Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/TsOgYsuW2aPyGostqEj4HG9zv5U.mft
File: TsOgYsuW2aPyGostqEj4HG9zv5U.mft (raw, json)
Hash identifier: I47m0XnBcOL+0jT28cMUMLesTnxidW2nhNzWLkUWbx8=
Subject key identifier: 9B:15:EF:71:66:00:5D:4C:A2:CE:5C:70:BE:B7:87:7E:51:D1:48:6D
Authority key identifier: 4E:C3:A0:62:CB:96:D9:A3:F2:1A:8B:2D:A8:48:F8:1C:6F:73:BF:95
Certificate issuer: /CN=4ec3a062cb96d9a3f21a8b2da848f81c6f73bf95
Certificate serial: 0198D7E1A0C81E50991A9B72D92276C569E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TsOgYsuW2aPyGostqEj4HG9zv5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/TsOgYsuW2aPyGostqEj4HG9zv5U.mft
Manifest number: 15E6
Signing time: Sat 23 Aug 2025 17:02:24 +0000
Manifest this update: Sat 23 Aug 2025 17:02:24 +0000
Manifest next update: Sun 24 Aug 2025 17:02:24 +0000
Files and hashes: 1: TsOgYsuW2aPyGostqEj4HG9zv5U.crl (hash: /1wx0/rv0yexg5viod7Hdyn9EgtkXNnLM+cS9GLED0U=)
2: Zo-iXOH7eoz1wcNDU4gFPp4lbTo.roa (hash: lEXdntgkazPfcD7Ym6WQrguJ42W+/3phyup2XOjaUaA=)
3: w0BgVrxvQVnjW2X3qjBQ3ko9xOc.roa (hash: Ucfa4JRcD7zc33DVXeSZa1Nus1iwZHoQ8xtQZD2xfUQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/TsOgYsuW2aPyGostqEj4HG9zv5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/TsOgYsuW2aPyGostqEj4HG9zv5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/TsOgYsuW2aPyGostqEj4HG9zv5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:e1:a0:c8:1e:50:99:1a:9b:72:d9:22:76:c5:69:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ec3a062cb96d9a3f21a8b2da848f81c6f73bf95
Validity
Not Before: Aug 23 17:02:24 2025 GMT
Not After : Aug 24 17:02:24 2025 GMT
Subject: CN=9b15ef7166005d4ca2ce5c70beb7877e51d1486d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:fc:3e:9e:72:9a:4c:ff:9b:18:66:89:3e:48:
f7:2b:96:86:87:b5:5f:43:e4:fe:5c:b6:c6:df:a8:
5a:05:d2:ea:8e:4d:d4:aa:52:48:61:94:ee:65:00:
43:2c:93:fd:87:68:17:31:66:4f:e8:b2:da:94:8b:
6c:57:bf:dc:69:40:4e:30:86:e0:da:9b:54:83:28:
32:92:93:35:5c:c7:c2:1c:06:7a:51:a5:0a:03:d4:
73:80:a4:55:a8:61:cf:97:a1:a2:db:d0:12:94:d3:
a3:f5:f9:35:f9:04:14:85:6c:00:db:e2:ba:73:26:
88:0e:09:48:cd:29:1a:f7:e7:36:e6:ec:ad:89:53:
64:ae:af:3c:19:de:f6:74:4a:ea:bc:a6:ab:89:cc:
06:bc:de:be:f1:dc:cf:36:7d:6c:87:8a:30:ff:7c:
14:dd:ef:78:36:71:22:77:ca:b9:f8:e7:01:3e:6a:
30:15:3d:3b:76:4c:f2:16:41:a4:e1:4e:e7:c5:48:
d3:c6:38:f5:50:de:5c:a5:66:36:ef:23:dc:58:ea:
4f:51:c4:ac:36:ff:b8:84:ef:12:90:84:64:fa:ac:
01:49:05:49:f3:de:79:5b:50:a4:69:e3:6f:da:15:
71:45:f5:f1:d9:60:03:16:d4:ef:5c:da:9f:f1:7f:
5e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:15:EF:71:66:00:5D:4C:A2:CE:5C:70:BE:B7:87:7E:51:D1:48:6D
X509v3 Authority Key Identifier:
keyid:4E:C3:A0:62:CB:96:D9:A3:F2:1A:8B:2D:A8:48:F8:1C:6F:73:BF:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TsOgYsuW2aPyGostqEj4HG9zv5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/TsOgYsuW2aPyGostqEj4HG9zv5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/TsOgYsuW2aPyGostqEj4HG9zv5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:9f:1b:ea:5b:d2:27:9d:ab:d7:d3:fd:1d:c8:d2:2c:e7:e5:
ed:89:1b:28:67:2c:5f:c6:b1:4e:3d:ce:2c:5b:a8:fa:87:73:
3a:7f:a6:0a:9a:c2:eb:e4:1f:96:0d:11:e5:58:21:8a:23:1d:
36:82:f6:8a:c3:ee:62:10:e8:f6:e2:ff:3f:bf:0b:5f:f0:26:
33:fa:a7:6f:97:dd:75:66:98:4c:f3:92:cb:ca:2e:07:1a:f7:
56:d7:d2:4f:8d:c0:bd:80:a0:59:7c:6b:62:a3:7d:43:7a:dc:
bb:41:ac:30:12:b1:bf:73:11:0c:34:ab:b0:67:86:46:5a:31:
9a:36:6d:51:48:05:d5:ed:4e:9f:57:89:88:aa:1f:49:f4:95:
cc:8e:e6:d3:75:97:76:96:2f:ea:98:9a:12:72:e0:17:ea:98:
7d:06:98:9e:cb:27:34:53:ba:b2:2a:c5:a3:dc:ff:2f:0a:96:
96:8a:c6:30:d3:6b:40:6b:f3:ce:22:60:9a:e8:81:a0:42:30:
6c:38:0a:dd:03:a9:ea:a1:b8:bc:52:cb:b2:e4:2f:48:c2:2b:
68:2e:fc:83:a1:fe:a3:23:46:45:b3:87:c4:f5:f7:2e:ff:2c:
1a:03:73:a2:88:80:44:6a:0d:17:e9:b0:e4:ee:1f:52:23:bf:
ee:3e:14:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:07:37 2025 by rpki-client