Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/c0e6a2-8b20-4480-a8ab-b388c5770e04/1/TmROKYPFxQTYAPLQWCsYLrq_JIc.mft
File: TmROKYPFxQTYAPLQWCsYLrq_JIc.mft (raw, json)
Hash identifier: k+Lr65jFbOJonhf+QHrIz4r96f5O2axVTWfH7CrJZ2c=
Subject key identifier: 90:BD:AF:70:AA:86:B1:EC:6B:7B:F8:64:94:F8:B6:50:E8:15:3B:96
Authority key identifier: 4E:64:4E:29:83:C5:C5:04:D8:00:F2:D0:58:2B:18:2E:BA:BF:24:87
Certificate issuer: /CN=4e644e2983c5c504d800f2d0582b182ebabf2487
Certificate serial: 0198D65F04018677DE04524B1A9B034E65F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TmROKYPFxQTYAPLQWCsYLrq_JIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/c0e6a2-8b20-4480-a8ab-b388c5770e04/1/TmROKYPFxQTYAPLQWCsYLrq_JIc.mft
Manifest number: 090C
Signing time: Sat 23 Aug 2025 10:00:07 +0000
Manifest this update: Sat 23 Aug 2025 10:00:07 +0000
Manifest next update: Sun 24 Aug 2025 10:00:07 +0000
Files and hashes: 1: TmROKYPFxQTYAPLQWCsYLrq_JIc.crl (hash: WAbA2a7n5P2zbsKTxHApFVg+LQDQRXYIyW2FHyeyGB4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/c0e6a2-8b20-4480-a8ab-b388c5770e04/1/TmROKYPFxQTYAPLQWCsYLrq_JIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/c0e6a2-8b20-4480-a8ab-b388c5770e04/1/TmROKYPFxQTYAPLQWCsYLrq_JIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/TmROKYPFxQTYAPLQWCsYLrq_JIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:04:01:86:77:de:04:52:4b:1a:9b:03:4e:65:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e644e2983c5c504d800f2d0582b182ebabf2487
Validity
Not Before: Aug 23 10:00:07 2025 GMT
Not After : Aug 24 10:00:07 2025 GMT
Subject: CN=90bdaf70aa86b1ec6b7bf86494f8b650e8153b96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c9:87:18:44:46:1a:49:b9:21:4c:d2:78:d5:
37:b3:9c:ee:7e:05:f3:6e:43:c7:4f:0b:7f:16:80:
ad:25:e3:9f:4e:87:b9:f9:5e:31:51:9a:43:35:8a:
93:0e:e9:d4:0e:95:f4:1e:7c:6e:76:b7:a6:52:c7:
65:9c:c2:ad:03:fb:a7:e8:c1:17:32:fa:4b:ac:d3:
7f:68:c7:85:6b:5e:05:5f:db:23:9b:f9:b3:d9:63:
35:aa:81:72:a3:81:aa:33:4f:fa:cb:99:84:9b:3b:
48:72:fd:8a:25:42:84:17:78:ce:85:ac:a6:ac:73:
d5:87:e8:62:6d:13:29:3e:d5:d3:d5:e6:88:9d:b9:
6b:33:65:54:d9:47:3d:f7:ec:c2:76:cf:69:f0:02:
1e:ab:68:74:4f:13:20:56:99:ca:8c:3c:23:68:6e:
26:2e:7d:4a:e8:59:5a:97:14:d4:91:33:a6:60:80:
0c:68:9b:bc:3f:59:e9:05:c2:03:3b:3b:11:25:6f:
f2:aa:55:fa:c2:bc:2d:f3:52:06:1c:7f:b4:d7:19:
c6:79:0d:fd:e6:d9:ef:dd:30:86:38:90:0e:dd:08:
05:17:ff:a5:f9:88:43:41:cb:a4:04:56:eb:fd:fe:
0d:ac:f3:53:7e:f5:84:4d:32:06:f5:d4:7c:6d:6a:
89:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:BD:AF:70:AA:86:B1:EC:6B:7B:F8:64:94:F8:B6:50:E8:15:3B:96
X509v3 Authority Key Identifier:
keyid:4E:64:4E:29:83:C5:C5:04:D8:00:F2:D0:58:2B:18:2E:BA:BF:24:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TmROKYPFxQTYAPLQWCsYLrq_JIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/c0e6a2-8b20-4480-a8ab-b388c5770e04/1/TmROKYPFxQTYAPLQWCsYLrq_JIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/c0e6a2-8b20-4480-a8ab-b388c5770e04/1/TmROKYPFxQTYAPLQWCsYLrq_JIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:a1:02:7c:44:db:7a:79:6c:bd:66:cd:58:88:e9:e2:27:85:
dc:24:2d:cd:43:da:88:a6:f6:1d:15:54:cd:8e:46:39:58:44:
e4:ba:ec:e7:c8:10:29:bc:40:8e:14:41:14:c7:03:2a:e6:bc:
0f:4f:0e:59:fc:92:2d:08:11:57:7a:37:4e:92:54:ae:5b:fa:
36:e9:b4:6e:13:63:c6:84:9d:69:67:07:f1:82:3e:e2:cc:14:
6f:f1:86:e9:4e:48:84:d6:08:c1:27:ca:a1:8a:75:94:a3:f5:
2f:e8:9e:d5:34:ea:41:1c:41:c6:4c:67:d3:9e:62:43:51:44:
cc:bc:3e:e7:c5:50:28:38:3c:2d:bd:d1:a3:ee:c9:57:fb:61:
da:7c:58:ac:d3:16:be:cb:b5:c7:67:af:c2:76:e9:12:27:9b:
94:5b:84:52:54:a1:41:fe:86:5c:af:ae:7c:48:e9:20:3c:e0:
d2:b2:21:dc:59:54:58:79:b5:c8:ee:63:78:c9:63:0a:b3:0c:
3a:20:01:c0:fc:af:50:97:0a:96:0c:8c:73:fe:ec:36:0a:dc:
f9:1f:70:ca:b7:05:19:7b:0a:6e:63:5a:ed:a7:42:d0:5f:ed:
15:c9:c0:af:e9:15:ed:b2:e4:7e:33:9f:e9:b2:da:65:c2:9e:
92:a6:75:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:07:31 2025 by rpki-client