Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/c5674e-db61-4722-b922-535be275e6f5/1/TaktycvByBxzpp8xWlMbR_ROPFQ.mft
File: TaktycvByBxzpp8xWlMbR_ROPFQ.mft (raw, json)
Hash identifier: qT9XCjNj9ibb5mN/shyXKyaSQI51MY+buXDbO4YSgns=
Subject key identifier: 5D:44:BC:0F:E5:C4:49:A2:E2:3A:93:FB:85:72:96:F0:9E:BE:CF:A9
Authority key identifier: 4D:A9:2D:C9:CB:C1:C8:1C:73:A6:9F:31:5A:53:1B:47:F4:4E:3C:54
Certificate issuer: /CN=4da92dc9cbc1c81c73a69f315a531b47f44e3c54
Certificate serial: 0198D5F15AFE8F920CDFAA7634D99BF10EB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TaktycvByBxzpp8xWlMbR_ROPFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/c5674e-db61-4722-b922-535be275e6f5/1/TaktycvByBxzpp8xWlMbR_ROPFQ.mft
Manifest number: 0762
Signing time: Sat 23 Aug 2025 08:00:21 +0000
Manifest this update: Sat 23 Aug 2025 08:00:21 +0000
Manifest next update: Sun 24 Aug 2025 08:00:21 +0000
Files and hashes: 1: TaktycvByBxzpp8xWlMbR_ROPFQ.crl (hash: JT+wlZmaALC/5v9lRgnPDCLGL+12C1LsH/ZK1QiWlLY=)
2: sC-8YGmj0CBSq2FvzDwG7HGg9gc.roa (hash: 5UyLBATOmTY+U2MSulJDzw/FA2TIy0HRDqJHG4VBs7w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/c5674e-db61-4722-b922-535be275e6f5/1/TaktycvByBxzpp8xWlMbR_ROPFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/c5674e-db61-4722-b922-535be275e6f5/1/TaktycvByBxzpp8xWlMbR_ROPFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/TaktycvByBxzpp8xWlMbR_ROPFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:5a:fe:8f:92:0c:df:aa:76:34:d9:9b:f1:0e:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4da92dc9cbc1c81c73a69f315a531b47f44e3c54
Validity
Not Before: Aug 23 08:00:21 2025 GMT
Not After : Aug 24 08:00:21 2025 GMT
Subject: CN=5d44bc0fe5c449a2e23a93fb857296f09ebecfa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ee:69:23:80:90:43:d4:73:d9:1d:ef:64:bf:
b5:e0:ad:77:be:87:31:3d:f2:7d:5d:f2:1f:18:7e:
e6:eb:b5:98:a6:e2:4e:53:e7:6a:37:cb:49:da:ad:
19:37:c0:3f:f6:a6:3e:de:2e:21:5b:82:35:e7:3e:
4f:c3:94:fb:6a:06:39:20:31:09:6b:e3:19:db:b3:
eb:d7:03:c5:89:a8:42:40:55:15:77:01:9b:ee:d8:
50:09:da:c1:2f:64:38:80:ba:92:53:0f:4c:00:00:
55:da:29:06:e5:ec:60:db:ce:b6:1c:a0:85:0f:f2:
8b:93:0b:41:4a:fa:01:ef:aa:d7:4c:ae:e5:1b:92:
9a:f0:2e:bb:67:b5:67:19:c1:21:a6:c3:f4:98:07:
03:60:f0:d3:22:ee:ee:d4:bb:33:94:58:91:56:e2:
41:d2:63:34:bc:3f:a9:4e:c2:f6:dd:08:df:50:80:
b7:fd:e8:f4:00:92:21:61:44:2f:00:82:61:c1:47:
8e:0b:3e:da:de:5b:ee:84:7e:e4:fb:a5:af:27:3d:
82:99:da:74:f6:90:87:62:f3:7e:b2:79:b1:ac:13:
72:98:cb:69:93:a9:0c:94:dd:20:9c:bb:b0:53:17:
fd:c2:a4:80:73:aa:0a:6b:d2:57:77:84:d5:64:43:
49:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:44:BC:0F:E5:C4:49:A2:E2:3A:93:FB:85:72:96:F0:9E:BE:CF:A9
X509v3 Authority Key Identifier:
keyid:4D:A9:2D:C9:CB:C1:C8:1C:73:A6:9F:31:5A:53:1B:47:F4:4E:3C:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TaktycvByBxzpp8xWlMbR_ROPFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/c5674e-db61-4722-b922-535be275e6f5/1/TaktycvByBxzpp8xWlMbR_ROPFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/c5674e-db61-4722-b922-535be275e6f5/1/TaktycvByBxzpp8xWlMbR_ROPFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:8e:86:0a:22:6d:d4:d0:4c:12:ce:8b:67:35:67:96:00:0c:
95:2a:04:37:7e:ba:c4:21:4d:8d:0c:88:8a:7b:6e:1e:3f:48:
b0:af:c5:30:df:ad:cd:17:24:19:7c:62:78:5b:ab:44:9e:a4:
cd:de:92:86:f1:c9:ed:ba:0f:09:d9:be:5c:68:59:dc:e7:89:
f0:d7:8d:f0:72:68:6f:fb:1c:7a:6e:93:1c:e8:93:f1:88:fa:
04:81:a3:92:63:d8:6a:08:72:c4:89:d8:ab:55:8c:d4:6b:04:
9f:23:18:0e:b5:4f:e2:20:64:83:b4:92:a8:35:8c:3f:a8:b2:
bc:c3:2e:a6:6d:c2:48:69:94:88:dc:87:52:e4:4a:f5:61:ca:
73:6a:1e:4c:3f:f3:29:53:77:ff:9f:61:a8:98:a4:53:4f:10:
2a:dc:5e:d3:14:27:20:ba:df:07:d8:26:d0:e2:2f:d5:e9:f1:
e4:2f:47:e6:7f:05:24:67:d3:61:06:46:23:61:73:a9:79:c6:
70:99:65:c8:61:2a:de:96:73:85:20:15:a3:f4:7b:9b:df:6c:
4d:13:93:29:26:54:40:01:89:36:f6:24:de:36:f1:30:c3:a7:
9f:94:c0:dd:2f:d9:95:34:b3:bc:a4:55:9d:11:e5:00:e3:d6:
c9:95:e7:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:33:57 2025 by rpki-client