Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/dc3491-c699-42b5-90a7-cc7e9ab09fb8/1/tcKI6WPg6fgtHGp_2E7FqjQKuo8.mft
File: tcKI6WPg6fgtHGp_2E7FqjQKuo8.mft (raw, json)
Hash identifier: 8E+GH16lH1aPS3zGU8yy91xyv1aW57XwroXsV8X9Kjk=
Subject key identifier: 61:CC:F8:B1:A0:26:79:20:E0:CB:69:87:1F:7E:3D:73:3A:36:78:BF
Authority key identifier: B5:C2:88:E9:63:E0:E9:F8:2D:1C:6A:7F:D8:4E:C5:AA:34:0A:BA:8F
Certificate issuer: /CN=b5c288e963e0e9f82d1c6a7fd84ec5aa340aba8f
Certificate serial: 0198D4E0E5C98C3A4689D45481EB27C5C105
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tcKI6WPg6fgtHGp_2E7FqjQKuo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/dc3491-c699-42b5-90a7-cc7e9ab09fb8/1/tcKI6WPg6fgtHGp_2E7FqjQKuo8.mft
Manifest number: 02E7
Signing time: Sat 23 Aug 2025 03:02:45 +0000
Manifest this update: Sat 23 Aug 2025 03:02:45 +0000
Manifest next update: Sun 24 Aug 2025 03:02:45 +0000
Files and hashes: 1: ZmF3lPkl3dsARIFpHN7vz5QHbFs.roa (hash: ukfiioKav9S2J4a6qVoPDRL9RQGgYfvHu1FXDGi1Nzg=)
2: tcKI6WPg6fgtHGp_2E7FqjQKuo8.crl (hash: 4Yuk65BwpzO00EcXbp0oE3nU3lMKUdkwfaTqBB9aL+w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/dc3491-c699-42b5-90a7-cc7e9ab09fb8/1/tcKI6WPg6fgtHGp_2E7FqjQKuo8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/dc3491-c699-42b5-90a7-cc7e9ab09fb8/1/tcKI6WPg6fgtHGp_2E7FqjQKuo8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tcKI6WPg6fgtHGp_2E7FqjQKuo8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:e5:c9:8c:3a:46:89:d4:54:81:eb:27:c5:c1:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5c288e963e0e9f82d1c6a7fd84ec5aa340aba8f
Validity
Not Before: Aug 23 03:02:45 2025 GMT
Not After : Aug 24 03:02:45 2025 GMT
Subject: CN=61ccf8b1a0267920e0cb69871f7e3d733a3678bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:33:60:90:04:e7:64:b2:f8:a3:d4:1b:aa:bf:
79:36:3f:64:4b:89:95:1c:76:8c:2b:87:41:86:cc:
5c:58:32:87:4f:88:f2:bc:be:e6:d6:be:81:d4:ec:
4a:4d:07:aa:8b:78:9b:de:d5:a0:24:d4:ed:72:de:
81:7f:cc:0c:93:22:f5:33:6e:88:b7:ec:15:8c:dd:
ab:54:70:e8:27:46:48:d9:35:cd:c3:10:5b:09:94:
7f:59:e5:1a:94:d6:74:b2:de:d4:ee:b2:a2:27:84:
16:2c:99:8d:1d:3e:e2:68:72:91:6f:b8:22:8a:61:
f4:18:6f:dd:e2:df:a0:16:8f:48:70:67:c4:83:64:
f6:fd:11:ce:8d:e2:8e:1e:83:28:f9:c2:4e:82:91:
12:55:ea:2e:98:50:4c:9c:27:d8:f4:7a:d3:1d:a2:
ee:04:fd:1f:3f:87:da:c3:31:f7:72:fc:d8:b7:c5:
be:b6:88:8a:cb:10:91:d1:5d:48:26:85:c9:d7:b7:
e3:97:61:5c:d5:d1:5e:34:a2:7a:1a:8c:fa:8d:ea:
bb:c9:37:79:cc:7f:a0:7a:0d:e4:fc:99:3f:18:b9:
ce:80:62:5c:ba:da:1b:ad:10:fe:cc:f4:68:7d:ec:
fd:2e:de:0e:8d:47:e0:15:0a:35:70:8c:7c:be:fb:
5a:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:CC:F8:B1:A0:26:79:20:E0:CB:69:87:1F:7E:3D:73:3A:36:78:BF
X509v3 Authority Key Identifier:
keyid:B5:C2:88:E9:63:E0:E9:F8:2D:1C:6A:7F:D8:4E:C5:AA:34:0A:BA:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tcKI6WPg6fgtHGp_2E7FqjQKuo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/dc3491-c699-42b5-90a7-cc7e9ab09fb8/1/tcKI6WPg6fgtHGp_2E7FqjQKuo8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/dc3491-c699-42b5-90a7-cc7e9ab09fb8/1/tcKI6WPg6fgtHGp_2E7FqjQKuo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:59:32:d2:71:b1:9d:0d:ea:01:5a:0d:88:12:c5:52:87:2a:
9d:9c:20:77:43:f0:91:bf:8a:a3:bd:5d:b2:11:75:bf:97:f3:
53:46:24:2c:c6:59:eb:20:16:da:c9:9d:ea:63:9a:44:cc:d9:
14:d4:f0:59:5e:42:c6:f4:e6:67:4a:3d:e6:b5:e7:be:a6:fd:
05:c1:21:b9:e1:5d:95:bc:e0:ca:0b:2a:0e:99:68:04:e7:ce:
8a:ee:03:b3:5a:97:47:45:83:34:ab:54:1e:f3:40:0b:91:f1:
06:2c:5c:3e:0a:c1:33:d0:68:33:51:98:ea:53:13:eb:20:d4:
9f:6a:d3:b1:24:2d:a2:9c:c0:bd:a5:7b:fc:20:0e:92:2a:a1:
b6:80:40:8d:96:06:30:83:78:44:9a:9d:7f:c4:0c:54:b8:02:
aa:5a:dd:03:02:57:a2:39:5c:4e:67:ce:4e:c0:9d:9f:ff:54:
f9:cc:62:3e:44:e9:31:76:b4:6f:17:76:4f:4e:4e:69:36:78:
ed:1c:a2:9c:ae:6f:55:99:5c:2c:aa:5a:25:0d:db:51:7f:06:
be:87:12:09:4e:07:e7:47:f8:81:b7:c6:1f:97:89:d1:b4:51:
83:e0:ea:7f:69:a6:66:2c:ad:eb:3a:42:0b:95:d1:78:09:98:
f0:76:d5:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:48:46 2025 by rpki-client