Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.mft
File: TzYQM0T807V1ny2z88cHE3b54jM.mft (raw, json)
Hash identifier: pTAV3cTkoRKIPhzgOUP49Lv3O1hRYSipQBzK7C8Qcy4=
Subject key identifier: 30:EC:3E:87:94:C7:50:C5:1A:27:69:4C:23:E1:D6:57:15:8D:54:41
Authority key identifier: 4F:36:10:33:44:FC:D3:B5:75:9F:2D:B3:F3:C7:07:13:76:F9:E2:33
Certificate issuer: /CN=4f36103344fcd3b5759f2db3f3c7071376f9e233
Certificate serial: 0198D404BEB3F925C046228443BA9966587D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TzYQM0T807V1ny2z88cHE3b54jM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.mft
Manifest number: 1636
Signing time: Fri 22 Aug 2025 23:02:17 +0000
Manifest this update: Fri 22 Aug 2025 23:02:17 +0000
Manifest next update: Sat 23 Aug 2025 23:02:17 +0000
Files and hashes: 1: 8Wt50oYgSIhV5-nromefXM1xUHs.roa (hash: nonj7X6EJpkPkTZ26/d/JTxCuBr7E4OqIEl5kLX7Uvc=)
2: 8_cQRjzqzZHtBUadp-m1RHbfYtA.roa (hash: UqDtwYBpkHo94AcNyXlmGDGQI5vQH42VfJTVEsv7Dqg=)
3: LlXFwn2Cp-oz5_wkoV4hnOjpZhc.roa (hash: b+9t4WdjfYrQBYgVT5TU7qZAYZFFGjvTZY/AWbdEORo=)
4: TzYQM0T807V1ny2z88cHE3b54jM.crl (hash: WIliXx3RKGuDWLJSTBzIGvHmqv0kuK6c9vtvrgV9YPY=)
5: X73zSfeynuQ2HFhZg92JJjuC-hI.roa (hash: S3jxFVJaRrRBYwj6SGNBku30PnQhyId+dYaYtS51gvo=)
6: qzzHZUBjcSRGFasL_IeeyUOUJ98.roa (hash: Lhbg0pCg1KfB+dSdb+vO645LuzkQlZQdXs3opMNsPwc=)
7: uFl9Jbyr6wsOz0RTyXyU1uLpiuQ.roa (hash: IIGP5wcOQKkgCwi0o8TwNvlGqyYDZZaNOwMVkOIQtWw=)
8: ugnRmlrkR8TJKKb_eVy88x5cRBU.roa (hash: wA1+l0+3DAminFs23I5vSPrzOSbWOqFz2PTbS6VlnsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.mft
rsync://rpki.ripe.net/repository/DEFAULT/TzYQM0T807V1ny2z88cHE3b54jM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:02:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:be:b3:f9:25:c0:46:22:84:43:ba:99:66:58:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f36103344fcd3b5759f2db3f3c7071376f9e233
Validity
Not Before: Aug 22 23:02:17 2025 GMT
Not After : Aug 23 23:02:17 2025 GMT
Subject: CN=30ec3e8794c750c51a27694c23e1d657158d5441
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b3:8e:75:14:a2:26:6e:7f:43:0c:11:3c:99:
53:50:66:59:85:28:66:fc:23:28:1a:43:90:02:33:
08:48:d9:5c:ad:5a:1b:bb:b4:b9:7e:e0:97:4a:7d:
70:a6:22:c8:58:55:7e:2c:10:c3:79:50:f1:43:eb:
41:36:08:99:09:5e:68:8c:cc:14:69:71:80:6a:e7:
1c:7b:ac:15:30:9e:eb:51:d8:b5:0f:56:57:34:5f:
ac:a5:29:e7:bb:1a:72:df:5c:5e:be:1d:fe:8f:7a:
2e:9a:47:47:e0:fd:d7:eb:c8:49:a5:41:44:fd:3f:
70:e3:4f:32:61:7c:db:e6:ec:42:c6:49:2d:7c:a4:
da:f7:ab:fd:1f:fd:22:03:c0:48:68:b2:ec:71:d8:
53:63:36:fa:3b:3f:1c:c8:33:03:17:45:1c:a3:4b:
1e:c5:38:17:f5:41:8b:02:d9:ae:c9:31:83:76:22:
73:3e:99:4f:fb:d6:43:e7:88:fe:19:c2:df:d5:9b:
c7:04:63:93:8b:b7:d1:63:af:fa:af:5d:0b:ee:dc:
f6:cc:1d:0f:98:86:8e:41:8f:5a:aa:65:57:aa:3b:
33:5e:7e:6e:e8:ab:d2:6b:e1:24:a3:e3:4e:80:a9:
b2:86:37:80:7c:96:cf:ca:79:af:34:95:68:f6:e9:
5a:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:EC:3E:87:94:C7:50:C5:1A:27:69:4C:23:E1:D6:57:15:8D:54:41
X509v3 Authority Key Identifier:
keyid:4F:36:10:33:44:FC:D3:B5:75:9F:2D:B3:F3:C7:07:13:76:F9:E2:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TzYQM0T807V1ny2z88cHE3b54jM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:f5:7b:ad:b0:ab:8f:61:ed:0b:c9:7b:67:2d:d4:b1:0b:97:
0a:be:8d:70:32:25:20:24:c3:10:96:ad:0b:e8:51:c5:d8:d7:
1c:15:8b:31:4b:17:68:67:7f:77:ac:91:50:bb:dc:1b:95:06:
01:6f:f8:fd:14:cd:d0:cf:86:84:50:3d:78:74:f1:03:d9:60:
1d:98:23:4b:ce:30:a3:6d:8a:53:64:96:e8:8e:25:b5:dc:8c:
4c:ff:3a:c0:3d:9e:8c:25:b6:9b:31:c4:99:f0:30:44:c3:a0:
23:bd:31:9d:df:d1:25:ab:a4:a5:60:7b:32:dd:1a:86:a5:6e:
90:e7:ec:06:20:76:53:9b:ba:ad:b6:29:22:1b:f6:0d:54:6f:
92:2c:64:fc:75:fb:6b:b4:6d:4c:ba:0a:f3:9e:b8:34:ba:28:
66:61:f6:3b:24:25:75:ae:f4:66:77:65:9c:0e:ae:db:4b:01:
f4:25:bf:bd:ce:f0:9d:59:22:42:8e:40:35:82:bf:ba:46:84:
c1:18:d2:dd:ed:36:2e:f5:d6:49:96:49:5f:e0:99:90:06:af:
10:1c:4a:68:9d:43:33:1c:f8:c2:96:d7:c5:cb:db:02:00:76:
ee:73:cc:4b:79:6e:02:e7:79:fc:8f:68:22:8e:94:97:e2:eb:
dd:f0:f2:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:15:04 2025 by rpki-client