Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/16d370-f632-4ca1-8b96-1be325f7a2e3/1/TMC300XPrlNH086YtCQbkA5KnvM.mft
File: TMC300XPrlNH086YtCQbkA5KnvM.mft (raw, json)
Hash identifier: c9QVp/plcFA28PAjxiTEcozc5aXBal/2W06AQRItk1M=
Subject key identifier: 51:5D:A2:C5:CD:B6:59:8F:C1:AE:2D:2F:78:A8:34:B1:84:52:F4:E7
Authority key identifier: 4C:C0:B7:D3:45:CF:AE:53:47:D3:CE:98:B4:24:1B:90:0E:4A:9E:F3
Certificate issuer: /CN=4cc0b7d345cfae5347d3ce98b4241b900e4a9ef3
Certificate serial: 0197B6A22593A52B5ACD1E7C1035C91C9E5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TMC300XPrlNH086YtCQbkA5KnvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/16d370-f632-4ca1-8b96-1be325f7a2e3/1/TMC300XPrlNH086YtCQbkA5KnvM.mft
Manifest number: 0728
Signing time: Sat 28 Jun 2025 13:02:49 +0000
Manifest this update: Sat 28 Jun 2025 13:02:49 +0000
Manifest next update: Sun 29 Jun 2025 13:02:49 +0000
Files and hashes: 1: TMC300XPrlNH086YtCQbkA5KnvM.crl (hash: I/UhfQMnnnLMLrvhTjR61Qon0vLgCwFdWkonPcrD04Y=)
2: Vh_JUxD0F48NbjyYRcDhXuGyEXI.roa (hash: RX3aXV1jt4pV7znP3Nr6a04cOEHqVMLgDW/kqRB9jNI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/16d370-f632-4ca1-8b96-1be325f7a2e3/1/TMC300XPrlNH086YtCQbkA5KnvM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/16d370-f632-4ca1-8b96-1be325f7a2e3/1/TMC300XPrlNH086YtCQbkA5KnvM.mft
rsync://rpki.ripe.net/repository/DEFAULT/TMC300XPrlNH086YtCQbkA5KnvM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:25:93:a5:2b:5a:cd:1e:7c:10:35:c9:1c:9e:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cc0b7d345cfae5347d3ce98b4241b900e4a9ef3
Validity
Not Before: Jun 28 13:02:49 2025 GMT
Not After : Jun 29 13:02:49 2025 GMT
Subject: CN=515da2c5cdb6598fc1ae2d2f78a834b18452f4e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:89:a0:c0:eb:c1:e8:9d:b4:85:25:51:97:c3:
da:6d:1b:a1:af:56:a7:0b:66:5c:fb:54:73:23:fc:
a9:c9:f6:db:f8:57:78:d8:fa:13:2d:82:8a:38:fa:
94:2b:bf:2d:9a:69:56:9a:89:6e:4d:df:d4:4a:7e:
86:36:a4:bb:5f:d2:67:ae:b4:2d:f5:ac:5d:ef:db:
49:c3:61:a2:26:ea:b8:1b:6b:cc:f1:a7:e7:2c:f0:
f8:d1:8e:62:6f:f6:e2:18:ba:c5:98:d6:f5:48:29:
2c:fa:7e:c9:f1:ca:51:6b:1a:b8:01:a0:68:95:24:
ef:f7:1d:a0:98:8f:32:9b:63:68:8b:ad:1b:03:9a:
7b:0b:a9:94:5f:e7:b4:42:78:6b:11:7e:4c:73:e9:
c5:0f:5d:7f:ea:64:41:5b:38:53:00:4b:3d:96:75:
ba:a4:15:27:53:25:cc:49:ba:aa:0b:22:89:85:b9:
91:ec:12:b6:83:f6:6c:92:6f:3a:14:04:12:42:f4:
df:53:0d:12:0e:75:f5:99:0c:99:4c:5c:cf:0f:61:
b0:06:b9:d4:ef:87:1e:ad:e8:46:45:ab:ea:12:f6:
81:8d:1d:e6:78:f1:85:c4:f4:4f:e5:42:be:b4:5c:
45:3c:47:31:f8:1a:9c:af:65:c5:ab:cf:52:f8:fb:
0c:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:5D:A2:C5:CD:B6:59:8F:C1:AE:2D:2F:78:A8:34:B1:84:52:F4:E7
X509v3 Authority Key Identifier:
keyid:4C:C0:B7:D3:45:CF:AE:53:47:D3:CE:98:B4:24:1B:90:0E:4A:9E:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TMC300XPrlNH086YtCQbkA5KnvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/16d370-f632-4ca1-8b96-1be325f7a2e3/1/TMC300XPrlNH086YtCQbkA5KnvM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/16d370-f632-4ca1-8b96-1be325f7a2e3/1/TMC300XPrlNH086YtCQbkA5KnvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:81:6d:42:53:c5:34:91:e9:4c:ed:d6:70:64:85:e2:87:08:
cc:ca:d9:67:8c:92:39:64:46:29:f4:69:79:ab:5b:c3:e5:1d:
a5:46:3d:24:bb:4c:09:e1:87:07:cb:9f:53:e9:1a:e1:63:49:
d9:3b:76:16:4f:e9:dd:83:bb:52:17:9b:78:73:4b:e0:f3:01:
2a:3a:73:e5:61:b6:ab:90:be:e6:ac:1f:b9:97:8e:e8:1e:3d:
da:15:b2:71:35:2a:17:32:6a:57:34:8f:18:92:90:70:e8:39:
01:fd:f9:3f:f7:4c:90:29:f4:ca:2c:81:49:05:53:fc:2f:01:
40:7f:90:01:be:54:81:bc:6a:26:f5:1d:a8:e0:02:8c:4a:41:
71:fa:7a:23:a0:e1:23:2d:59:f2:80:d4:3f:28:d5:f9:99:82:
24:42:1e:70:23:95:2d:67:61:dd:89:8f:ac:d9:37:ea:fd:dd:
cf:80:dc:07:fb:2b:5b:1c:f3:5d:14:39:09:14:5c:70:f8:98:
8d:51:86:78:62:b1:4f:bb:61:60:d5:59:d3:28:40:c7:d0:d2:
4d:42:80:f6:fc:bd:5e:ff:6b:6f:d1:23:0f:dc:9e:17:8d:00:
61:ed:cf:03:40:46:7a:db:2e:cc:ab:d2:7d:3c:c2:3a:12:d8:
a0:62:c6:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:02:48 2025 by rpki-client