Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/95d780-baad-4db7-beb5-454599a4d22c/1/TYqYddfQ0SvEenC37emjymTYLTI.mft
File: TYqYddfQ0SvEenC37emjymTYLTI.mft (raw, json)
Hash identifier: PROnJfYGPnX1C6vhPh7TtpAdXfMQslVstmvWx9qQa9o=
Subject key identifier: A6:3C:4C:CD:C7:04:A2:8E:85:34:D8:E1:B3:12:1E:43:96:74:3D:EA
Authority key identifier: 4D:8A:98:75:D7:D0:D1:2B:C4:7A:70:B7:ED:E9:A3:CA:64:D8:2D:32
Certificate issuer: /CN=4d8a9875d7d0d12bc47a70b7ede9a3ca64d82d32
Certificate serial: 0197B6A1D3257E08E433A370C7BB6E7D044A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TYqYddfQ0SvEenC37emjymTYLTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/95d780-baad-4db7-beb5-454599a4d22c/1/TYqYddfQ0SvEenC37emjymTYLTI.mft
Manifest number: 0C2E
Signing time: Sat 28 Jun 2025 13:02:27 +0000
Manifest this update: Sat 28 Jun 2025 13:02:27 +0000
Manifest next update: Sun 29 Jun 2025 13:02:27 +0000
Files and hashes: 1: Qkkirv8lLJuTeoHE2XBshzOic18.roa (hash: JXSnxQgZnKW02ndUqgQ4ahHIPbZr+aCryUo1lSsSpVM=)
2: TYqYddfQ0SvEenC37emjymTYLTI.crl (hash: Oe88fuq8O88zXiolQm6WxBksTr8o659ijsrevhCpMNM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/95d780-baad-4db7-beb5-454599a4d22c/1/TYqYddfQ0SvEenC37emjymTYLTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/95d780-baad-4db7-beb5-454599a4d22c/1/TYqYddfQ0SvEenC37emjymTYLTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/TYqYddfQ0SvEenC37emjymTYLTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:d3:25:7e:08:e4:33:a3:70:c7:bb:6e:7d:04:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d8a9875d7d0d12bc47a70b7ede9a3ca64d82d32
Validity
Not Before: Jun 28 13:02:27 2025 GMT
Not After : Jun 29 13:02:27 2025 GMT
Subject: CN=a63c4ccdc704a28e8534d8e1b3121e4396743dea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:1f:94:f2:73:36:1c:d4:04:24:ab:87:46:66:
b8:54:76:13:6b:3d:49:df:bd:93:fb:f7:32:96:37:
09:1c:47:95:9c:dc:3d:b7:04:34:68:a7:ab:3c:07:
2e:fa:8a:34:46:9f:b8:d8:f6:3d:7b:77:d8:94:d1:
26:8c:5c:24:af:a7:5a:32:64:a7:7a:fa:15:48:07:
9e:6d:c1:76:c0:65:96:54:c5:99:68:6b:46:97:63:
e3:82:34:aa:e7:b1:86:81:32:f6:bf:21:a1:4a:91:
6a:31:8d:a5:dd:55:ac:b6:6f:96:b1:7c:ad:58:7d:
da:7a:23:98:9b:41:d6:fa:2d:15:71:f9:57:6a:9e:
0e:78:d0:df:c4:ce:e4:9a:c6:1d:34:c4:db:28:ef:
f9:c2:6c:d4:d5:ea:68:fb:1b:de:bf:a0:53:0e:53:
89:2f:dd:ba:a8:53:6e:0c:3d:95:00:85:27:f4:17:
ff:97:1e:2d:dc:9e:57:ae:48:cd:86:98:37:54:c1:
e4:84:a9:57:1a:a5:23:fa:b3:6d:9d:84:1e:0e:de:
88:97:4d:27:9c:20:28:4c:02:14:09:1a:7f:ff:57:
82:67:38:48:79:11:47:c3:17:6c:0d:fc:a6:67:e6:
16:5d:49:b7:3c:23:6c:4e:88:9c:16:87:1a:b3:8a:
98:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:3C:4C:CD:C7:04:A2:8E:85:34:D8:E1:B3:12:1E:43:96:74:3D:EA
X509v3 Authority Key Identifier:
keyid:4D:8A:98:75:D7:D0:D1:2B:C4:7A:70:B7:ED:E9:A3:CA:64:D8:2D:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TYqYddfQ0SvEenC37emjymTYLTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/95d780-baad-4db7-beb5-454599a4d22c/1/TYqYddfQ0SvEenC37emjymTYLTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/95d780-baad-4db7-beb5-454599a4d22c/1/TYqYddfQ0SvEenC37emjymTYLTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
db:64:b8:43:70:0b:4f:8a:42:3c:0b:a6:97:84:12:d9:82:71:
64:01:1c:62:ab:97:d8:69:d4:a0:2e:7f:25:db:3d:4d:db:aa:
65:0b:1e:81:a1:c6:86:8d:f3:a7:56:29:d7:90:1d:e6:2a:bd:
50:f0:57:6e:39:8b:d4:96:3f:92:90:b9:69:ef:7a:49:2d:b1:
06:7d:b4:3b:01:9f:03:78:de:bc:94:0d:61:1d:1f:69:11:28:
84:e0:ca:56:b6:a0:a3:72:d2:c5:7e:09:88:6f:5e:20:c8:7b:
5f:9c:c4:f7:53:69:5b:3d:12:00:06:40:23:c0:3d:e6:99:67:
50:79:3d:d9:c1:b6:14:7a:fa:69:da:9a:73:af:77:f8:31:89:
68:95:11:ca:7d:e5:6a:4a:8d:63:8b:ff:8b:37:9a:3a:64:52:
1a:ea:9d:0e:f4:06:45:27:28:82:e9:9b:7c:18:ff:b6:5d:b2:
7c:1e:83:56:dc:c8:6a:64:00:9a:d9:91:a7:a3:d4:cb:ab:2e:
f1:1a:80:3a:10:2d:06:ae:19:2b:67:d4:29:c2:ac:85:47:b0:
41:d2:03:f0:c7:52:ab:77:68:79:c8:a4:e1:27:fe:ee:ee:fb:
ad:3b:a6:0b:7a:55:4e:8d:8a:c1:6a:99:b7:64:ea:27:da:0d:
fd:8b:e0:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:49:16 2025 by rpki-client