
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/TJETJOhpvEyl7IutDT3f9oVEGXk.mft
File: TJETJOhpvEyl7IutDT3f9oVEGXk.mft (raw, json)
Hash identifier: ySELfgpbpM1OD93VpRptmX8/HU5/m4CRuu6xyq+fh/Q=
Subject key identifier: FC:17:63:DF:EC:58:EE:51:E2:BB:AB:C7:E3:94:EF:EF:32:B9:AC:44
Authority key identifier: 4C:91:13:24:E8:69:BC:4C:A5:EC:8B:AD:0D:3D:DF:F6:85:44:19:79
Certificate issuer: /CN=4c911324e869bc4ca5ec8bad0d3ddff685441979
Certificate serial: 0198D5BB764063698C1127437FA32946E6D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TJETJOhpvEyl7IutDT3f9oVEGXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/TJETJOhpvEyl7IutDT3f9oVEGXk.mft
Manifest number: 1650
Signing time: Sat 23 Aug 2025 07:01:29 +0000
Manifest this update: Sat 23 Aug 2025 07:01:29 +0000
Manifest next update: Sun 24 Aug 2025 07:01:29 +0000
Files and hashes: 1: 06AfR8ZbdQ5_MZMYhDQjdfTo_kA.roa (hash: EEGnzX0afqpfc3Kn5NnezY7IPw+uVu1JdUrzEk+iDpk=)
2: 1-g-A4hn_DsUBjrSOtmwbaV2sjfc.roa (hash: H/p8gImyoUDaEoDvhM9gHqspIznQXZjV/layX0BmypQ=)
3: 43zHI9RV_-UV0H8FudTqslXERT8.roa (hash: jjlOWoTue0eCIb3Fk8Ot7n6TxzmNBAQWzlFe/V95Bl4=)
4: NBksY7qoZYso21Vw3xYrZFLq5eE.roa (hash: uWalzSU+haa+ieD4qUwSSt1pReJEBtMSVsUZjZILj3c=)
5: TJETJOhpvEyl7IutDT3f9oVEGXk.crl (hash: 4R4l2rEyJ/IHs/8pIcnQf41QUsNsD0gD3tBkiM91VyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/TJETJOhpvEyl7IutDT3f9oVEGXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/TJETJOhpvEyl7IutDT3f9oVEGXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TJETJOhpvEyl7IutDT3f9oVEGXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:76:40:63:69:8c:11:27:43:7f:a3:29:46:e6:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c911324e869bc4ca5ec8bad0d3ddff685441979
Validity
Not Before: Aug 23 07:01:29 2025 GMT
Not After : Aug 24 07:01:29 2025 GMT
Subject: CN=fc1763dfec58ee51e2bbabc7e394efef32b9ac44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:5b:88:e2:eb:2d:d3:36:f4:cb:6e:43:6f:26:
3e:9a:97:a5:93:02:60:c2:14:d8:b1:0a:24:f3:72:
5c:73:60:5c:ff:44:29:7d:36:05:aa:32:5a:1f:5f:
95:a7:79:ad:78:25:a6:bd:22:13:9c:0d:d8:24:55:
7a:af:4e:75:ef:9a:c5:49:93:6d:88:c0:a9:e4:7e:
f5:8a:d7:9f:fb:3e:09:a6:fe:28:56:54:57:d5:04:
4e:0c:f5:b5:24:bf:e9:df:40:04:97:71:21:3a:99:
5a:4d:b2:cb:75:54:e2:b3:c4:6b:c4:f2:d7:e7:7b:
b7:93:86:d2:62:71:95:ea:a6:ab:27:5f:6c:35:1f:
c9:e0:c0:d5:2c:ec:4e:9d:ac:f8:a3:88:56:ea:27:
f1:e4:64:b7:9f:d8:47:88:00:56:58:35:81:30:ae:
9b:f0:ff:bb:86:03:32:1c:ca:0b:9c:32:e9:12:41:
e0:7e:52:26:49:15:28:b9:11:08:df:0e:9d:bd:e9:
5c:65:3d:91:fe:1e:16:a1:27:9d:69:73:d1:15:7c:
fd:41:01:9e:ec:23:0f:48:f0:3a:c6:e0:23:5b:f3:
f7:55:4c:54:5a:00:5b:4d:79:c0:74:75:72:d4:4f:
de:bd:af:d3:73:6c:71:5c:22:6e:87:53:ff:51:52:
4e:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:17:63:DF:EC:58:EE:51:E2:BB:AB:C7:E3:94:EF:EF:32:B9:AC:44
X509v3 Authority Key Identifier:
keyid:4C:91:13:24:E8:69:BC:4C:A5:EC:8B:AD:0D:3D:DF:F6:85:44:19:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TJETJOhpvEyl7IutDT3f9oVEGXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/TJETJOhpvEyl7IutDT3f9oVEGXk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/TJETJOhpvEyl7IutDT3f9oVEGXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:26:c4:cb:d2:1f:e8:8d:39:bc:5d:8c:56:3b:6c:10:e1:01:
30:bd:f3:19:fc:97:67:fb:2a:50:51:7a:28:3b:ec:37:61:aa:
c1:ed:1c:37:7e:a9:07:12:0c:5f:ad:2c:92:f2:58:82:4e:53:
fd:66:f3:62:92:92:0e:db:0b:61:e9:83:1a:72:f5:58:a1:bd:
3f:92:46:aa:61:12:6a:2b:d8:30:a0:47:46:a2:45:1c:0a:01:
a9:98:6a:fa:60:15:45:37:cb:67:8c:de:31:25:dd:a6:c0:c7:
3b:bc:2d:3c:94:5f:54:77:a8:b2:c3:47:47:42:d4:65:89:21:
4c:59:09:70:ba:6a:35:af:c0:4d:c6:04:09:3a:dc:89:1c:97:
23:e1:04:dd:16:e5:81:2a:0d:b4:d5:43:75:da:b2:e7:3d:0f:
be:2a:2c:ee:00:a9:2b:8a:2e:83:7e:df:19:85:6f:69:40:cc:
c0:01:27:07:a1:0d:c5:47:7b:17:81:cb:bb:ae:2d:a3:11:65:
6f:39:83:a7:b3:a7:7a:c4:5f:1c:30:cb:7e:d9:18:c2:3c:0f:
3f:72:d3:1f:51:37:2e:07:ce:71:37:f0:53:46:fe:82:a3:7d:
46:83:86:e0:af:c6:2c:9f:d0:4c:fe:5f:67:27:30:2e:51:1e:
9a:31:7e:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:16:04 2025 by rpki-client