Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/795ed9-8fad-4c44-8583-06ca709a3c59/1/tcsrXq88wV3Us7I62LlHKlJAwDs.mft
File: tcsrXq88wV3Us7I62LlHKlJAwDs.mft (raw, json)
Hash identifier: sf7t2415l6KWhUle5hOj8JwIsakx/vYxruNMqtJhh+I=
Subject key identifier: 9D:59:3D:FA:5C:72:51:7F:D0:16:52:48:0B:FD:3A:09:AE:C9:48:9D
Authority key identifier: B5:CB:2B:5E:AF:3C:C1:5D:D4:B3:B2:3A:D8:B9:47:2A:52:40:C0:3B
Certificate issuer: /CN=b5cb2b5eaf3cc15dd4b3b23ad8b9472a5240c03b
Certificate serial: 0198D65F8C01F597CEA7B82F728B389CF667
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tcsrXq88wV3Us7I62LlHKlJAwDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/795ed9-8fad-4c44-8583-06ca709a3c59/1/tcsrXq88wV3Us7I62LlHKlJAwDs.mft
Manifest number: 2C
Signing time: Sat 23 Aug 2025 10:00:42 +0000
Manifest this update: Sat 23 Aug 2025 10:00:42 +0000
Manifest next update: Sun 24 Aug 2025 10:00:42 +0000
Files and hashes: 1: Ay7JoslT6EAyHRaULsBRtIZWwog.roa (hash: gTv3k9NPlg2vVpHAiGMl3DtLPA9ZFxKifPWXSsGIZk8=)
2: UZAGhAiY0x9mk067CF0Qoz1U8jw.roa (hash: vRPGQRhb/zuHIAcwGvrMaqC7WBbXqAEiQNN6OQGlqaA=)
3: a9i8eCPzOCR2a7g49i_eP0oTcMg.roa (hash: CLgIXtXHGLkSKlPAdABLQyRziV9nANmmCJ4xG0uixD8=)
4: tcsrXq88wV3Us7I62LlHKlJAwDs.crl (hash: ECPED0i8BrIkrBEV/p7ql6pKyfL3Nrz/tOdP50qWsmY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/795ed9-8fad-4c44-8583-06ca709a3c59/1/tcsrXq88wV3Us7I62LlHKlJAwDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/795ed9-8fad-4c44-8583-06ca709a3c59/1/tcsrXq88wV3Us7I62LlHKlJAwDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/tcsrXq88wV3Us7I62LlHKlJAwDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:8c:01:f5:97:ce:a7:b8:2f:72:8b:38:9c:f6:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5cb2b5eaf3cc15dd4b3b23ad8b9472a5240c03b
Validity
Not Before: Aug 23 10:00:42 2025 GMT
Not After : Aug 24 10:00:42 2025 GMT
Subject: CN=9d593dfa5c72517fd01652480bfd3a09aec9489d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:26:fd:42:0d:e0:9b:f2:fd:7e:60:b5:91:e4:
17:a7:0b:87:9f:b1:0c:bd:f4:6c:58:7f:f7:ae:45:
f8:d4:8d:5b:71:a9:0a:a0:85:b8:ca:66:d4:48:57:
94:50:1a:fc:b4:04:57:48:01:81:17:c1:a6:74:26:
a9:62:0a:a6:7c:3d:94:d4:e3:53:c6:05:ed:24:1e:
39:c4:b0:7b:43:2e:fa:ea:ff:8f:e2:bc:57:c6:59:
8b:f8:8c:9c:09:7c:3e:64:95:1b:a1:cb:44:3a:72:
c3:c5:50:35:80:da:0c:0c:bd:0f:82:5e:00:f6:dc:
de:da:0e:8e:ed:51:9b:6d:14:cd:f8:e6:bc:70:5c:
aa:d0:63:6b:09:01:0c:09:38:6e:e2:dd:de:f4:93:
d3:ff:94:90:23:51:fd:7b:5c:cf:1d:8c:d3:d2:eb:
ca:1d:17:d4:4a:3d:2d:57:24:d6:03:7f:a2:74:0d:
02:8c:70:d3:f2:2a:4a:a2:19:c3:6b:3b:3f:a0:2b:
e0:64:00:cf:16:01:4a:3a:8a:e7:22:e5:f7:85:87:
30:00:bc:7a:44:05:7f:4e:86:0e:bc:b1:71:1d:44:
c4:4f:ad:a0:08:21:bb:96:3e:c6:81:c1:c4:b3:83:
8d:a4:bb:98:89:11:d0:81:ff:ab:97:d5:ad:a4:83:
85:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:59:3D:FA:5C:72:51:7F:D0:16:52:48:0B:FD:3A:09:AE:C9:48:9D
X509v3 Authority Key Identifier:
keyid:B5:CB:2B:5E:AF:3C:C1:5D:D4:B3:B2:3A:D8:B9:47:2A:52:40:C0:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tcsrXq88wV3Us7I62LlHKlJAwDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/795ed9-8fad-4c44-8583-06ca709a3c59/1/tcsrXq88wV3Us7I62LlHKlJAwDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/795ed9-8fad-4c44-8583-06ca709a3c59/1/tcsrXq88wV3Us7I62LlHKlJAwDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:4f:28:de:c0:02:ca:6d:3e:a7:fd:77:e6:a0:76:e2:5b:df:
ca:30:0d:15:05:b8:d9:4c:07:3e:52:c2:3d:a6:82:c3:44:13:
6e:ca:5c:82:7d:24:2e:a1:b5:d6:89:06:23:ea:4a:fc:b3:ab:
2d:8e:53:33:8e:2f:4f:96:a2:7f:22:e5:0d:d4:3a:d9:2d:47:
56:2e:4d:1f:80:40:af:ba:eb:e9:a0:16:f2:23:d8:f6:a8:e2:
38:00:f2:01:55:55:ab:fe:44:7b:bb:13:58:9b:e5:95:f2:4b:
02:1c:4b:94:c4:d5:ec:b2:4c:dc:0c:2d:ef:f2:bd:2b:6e:34:
91:d9:89:58:a6:c0:33:78:35:16:a9:2e:0d:df:cd:06:4e:f6:
09:cb:7b:f6:e8:e4:53:5d:60:67:55:3e:e0:1d:7f:09:8b:a4:
83:ba:2a:26:0a:7b:24:de:c9:92:00:7c:ea:35:fa:a0:f0:26:
44:0c:de:b2:e1:ed:a4:a9:26:db:cc:b0:33:fb:52:16:a8:40:
64:ff:5b:60:66:e3:65:1e:13:c6:95:2f:73:bf:2b:b7:fd:e4:
e4:43:6e:75:52:ee:de:f5:14:62:ca:b7:6b:d2:65:dc:4a:82:
1c:76:a1:f0:48:6d:dd:bc:14:3f:96:7b:ec:bf:9b:32:66:00:
75:6c:98:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:31:56 2025 by rpki-client