Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/95d780-baad-4db7-beb5-454599a4d22c/1/TYqYddfQ0SvEenC37emjymTYLTI.mft
File: TYqYddfQ0SvEenC37emjymTYLTI.mft (raw, json)
Hash identifier: /tPwPSEnUN6URIUnfHVWQVRHEnoWQSnooStdUlvE7iQ=
Subject key identifier: C4:CB:F4:BE:E3:05:29:AE:56:62:B8:74:D7:9A:52:89:ED:43:A3:EC
Authority key identifier: 4D:8A:98:75:D7:D0:D1:2B:C4:7A:70:B7:ED:E9:A3:CA:64:D8:2D:32
Certificate issuer: /CN=4d8a9875d7d0d12bc47a70b7ede9a3ca64d82d32
Certificate serial: 0198D473DC4E4DA16342A046B1F4ED16157E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TYqYddfQ0SvEenC37emjymTYLTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/95d780-baad-4db7-beb5-454599a4d22c/1/TYqYddfQ0SvEenC37emjymTYLTI.mft
Manifest number: 0CC2
Signing time: Sat 23 Aug 2025 01:03:39 +0000
Manifest this update: Sat 23 Aug 2025 01:03:39 +0000
Manifest next update: Sun 24 Aug 2025 01:03:39 +0000
Files and hashes: 1: Qkkirv8lLJuTeoHE2XBshzOic18.roa (hash: JXSnxQgZnKW02ndUqgQ4ahHIPbZr+aCryUo1lSsSpVM=)
2: TYqYddfQ0SvEenC37emjymTYLTI.crl (hash: +sEH2ypbtpSHg1p6VA9aGscthl2eZY5aNfv+9vsa8f0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/95d780-baad-4db7-beb5-454599a4d22c/1/TYqYddfQ0SvEenC37emjymTYLTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/95d780-baad-4db7-beb5-454599a4d22c/1/TYqYddfQ0SvEenC37emjymTYLTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/TYqYddfQ0SvEenC37emjymTYLTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:dc:4e:4d:a1:63:42:a0:46:b1:f4:ed:16:15:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d8a9875d7d0d12bc47a70b7ede9a3ca64d82d32
Validity
Not Before: Aug 23 01:03:39 2025 GMT
Not After : Aug 24 01:03:39 2025 GMT
Subject: CN=c4cbf4bee30529ae5662b874d79a5289ed43a3ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f8:dd:4c:69:e7:f8:88:e0:37:97:08:e0:a7:
54:56:a1:c5:16:ae:7f:cd:b8:ac:40:54:09:e4:83:
2b:fe:f9:5c:b4:e2:7f:96:b8:0b:70:6b:9a:6d:01:
71:ca:68:e2:cd:50:90:0e:d7:f0:6d:5a:24:2b:e0:
00:24:c2:f7:e9:d5:28:24:2c:e9:12:00:6b:c9:a0:
25:11:b6:69:29:a1:c5:73:c7:32:88:97:ca:f9:33:
21:d1:fb:62:1a:f9:12:1a:f6:a4:a7:8c:1c:ac:8a:
3d:5a:f0:10:f6:dc:c2:26:a8:55:f4:33:a8:ee:8c:
70:2c:dc:b1:06:16:de:b8:1b:29:d2:ad:d0:01:d8:
98:1f:77:14:88:bd:18:e7:06:d8:99:9c:cf:5c:3b:
de:fb:5c:3f:77:ba:06:76:2e:fa:e2:ee:bb:36:b2:
94:b0:58:02:a9:97:33:47:36:ce:0a:94:fe:91:15:
91:37:a3:78:a6:10:a7:aa:9c:6f:85:58:7e:ba:33:
f3:a8:56:47:c4:39:2a:79:f2:ab:29:42:cf:09:6d:
06:9d:58:3a:93:73:d9:5d:ca:26:1b:70:82:c5:5f:
f7:13:34:be:5a:f4:ae:99:8a:08:44:1c:24:2f:cd:
a3:2c:22:5d:24:8d:fe:5d:cf:dc:f4:0d:c3:9b:f2:
5a:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:CB:F4:BE:E3:05:29:AE:56:62:B8:74:D7:9A:52:89:ED:43:A3:EC
X509v3 Authority Key Identifier:
keyid:4D:8A:98:75:D7:D0:D1:2B:C4:7A:70:B7:ED:E9:A3:CA:64:D8:2D:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TYqYddfQ0SvEenC37emjymTYLTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/95d780-baad-4db7-beb5-454599a4d22c/1/TYqYddfQ0SvEenC37emjymTYLTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/95d780-baad-4db7-beb5-454599a4d22c/1/TYqYddfQ0SvEenC37emjymTYLTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:bc:cc:04:e9:e5:35:9f:ed:6c:34:27:c0:f4:55:f1:14:43:
e2:fc:ea:9b:06:f4:6a:5d:b1:27:2b:8e:60:86:39:aa:98:f5:
fe:cf:bb:ac:f0:72:ea:9e:a9:78:30:f7:7a:ae:e2:02:4e:d2:
89:b3:a1:57:13:aa:d3:79:4c:72:3a:24:c7:07:91:e6:1c:e9:
75:75:c9:52:3e:b6:20:da:13:3e:f0:17:3a:34:2e:f0:fb:6f:
8e:55:bc:7b:52:cb:72:bb:84:5f:33:2b:ae:40:1f:ec:a6:02:
83:88:7e:e8:89:d5:09:ab:87:c5:60:68:d8:2f:88:a1:1f:43:
73:79:a0:59:c8:79:dd:9b:71:62:0b:c0:7d:e4:e9:2e:72:68:
cb:ef:a5:64:00:5b:16:db:0c:1f:5e:c0:2b:26:44:4f:dc:9a:
a8:72:57:0f:72:c2:33:b0:95:8b:05:d5:d6:a5:18:cb:9c:b6:
67:4b:5a:1e:41:4c:4a:6c:27:b1:72:b0:93:5e:8a:ec:02:cd:
9d:88:51:2f:73:8c:bb:fd:00:ec:5f:85:ab:ec:f9:d6:db:5e:
00:e8:71:fd:70:19:ce:e5:91:b5:27:d3:6d:28:9a:a5:b3:8e:
a0:80:c1:f3:f9:08:60:5e:99:0f:e8:d3:1a:7d:fc:7a:5f:af:
22:72:a3:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:37:44 2025 by rpki-client