Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/c1d940-044d-49c4-a7a1-a0076679be60/1/TCYZGbVcLAj3Klqx0OsYXuEr3_c.mft
File: TCYZGbVcLAj3Klqx0OsYXuEr3_c.mft (raw, json)
Hash identifier: mYsU0WZVv/sZKAn5HISOSdHS0bh8XhIb1It3NNPH7p8=
Subject key identifier: 24:18:47:C2:D6:4B:0B:BA:FD:EA:88:E5:59:FB:B4:DE:EE:F6:08:80
Authority key identifier: 4C:26:19:19:B5:5C:2C:08:F7:2A:5A:B1:D0:EB:18:5E:E1:2B:DF:F7
Certificate issuer: /CN=4c261919b55c2c08f72a5ab1d0eb185ee12bdff7
Certificate serial: 0198D4737CAD1D4DFE8E016866C790516BBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TCYZGbVcLAj3Klqx0OsYXuEr3_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/c1d940-044d-49c4-a7a1-a0076679be60/1/TCYZGbVcLAj3Klqx0OsYXuEr3_c.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 01:03:14 +0000
Manifest this update: Sat 23 Aug 2025 01:03:14 +0000
Manifest next update: Sun 24 Aug 2025 01:03:14 +0000
Files and hashes: 1: 35EW9mUAS2KwaYDPUieiupydDBY.roa (hash: V/BNRylyiFUELWt9i2pyrF3sOU/lNLQC8epYI7MQKPY=)
2: TCYZGbVcLAj3Klqx0OsYXuEr3_c.crl (hash: GcDBxGdfn0mBMcWQhtQC1/v7/nDHtZAYbsx+FRXOQEk=)
3: q0NSZKvbuZKPsTOzfMB4PKlh9Ys.roa (hash: jHJ+k8Z1pg8+GnjSpwYDBxeFhhnBTCkhDCcx/6sq1Z4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/c1d940-044d-49c4-a7a1-a0076679be60/1/TCYZGbVcLAj3Klqx0OsYXuEr3_c.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/c1d940-044d-49c4-a7a1-a0076679be60/1/TCYZGbVcLAj3Klqx0OsYXuEr3_c.mft
rsync://rpki.ripe.net/repository/DEFAULT/TCYZGbVcLAj3Klqx0OsYXuEr3_c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:7c:ad:1d:4d:fe:8e:01:68:66:c7:90:51:6b:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c261919b55c2c08f72a5ab1d0eb185ee12bdff7
Validity
Not Before: Aug 23 01:03:14 2025 GMT
Not After : Aug 24 01:03:14 2025 GMT
Subject: CN=241847c2d64b0bbafdea88e559fbb4deeef60880
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:43:69:d1:be:5b:73:a2:ae:91:bf:ca:3e:dc:
c2:73:47:a8:a1:00:c4:2c:e7:12:31:3d:c6:90:7e:
ce:d6:0a:75:78:e5:a3:83:ac:65:17:b2:da:51:c1:
11:40:08:78:c8:f9:ea:63:53:82:ce:1b:ed:e8:a2:
86:d7:66:4e:c9:47:ee:97:2c:54:e2:d1:87:cb:33:
dc:06:bf:ea:38:3c:7c:aa:c4:44:a8:f8:ac:e8:03:
29:7d:73:bf:35:ee:82:29:fc:f9:7c:f6:5d:8a:98:
c7:b9:83:5c:97:8b:91:0c:ca:a7:10:87:ce:60:cd:
2e:e8:76:65:4f:75:4e:1d:91:84:8a:db:1d:48:45:
8f:41:55:31:6a:60:60:da:f7:96:69:d9:b0:62:27:
0d:68:ae:8e:34:f6:32:f1:7a:85:d7:dd:30:2e:d6:
c4:f8:b9:93:51:63:e3:af:dc:f3:79:df:81:7c:a5:
3d:bc:5a:ac:d2:dc:d9:86:bb:3e:98:12:65:13:ad:
22:eb:98:9d:c3:28:7c:46:e9:f2:8b:5d:09:ff:20:
0a:64:e8:cc:51:88:2a:37:fa:e9:50:a9:96:0f:fe:
10:db:1e:ef:96:9d:3b:2f:2d:e0:e2:43:ee:10:7b:
42:d9:3f:61:75:f3:55:dd:08:b0:cf:3f:24:fb:a9:
0c:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:18:47:C2:D6:4B:0B:BA:FD:EA:88:E5:59:FB:B4:DE:EE:F6:08:80
X509v3 Authority Key Identifier:
keyid:4C:26:19:19:B5:5C:2C:08:F7:2A:5A:B1:D0:EB:18:5E:E1:2B:DF:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TCYZGbVcLAj3Klqx0OsYXuEr3_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/c1d940-044d-49c4-a7a1-a0076679be60/1/TCYZGbVcLAj3Klqx0OsYXuEr3_c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/c1d940-044d-49c4-a7a1-a0076679be60/1/TCYZGbVcLAj3Klqx0OsYXuEr3_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:12:f3:f7:66:df:31:89:ab:e0:73:60:9c:b8:40:7a:ea:55:
ee:86:fb:9f:1d:17:de:e5:83:fc:16:f3:30:8e:c4:61:e0:0f:
ca:0c:9e:8c:bb:47:91:fa:f4:13:f1:8d:04:03:a8:e1:43:12:
59:fa:cc:d0:12:d3:39:a0:b7:78:db:d2:67:ca:41:12:0b:10:
48:2a:66:12:ce:6b:6f:04:6b:6d:4f:0f:2e:db:26:95:75:09:
36:7c:60:ea:4e:d2:bc:d5:ab:8f:b8:59:3a:4f:db:9c:e5:fd:
0e:1c:b1:34:85:4a:f0:38:41:b3:fc:bd:db:ac:b7:00:23:99:
a6:2e:e4:ce:53:d3:f7:74:9b:aa:3f:ee:f4:d8:73:bc:91:32:
1d:a7:b3:dc:d4:2b:05:9c:9b:5f:b5:0a:fd:5d:93:d7:06:4d:
0e:b5:2d:a2:8c:4e:e6:21:cd:53:cd:77:7c:c2:fe:c0:84:29:
3e:86:b1:49:57:13:88:b2:d9:ff:9c:14:e5:fa:af:2b:53:8a:
43:c8:41:5b:a4:af:9a:69:0c:26:20:47:1c:f5:5c:cb:60:78:
31:ea:b6:6d:a9:76:11:95:9d:ac:be:ba:da:23:ed:c5:87:5d:
8a:cd:46:83:0e:5b:d0:03:23:d0:71:83:07:a6:9d:4b:82:48:
21:2a:f4:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:28:58 2025 by rpki-client