Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/eeb1b2-e3c3-413d-a164-80d4782437ff/1/tvpArb6TaxhPhEWGoPkNEjC2hTc.mft
File: tvpArb6TaxhPhEWGoPkNEjC2hTc.mft (raw, json)
Hash identifier: hH74i5w7tsyaZP+OomcgWpqa7rLmh7zAKXTMod+0kO4=
Subject key identifier: 26:CD:BF:16:76:59:23:DB:2E:08:5C:EB:33:DA:09:C8:3C:DB:A6:92
Authority key identifier: B6:FA:40:AD:BE:93:6B:18:4F:84:45:86:A0:F9:0D:12:30:B6:85:37
Certificate issuer: /CN=b6fa40adbe936b184f844586a0f90d1230b68537
Certificate serial: 0198D6985FC49B67AE5A60F2961F9262DFFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tvpArb6TaxhPhEWGoPkNEjC2hTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/eeb1b2-e3c3-413d-a164-80d4782437ff/1/tvpArb6TaxhPhEWGoPkNEjC2hTc.mft
Manifest number: 0E3F
Signing time: Sat 23 Aug 2025 11:02:46 +0000
Manifest this update: Sat 23 Aug 2025 11:02:46 +0000
Manifest next update: Sun 24 Aug 2025 11:02:46 +0000
Files and hashes: 1: 7XTv9hOTaLviFUQwCXilEpYpbHU.roa (hash: 4LkrU5FXjLzeM7TTaFB6Rd3GTMio8T94peCl7zXgOHM=)
2: tvpArb6TaxhPhEWGoPkNEjC2hTc.crl (hash: 6FS5LOPobbJIZJs5zuBgo3vqFr3Tj8OjPZJLCmOYcko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/eeb1b2-e3c3-413d-a164-80d4782437ff/1/tvpArb6TaxhPhEWGoPkNEjC2hTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/eeb1b2-e3c3-413d-a164-80d4782437ff/1/tvpArb6TaxhPhEWGoPkNEjC2hTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/tvpArb6TaxhPhEWGoPkNEjC2hTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 11:02:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:5f:c4:9b:67:ae:5a:60:f2:96:1f:92:62:df:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6fa40adbe936b184f844586a0f90d1230b68537
Validity
Not Before: Aug 23 11:02:46 2025 GMT
Not After : Aug 24 11:02:46 2025 GMT
Subject: CN=26cdbf16765923db2e085ceb33da09c83cdba692
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a9:9b:b2:ac:8d:3f:c3:ca:ea:0f:bd:b4:19:
95:15:21:7f:a6:f9:66:e0:e2:c5:65:7c:41:66:b7:
cf:fb:99:9f:dd:06:7e:48:a9:c6:63:d0:62:2d:48:
87:e3:3e:5f:ec:d1:0c:6c:c5:43:c1:16:90:3b:fd:
2c:6c:96:ec:d4:93:43:84:8e:44:b7:26:98:cb:79:
27:f4:2b:07:0e:65:c4:96:e3:a1:df:3c:a6:ef:26:
ef:0d:d2:24:7c:2c:ae:0f:ca:e9:1e:a0:1f:6f:8d:
7b:53:af:cc:d2:de:f4:d4:1f:6c:d0:8e:be:54:47:
49:00:eb:e7:4d:42:2b:28:c6:c0:78:fa:9f:6a:82:
a0:26:3b:3a:bd:a4:3b:f2:9d:6f:5d:15:b0:06:39:
ac:0e:e6:ff:45:7a:1d:12:45:25:e3:e5:de:56:e4:
72:e6:3d:d9:1f:86:c8:ee:6c:f6:1d:fb:cd:37:93:
5f:69:70:6b:10:58:b3:66:83:ff:fc:07:07:fd:53:
67:8f:1c:16:8b:e3:a1:87:7b:96:d6:2c:0a:b1:ce:
49:c4:92:73:e8:8c:87:41:1d:d7:44:e4:16:c7:c7:
04:86:ce:a7:1c:da:f9:7a:7c:ff:37:df:5a:72:b1:
e7:6d:25:c4:0d:ca:d0:ab:dd:4b:5f:32:fe:51:a8:
e3:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:CD:BF:16:76:59:23:DB:2E:08:5C:EB:33:DA:09:C8:3C:DB:A6:92
X509v3 Authority Key Identifier:
keyid:B6:FA:40:AD:BE:93:6B:18:4F:84:45:86:A0:F9:0D:12:30:B6:85:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tvpArb6TaxhPhEWGoPkNEjC2hTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/eeb1b2-e3c3-413d-a164-80d4782437ff/1/tvpArb6TaxhPhEWGoPkNEjC2hTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/eeb1b2-e3c3-413d-a164-80d4782437ff/1/tvpArb6TaxhPhEWGoPkNEjC2hTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:d2:4c:2f:78:46:e5:00:d7:fd:e0:2f:72:6d:6a:0a:70:05:
7a:5c:5c:b6:a2:18:7a:5a:23:b5:7c:24:13:c2:c1:d0:cc:ad:
af:4b:76:e8:af:3c:f5:30:a1:d2:7c:1d:4f:89:fc:c9:3b:ba:
e7:ec:d0:9e:01:0a:65:b4:94:e0:25:43:fd:8e:3c:51:01:2e:
78:17:22:7a:19:ac:31:f6:8e:c8:22:e0:a1:66:8b:bf:38:11:
a0:37:1b:bd:16:66:59:90:d5:51:72:4b:7c:ed:e5:83:eb:e0:
5d:7d:ae:1d:31:39:1c:9a:cb:d8:a7:43:a9:60:ee:99:7c:22:
01:6e:f0:90:e9:ba:65:2f:41:85:fd:f8:6f:d7:87:43:1d:4c:
05:64:9d:b2:6a:5e:13:32:7f:aa:a9:1b:a2:0d:b2:ee:4e:6c:
a1:4c:78:c0:ff:98:91:a8:be:8b:7f:8f:b9:15:5e:ba:73:be:
11:d0:ba:2c:95:28:68:fa:0f:c4:58:ab:57:d8:b7:91:7f:3b:
0b:0d:9d:9f:92:cb:72:2b:b0:6e:e9:ed:8a:d6:81:3a:a1:f3:
bf:c4:c7:e4:1f:b9:bf:90:63:c4:4a:f7:85:5d:38:c8:b7:76:
ff:e1:c1:eb:3a:38:55:af:79:23:71:8c:3a:f9:0a:6a:f2:32:
2e:74:b2:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:05:06 2025 by rpki-client