Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/16d370-f632-4ca1-8b96-1be325f7a2e3/1/TMC300XPrlNH086YtCQbkA5KnvM.mft
File: TMC300XPrlNH086YtCQbkA5KnvM.mft (raw, json)
Hash identifier: OISAZe3GCFSGHtZhZcKpmayugTWHEM8JbhfNLBl4Brg=
Subject key identifier: 6D:AA:78:7A:D2:85:3D:90:38:3C:40:15:10:11:5D:2F:30:61:7B:F6
Authority key identifier: 4C:C0:B7:D3:45:CF:AE:53:47:D3:CE:98:B4:24:1B:90:0E:4A:9E:F3
Certificate issuer: /CN=4cc0b7d345cfae5347d3ce98b4241b900e4a9ef3
Certificate serial: 0198D6602A6C10518470E25A1025CF9D0915
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TMC300XPrlNH086YtCQbkA5KnvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/16d370-f632-4ca1-8b96-1be325f7a2e3/1/TMC300XPrlNH086YtCQbkA5KnvM.mft
Manifest number: 07BD
Signing time: Sat 23 Aug 2025 10:01:23 +0000
Manifest this update: Sat 23 Aug 2025 10:01:23 +0000
Manifest next update: Sun 24 Aug 2025 10:01:23 +0000
Files and hashes: 1: TMC300XPrlNH086YtCQbkA5KnvM.crl (hash: Aq1Swx0OAQg9gcQkAI2oqA2ag5m0xBXaeoABoS+t88c=)
2: Vh_JUxD0F48NbjyYRcDhXuGyEXI.roa (hash: RX3aXV1jt4pV7znP3Nr6a04cOEHqVMLgDW/kqRB9jNI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/16d370-f632-4ca1-8b96-1be325f7a2e3/1/TMC300XPrlNH086YtCQbkA5KnvM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/16d370-f632-4ca1-8b96-1be325f7a2e3/1/TMC300XPrlNH086YtCQbkA5KnvM.mft
rsync://rpki.ripe.net/repository/DEFAULT/TMC300XPrlNH086YtCQbkA5KnvM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:2a:6c:10:51:84:70:e2:5a:10:25:cf:9d:09:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cc0b7d345cfae5347d3ce98b4241b900e4a9ef3
Validity
Not Before: Aug 23 10:01:23 2025 GMT
Not After : Aug 24 10:01:23 2025 GMT
Subject: CN=6daa787ad2853d90383c401510115d2f30617bf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:d7:65:2b:c7:6c:55:e4:eb:0b:da:e5:0b:58:
18:d2:92:4c:af:fe:54:53:43:b1:f4:61:2a:2b:59:
c7:c2:8d:23:de:78:29:9f:d0:66:2b:a4:56:11:0c:
02:4f:d3:1f:cb:0c:02:50:41:3f:1d:8a:ee:be:00:
25:99:99:9e:19:91:c8:15:45:f4:62:35:c2:8f:01:
81:3e:19:09:1d:a1:2a:97:62:af:ba:fa:f0:4c:3e:
fa:f9:4e:06:ca:03:65:27:bd:68:1b:58:16:a6:69:
46:11:97:29:5c:2a:04:13:5a:10:16:cb:3f:8e:26:
b2:fc:9c:f1:e0:5b:51:fa:7c:d2:08:1d:48:67:4a:
93:a3:03:e4:b2:e2:f2:34:82:22:31:af:2a:1b:9c:
91:84:03:88:2b:9a:ef:4f:0b:d5:0d:db:cc:a5:fc:
56:a5:ce:9f:91:32:30:70:2a:90:bf:92:5f:b6:d2:
60:cd:dc:71:3c:72:3f:76:c3:50:8f:4b:5a:f5:ca:
1a:b9:8d:78:80:88:3a:be:30:5e:59:80:98:11:f4:
57:1b:e1:df:c0:80:4f:3e:8c:64:6e:fe:56:db:f7:
0c:3c:74:b7:26:8f:e4:c9:0b:63:7c:77:cb:1a:d3:
63:19:cb:11:91:46:66:e7:b2:62:8c:c1:18:70:a1:
e9:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:AA:78:7A:D2:85:3D:90:38:3C:40:15:10:11:5D:2F:30:61:7B:F6
X509v3 Authority Key Identifier:
keyid:4C:C0:B7:D3:45:CF:AE:53:47:D3:CE:98:B4:24:1B:90:0E:4A:9E:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TMC300XPrlNH086YtCQbkA5KnvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/16d370-f632-4ca1-8b96-1be325f7a2e3/1/TMC300XPrlNH086YtCQbkA5KnvM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/16d370-f632-4ca1-8b96-1be325f7a2e3/1/TMC300XPrlNH086YtCQbkA5KnvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:c4:bd:6a:81:71:b5:0b:49:d9:be:15:91:49:99:58:d5:6a:
f2:c8:3c:f0:9f:fd:f0:5c:6a:41:96:40:fc:ea:a0:d7:42:65:
78:a7:cc:b9:b8:d0:1b:dc:fb:2a:82:17:6f:b4:ac:6c:1a:c2:
f8:56:46:ef:b5:da:59:e7:14:bd:ad:0b:1f:cc:81:d7:0f:f5:
35:d2:36:68:2f:d0:9c:02:15:1f:c8:b8:13:92:57:f7:64:f1:
81:cf:ce:98:36:a2:6c:57:6a:7c:c2:95:85:0b:d6:b5:ab:d0:
65:0d:4a:b4:88:d3:fc:d0:9b:92:9b:b1:81:a9:6f:5a:18:c4:
f3:53:95:6d:2a:44:f1:46:63:5b:9d:55:09:c6:12:3d:76:f7:
58:1f:13:8d:14:2d:dd:d0:6c:a2:c2:3d:c6:4a:17:14:76:59:
16:f5:74:b5:3a:53:d5:01:97:08:77:e3:55:47:1a:23:41:43:
69:9a:c2:dc:3b:e8:cb:29:e5:94:33:c2:65:98:60:e5:e0:51:
b9:3f:57:56:c6:ea:8b:7f:02:d3:b4:e5:19:e2:24:17:2e:de:
9a:1f:f8:6b:df:44:be:b8:56:0a:40:63:bc:a2:e5:97:c8:23:
a3:d1:d7:f2:d6:4c:b2:b8:2d:43:26:95:ed:7c:9e:af:ab:69:
f9:bd:df:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:25:53 2025 by rpki-client