Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/c1d940-044d-49c4-a7a1-a0076679be60/1/TCYZGbVcLAj3Klqx0OsYXuEr3_c.mft
File: TCYZGbVcLAj3Klqx0OsYXuEr3_c.mft (raw, json)
Hash identifier: 1kK6dK3Er0vTrTOE4s5tEq5FTU4zJMEtDpK2+Y8Cgts=
Subject key identifier: A8:4E:51:00:FA:C5:58:4B:57:EB:C9:5F:32:23:87:14:7F:0D:21:08
Authority key identifier: 4C:26:19:19:B5:5C:2C:08:F7:2A:5A:B1:D0:EB:18:5E:E1:2B:DF:F7
Certificate issuer: /CN=4c261919b55c2c08f72a5ab1d0eb185ee12bdff7
Certificate serial: 0197B6A0DAD4FD72BB75D43C69813AD7A5E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TCYZGbVcLAj3Klqx0OsYXuEr3_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/c1d940-044d-49c4-a7a1-a0076679be60/1/TCYZGbVcLAj3Klqx0OsYXuEr3_c.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 13:01:24 +0000
Manifest this update: Sat 28 Jun 2025 13:01:24 +0000
Manifest next update: Sun 29 Jun 2025 13:01:24 +0000
Files and hashes: 1: 35EW9mUAS2KwaYDPUieiupydDBY.roa (hash: V/BNRylyiFUELWt9i2pyrF3sOU/lNLQC8epYI7MQKPY=)
2: TCYZGbVcLAj3Klqx0OsYXuEr3_c.crl (hash: NcnYDUbipZa0iqOHT3687svXUAlapXz+e9WWefORB+E=)
3: q0NSZKvbuZKPsTOzfMB4PKlh9Ys.roa (hash: jHJ+k8Z1pg8+GnjSpwYDBxeFhhnBTCkhDCcx/6sq1Z4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/c1d940-044d-49c4-a7a1-a0076679be60/1/TCYZGbVcLAj3Klqx0OsYXuEr3_c.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/c1d940-044d-49c4-a7a1-a0076679be60/1/TCYZGbVcLAj3Klqx0OsYXuEr3_c.mft
rsync://rpki.ripe.net/repository/DEFAULT/TCYZGbVcLAj3Klqx0OsYXuEr3_c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:da:d4:fd:72:bb:75:d4:3c:69:81:3a:d7:a5:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c261919b55c2c08f72a5ab1d0eb185ee12bdff7
Validity
Not Before: Jun 28 13:01:24 2025 GMT
Not After : Jun 29 13:01:24 2025 GMT
Subject: CN=a84e5100fac5584b57ebc95f322387147f0d2108
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5c:13:ac:6b:7e:07:61:e3:75:7e:4f:08:05:
b2:86:47:d0:32:65:b9:91:b4:a5:99:fc:7c:ec:bb:
f6:5a:69:61:f5:3c:b9:c0:b7:5f:40:1a:29:c9:5f:
c4:10:10:0f:ab:e3:04:d7:99:28:2c:d5:af:f5:42:
13:5d:3d:c2:2c:c9:c5:b0:21:5d:00:53:cb:43:3c:
76:21:58:c2:b6:f6:46:06:a7:e9:50:63:b7:d8:0b:
88:1b:b0:38:60:b1:40:d1:40:ab:b5:b4:98:46:48:
48:f8:95:10:f6:ba:7d:56:dc:f7:aa:0f:ba:3a:d2:
8d:8d:dd:49:9b:e1:0b:95:7f:d1:2a:39:83:60:52:
f9:86:bd:d3:94:a5:73:ad:6b:d8:c8:88:a0:86:6b:
a9:74:b8:c4:70:37:f7:88:65:02:17:26:21:83:ab:
16:8a:23:ca:79:2f:6f:2f:a9:5e:f8:48:68:0a:73:
5b:98:6a:34:b2:78:52:cd:53:be:a0:4c:8b:d5:38:
fe:08:f0:42:6f:ca:7d:40:64:bd:d6:7b:ff:5c:c0:
9c:46:2c:a3:be:ec:b6:4e:bd:66:38:b7:c8:f0:45:
01:fb:36:d1:31:7a:92:24:81:47:ab:06:f0:6a:4e:
97:cb:5d:9e:fb:90:09:f1:aa:d3:87:1d:ff:63:25:
91:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:4E:51:00:FA:C5:58:4B:57:EB:C9:5F:32:23:87:14:7F:0D:21:08
X509v3 Authority Key Identifier:
keyid:4C:26:19:19:B5:5C:2C:08:F7:2A:5A:B1:D0:EB:18:5E:E1:2B:DF:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TCYZGbVcLAj3Klqx0OsYXuEr3_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/c1d940-044d-49c4-a7a1-a0076679be60/1/TCYZGbVcLAj3Klqx0OsYXuEr3_c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/c1d940-044d-49c4-a7a1-a0076679be60/1/TCYZGbVcLAj3Klqx0OsYXuEr3_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:55:95:79:f6:ed:0a:5f:53:48:72:05:43:f2:f8:6e:6d:45:
b9:b2:e9:2e:27:6e:d9:59:9f:80:6c:12:fd:87:30:49:28:0d:
75:44:26:8d:f7:48:33:ec:73:64:07:f1:b2:09:1f:b0:d5:66:
f3:f9:c8:09:d2:31:6d:08:e6:f7:1a:f9:a2:24:e3:78:03:44:
81:ab:00:7e:99:4c:65:c8:30:e0:01:b7:6d:35:2b:8e:87:af:
30:d6:40:3a:45:81:42:e3:6b:01:71:27:37:61:42:ad:9b:f6:
ec:53:f6:94:0b:c5:02:e3:bf:8a:31:94:db:3d:7b:3c:37:01:
14:19:39:2c:93:98:26:b4:9d:cb:47:e5:81:46:11:6d:fb:93:
b9:e4:1e:23:97:77:64:6e:39:81:a8:3f:22:58:fb:98:0d:80:
cd:d0:60:0b:75:84:4e:b1:fb:20:62:4d:6c:ac:ee:c2:ff:3e:
b2:d1:c0:94:4e:18:3f:65:6d:b3:14:bb:eb:7e:49:85:2b:97:
cc:70:d2:22:e0:f6:08:d4:bb:8c:cc:65:7e:c8:58:3f:ac:6c:
ec:d7:be:05:fe:8a:ba:9c:48:59:9c:91:c6:cf:e5:ed:9a:94:
a0:2a:4a:df:fb:54:ec:03:b9:18:68:3a:17:94:e4:82:8e:88:
74:76:0e:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:43:44 2025 by rpki-client