
Subject: CN=a3609f674d2608e2eb9013d3d962ef217a13cae2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:39:f9:0f:59:ee:23:ca:4a:7b:0e:a6:64:ab:
5f:a8:4f:06:8c:10:c4:9d:d2:a6:fe:5e:de:2a:1d:
48:86:4e:87:09:aa:f0:9d:90:60:08:46:f2:09:c7:
79:1a:1d:59:04:ba:c8:74:f2:53:94:ca:6c:78:f4:
6d:83:90:a5:e9:4b:c8:e5:3f:47:a5:ef:4d:71:bc:
f5:89:94:7b:ba:03:09:5b:a9:f5:c1:17:b7:58:b5:
c4:26:87:78:5e:85:1c:bd:fc:ca:af:54:7c:ed:27:
dd:30:fa:17:8b:91:a5:54:15:db:37:c9:26:05:a3:
55:43:76:b2:d5:a7:11:fb:8a:ec:57:98:06:5a:6d:
7b:f1:15:09:3c:80:18:bb:61:8f:e9:5d:6d:eb:fb:
ae:da:4f:82:e3:43:05:ee:e4:02:45:b8:f2:db:29:
1d:02:e0:b5:c2:08:71:59:ee:d5:8b:9b:fb:f2:3c:
b2:65:00:a6:43:1d:ce:97:2e:d0:5d:f7:f4:e3:dd:
38:d9:b2:24:6c:06:40:70:ea:88:20:37:ee:37:99:
b5:25:c1:69:fc:30:b7:23:0a:37:5e:92:1a:c6:07:
3b:45:f6:91:2c:f9:f9:62:62:36:1e:28:02:c9:93:
8f:3f:7b:84:23:62:18:e6:5e:0e:6f:b4:87:7e:c0:
5e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:60:9F:67:4D:26:08:E2:EB:90:13:D3:D9:62:EF:21:7A:13:CA:E2
X509v3 Authority Key Identifier:
keyid:4C:AF:11:15:0C:E5:FE:9F:70:F3:6C:98:06:74:7B:B6:82:B1:CA:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TK8RFQzl_p9w82yYBnR7toKxyiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f3695c-e340-4e2f-afeb-6b95d3c89c91/1/TK8RFQzl_p9w82yYBnR7toKxyiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f3695c-e340-4e2f-afeb-6b95d3c89c91/1/TK8RFQzl_p9w82yYBnR7toKxyiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:fe:04:c1:0c:33:21:8a:9e:b2:69:e8:cc:08:77:50:49:59:
51:92:2b:02:d4:c8:a9:fb:d0:a2:f3:ff:5b:0d:b7:0d:86:b1:
6c:b5:74:8b:bf:9c:9c:66:c1:45:45:92:a4:88:2f:50:a2:5f:
86:aa:a2:27:b7:2c:6f:57:7d:c0:dd:d8:c3:2a:9d:94:03:87:
a0:c2:ac:53:91:91:ce:b5:4c:4e:8e:ca:75:b7:0b:5f:f9:80:
19:5a:2c:cb:4e:71:b4:5c:82:94:25:ba:9a:6a:e2:ba:da:4c:
db:0c:07:40:4f:17:00:a4:11:52:7b:0c:fe:d1:e9:b2:6a:08:
cd:7c:f3:51:2b:4a:d4:55:77:ed:d5:31:8b:15:a2:c4:b8:a1:
b6:68:7b:87:b8:f2:4d:f2:ce:0a:5a:8f:22:2d:b7:58:f7:d7:
89:9c:16:73:11:8b:28:72:e6:3c:f3:06:ad:54:26:71:61:a7:
28:c2:67:b9:cc:08:93:a5:f0:7a:b0:a0:7b:3d:72:31:d5:fe:
8e:61:de:49:b9:35:da:a2:b2:20:4b:42:ea:15:1b:54:d6:26:
43:52:b5:01:fd:2d:44:15:f2:e3:f8:a9:36:e3:d5:85:36:71:
ba:6d:e6:eb:0e:85:fd:c7:51:9f:c1:5f:b9:97:46:50:8e:63:
a4:a9:e4:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:13:30 2025 by rpki-client