Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/a07523-8392-47f5-82b3-30c430a398e6/1/TnKscetFB6wKZSpUWY2uRR_jP0c.mft
File: TnKscetFB6wKZSpUWY2uRR_jP0c.mft (raw, json)
Hash identifier: ni2aogp2oTyGTJpFdoAni4onn/BHtbpF2lpNPQpkErg=
Subject key identifier: E5:E8:80:B4:AB:A9:D2:F5:D2:00:B4:CE:F6:76:E3:33:9E:90:25:13
Authority key identifier: 4E:72:AC:71:EB:45:07:AC:0A:65:2A:54:59:8D:AE:45:1F:E3:3F:47
Certificate issuer: /CN=4e72ac71eb4507ac0a652a54598dae451fe33f47
Certificate serial: 0198D4A7C832140A2D3F234D5C422F69FD99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TnKscetFB6wKZSpUWY2uRR_jP0c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/a07523-8392-47f5-82b3-30c430a398e6/1/TnKscetFB6wKZSpUWY2uRR_jP0c.mft
Manifest number: 1374
Signing time: Sat 23 Aug 2025 02:00:22 +0000
Manifest this update: Sat 23 Aug 2025 02:00:22 +0000
Manifest next update: Sun 24 Aug 2025 02:00:22 +0000
Files and hashes: 1: 4zuoqc0Glu6ApY4rQHmNAlxxavo.roa (hash: qDD4JCBpI34S2Q624/ndlMxJa6qHAv5moxaFgFJvL3I=)
2: TnKscetFB6wKZSpUWY2uRR_jP0c.crl (hash: b8K0ax6qq0yNYEynvQA979OCSUChZJ0449xygON7jzA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/a07523-8392-47f5-82b3-30c430a398e6/1/TnKscetFB6wKZSpUWY2uRR_jP0c.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/a07523-8392-47f5-82b3-30c430a398e6/1/TnKscetFB6wKZSpUWY2uRR_jP0c.mft
rsync://rpki.ripe.net/repository/DEFAULT/TnKscetFB6wKZSpUWY2uRR_jP0c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:c8:32:14:0a:2d:3f:23:4d:5c:42:2f:69:fd:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e72ac71eb4507ac0a652a54598dae451fe33f47
Validity
Not Before: Aug 23 02:00:22 2025 GMT
Not After : Aug 24 02:00:22 2025 GMT
Subject: CN=e5e880b4aba9d2f5d200b4cef676e3339e902513
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:0f:64:bc:57:27:56:3b:45:02:d5:f6:6d:7a:
3c:13:b1:47:eb:0b:ec:04:28:db:70:33:69:f7:4b:
38:b0:f3:8c:d3:00:3e:85:e8:0e:4a:88:97:b7:c2:
32:6c:c0:31:83:ad:ac:0f:bf:cd:12:23:be:24:a8:
c6:ab:92:c9:93:98:32:c3:46:1f:7d:c9:08:d2:a2:
92:f3:a6:ef:59:72:de:7f:ef:33:25:de:74:95:2f:
b0:14:1c:93:a1:ac:52:25:6d:1a:15:0a:e7:2b:53:
a3:0e:27:bd:b0:3f:a6:b6:47:67:3b:90:9e:55:e3:
c5:4d:9f:60:fb:64:1d:b0:a1:ea:22:7d:c3:e4:8f:
97:18:87:54:45:42:5d:00:c4:af:69:13:ab:f0:9a:
61:cb:9a:cb:07:78:1c:13:83:b6:3c:b8:c8:42:17:
91:1c:ec:eb:ac:fc:f8:34:b8:2f:8d:9a:56:85:06:
61:e8:4a:cf:39:c1:5b:24:b7:df:89:97:5e:b2:8f:
d9:1c:0c:27:b8:70:b9:15:f2:c0:74:fe:36:ea:97:
ff:a2:5e:cd:33:70:e0:55:4d:05:19:cb:22:0c:64:
ff:a1:cf:d4:f4:ff:37:4b:39:80:80:a8:0e:7a:92:
83:0c:9f:d6:85:27:62:9b:8e:61:e0:62:b5:98:cb:
bb:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:E8:80:B4:AB:A9:D2:F5:D2:00:B4:CE:F6:76:E3:33:9E:90:25:13
X509v3 Authority Key Identifier:
keyid:4E:72:AC:71:EB:45:07:AC:0A:65:2A:54:59:8D:AE:45:1F:E3:3F:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TnKscetFB6wKZSpUWY2uRR_jP0c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a07523-8392-47f5-82b3-30c430a398e6/1/TnKscetFB6wKZSpUWY2uRR_jP0c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a07523-8392-47f5-82b3-30c430a398e6/1/TnKscetFB6wKZSpUWY2uRR_jP0c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:4a:cc:da:20:95:d8:c0:24:db:ec:d4:d2:b6:7b:c1:4b:75:
6d:93:e8:68:b2:5d:c4:21:86:36:54:da:68:4d:60:bc:4c:43:
44:40:bc:0e:96:75:f7:49:76:70:9a:4e:44:6e:b4:40:f5:e6:
14:ec:9b:46:a6:e8:a7:62:17:ee:40:75:93:52:54:0e:01:96:
e0:33:a0:5a:41:2c:26:87:71:73:06:c9:62:87:ce:40:51:19:
33:ba:eb:47:5e:56:93:ed:ce:b9:4b:cd:97:2b:0b:05:30:8d:
b7:56:1f:71:9a:78:09:4f:f7:20:f1:ec:cb:74:8f:07:bd:69:
6b:46:37:d9:d6:8c:74:e0:8f:cc:6e:4e:c8:1f:d2:8a:a1:1d:
f7:af:1b:f9:ed:b6:bf:c9:f8:87:f7:ff:d5:0b:eb:cf:1a:de:
a4:22:b0:81:b9:47:df:f4:b6:c1:07:36:2e:e4:a6:3a:e2:8f:
04:69:2d:c4:db:04:17:56:8d:ac:9d:42:27:f6:ea:1d:1b:74:
a8:5f:bc:62:86:bb:65:02:62:d6:c2:94:6c:a5:4b:0c:c9:8e:
a9:66:ab:39:00:17:a7:72:13:fe:6b:7c:43:99:a0:61:fc:be:
71:c8:03:be:eb:3f:fd:12:70:bb:d3:1e:1e:7a:2e:47:5e:b4:
e8:aa:8e:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:52:33 2025 by rpki-client