Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/93841b-a526-40e3-8a4f-bc1d9a034593/1/TAcbrZKeNisGK4nIf6QbXe2k_8A.mft
File: TAcbrZKeNisGK4nIf6QbXe2k_8A.mft (raw, json)
Hash identifier: 4+GyHy8zLkeWYRe1AX9IKrWNWf41vgblxHAplMDFwF8=
Subject key identifier: 1D:2B:5F:33:4A:D0:07:67:DD:09:BA:85:C1:FF:19:56:17:24:8C:5D
Authority key identifier: 4C:07:1B:AD:92:9E:36:2B:06:2B:89:C8:7F:A4:1B:5D:ED:A4:FF:C0
Certificate issuer: /CN=4c071bad929e362b062b89c87fa41b5deda4ffc0
Certificate serial: 0197B8FD0221B1A604768EA4543784BB6165
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TAcbrZKeNisGK4nIf6QbXe2k_8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/93841b-a526-40e3-8a4f-bc1d9a034593/1/TAcbrZKeNisGK4nIf6QbXe2k_8A.mft
Manifest number: 12F9
Signing time: Sun 29 Jun 2025 00:01:18 +0000
Manifest this update: Sun 29 Jun 2025 00:01:18 +0000
Manifest next update: Mon 30 Jun 2025 00:01:18 +0000
Files and hashes: 1: Q7AhmlPF0P4he1DdnyBzxO1UbNg.roa (hash: taA8dfVnJrloOBeiFJz3Gf4qdbtYPfCeh6aOOG2s/PY=)
2: TAcbrZKeNisGK4nIf6QbXe2k_8A.crl (hash: kEQ90P0M3eXRrupqOUJ0cJSJwVs2FQv3g3T/JPCg8RQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/93841b-a526-40e3-8a4f-bc1d9a034593/1/TAcbrZKeNisGK4nIf6QbXe2k_8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/93841b-a526-40e3-8a4f-bc1d9a034593/1/TAcbrZKeNisGK4nIf6QbXe2k_8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/TAcbrZKeNisGK4nIf6QbXe2k_8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:fd:02:21:b1:a6:04:76:8e:a4:54:37:84:bb:61:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c071bad929e362b062b89c87fa41b5deda4ffc0
Validity
Not Before: Jun 29 00:01:18 2025 GMT
Not After : Jun 30 00:01:18 2025 GMT
Subject: CN=1d2b5f334ad00767dd09ba85c1ff195617248c5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:20:8a:41:e7:50:7f:2c:27:31:0f:13:6d:ab:
07:ff:e1:87:2d:8f:18:a0:a2:ba:f9:a5:e4:10:c3:
5b:cc:f4:ab:71:19:a8:32:07:48:a3:ce:a7:d9:59:
51:07:e5:7b:bd:11:6f:12:45:d8:68:75:91:dd:88:
3a:14:94:28:d2:bc:85:a4:70:4c:a8:c4:a4:a3:40:
fa:0f:ac:c0:2d:08:67:83:1f:16:c5:2f:20:6f:a9:
eb:2d:16:65:3e:16:c7:12:e4:4b:49:f6:0d:7c:5e:
fd:f3:01:d9:7c:b9:fd:35:a9:15:d3:45:98:fd:37:
3b:c7:dc:29:72:56:d4:4a:5f:e9:b9:d3:e6:e8:af:
e7:32:98:00:88:88:3a:07:c9:d6:08:65:c1:bb:b0:
44:a8:4d:95:87:5b:89:44:d0:05:d9:9d:fc:3b:6d:
a6:22:79:7c:fd:43:d8:ba:95:c4:0a:67:ca:f8:94:
e8:ac:8a:91:4b:28:4a:fb:e1:13:02:96:5e:80:0f:
ef:d6:ff:e6:79:e4:e0:fb:c1:6e:ee:06:a6:e3:9b:
e2:44:65:ac:dd:55:98:b6:90:29:3b:85:83:c7:d8:
df:20:93:29:7b:fa:ae:85:b1:10:22:9c:88:73:81:
b1:8d:38:88:c8:d8:32:5e:ba:41:fb:ec:04:fa:56:
49:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:2B:5F:33:4A:D0:07:67:DD:09:BA:85:C1:FF:19:56:17:24:8C:5D
X509v3 Authority Key Identifier:
keyid:4C:07:1B:AD:92:9E:36:2B:06:2B:89:C8:7F:A4:1B:5D:ED:A4:FF:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TAcbrZKeNisGK4nIf6QbXe2k_8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/93841b-a526-40e3-8a4f-bc1d9a034593/1/TAcbrZKeNisGK4nIf6QbXe2k_8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/93841b-a526-40e3-8a4f-bc1d9a034593/1/TAcbrZKeNisGK4nIf6QbXe2k_8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:2a:9b:c2:2d:da:e9:bf:b0:84:48:7f:4a:31:85:45:0f:19:
e6:2f:24:25:27:9d:89:ac:e9:31:9e:41:ca:97:7b:16:d5:a7:
34:f6:67:57:88:85:12:31:3a:78:aa:79:00:cb:50:7b:c8:e0:
ba:b7:ce:d3:7d:f0:f3:c3:b8:2d:be:cc:e8:d9:82:52:1f:7e:
3a:f1:fb:0a:8e:3c:22:bc:d7:c4:b3:eb:13:35:01:e6:02:a6:
95:4e:66:53:2b:d2:a5:c3:80:df:1b:cd:97:33:65:7c:97:dc:
86:b5:36:de:f9:18:d0:e1:c1:14:e0:ca:4f:fc:d0:c5:36:69:
e6:97:b4:f8:29:ba:0f:df:d8:28:23:d4:fa:e5:81:5a:56:7b:
b8:48:ee:76:e7:fb:46:3e:32:3a:89:e6:e1:e5:e5:aa:a5:40:
ba:a1:39:1b:f3:0c:83:80:d4:ba:40:32:44:7b:28:e5:3e:98:
ba:12:c2:b8:d5:33:b3:0d:c5:63:a7:cc:3e:6c:41:d0:07:fb:
53:d4:14:3f:d9:24:da:22:f0:82:63:b6:bd:97:bf:17:84:d2:
8c:c6:41:75:3e:48:a8:3c:07:ac:0c:9f:8a:be:e9:ba:28:79:
d2:fd:86:89:ab:82:a6:bb:3a:8c:8b:24:f9:2d:32:fb:20:21:
3d:9b:6e:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:31:36 2025 by rpki-client