Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/d1f89c-1909-4995-8dd1-a1056f589354/1/tyC-m1eyWx7aP4EJLgC0U4vosp0.mft
File: tyC-m1eyWx7aP4EJLgC0U4vosp0.mft (raw, json)
Hash identifier: 2bWEIefC3xLuqrJpafiXrmyUWUcG/7Vggy7+NSJcYig=
Subject key identifier: A4:7E:36:3A:5D:BE:34:CF:7A:4C:D0:07:5F:8B:4A:D1:34:17:21:42
Authority key identifier: B7:20:BE:9B:57:B2:5B:1E:DA:3F:81:09:2E:00:B4:53:8B:E8:B2:9D
Certificate issuer: /CN=b720be9b57b25b1eda3f81092e00b4538be8b29d
Certificate serial: 0199FDD9C473E01EE30F2BA903A05C908D2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tyC-m1eyWx7aP4EJLgC0U4vosp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/d1f89c-1909-4995-8dd1-a1056f589354/1/tyC-m1eyWx7aP4EJLgC0U4vosp0.mft
Manifest number: 166F
Signing time: Sun 19 Oct 2025 19:02:11 +0000
Manifest this update: Sun 19 Oct 2025 19:02:11 +0000
Manifest next update: Mon 20 Oct 2025 19:02:11 +0000
Files and hashes: 1: tyC-m1eyWx7aP4EJLgC0U4vosp0.crl (hash: qj6KzDJ15INuKADXIcp9ajfe3o9KQK+LfV57li5120M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/d1f89c-1909-4995-8dd1-a1056f589354/1/tyC-m1eyWx7aP4EJLgC0U4vosp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/d1f89c-1909-4995-8dd1-a1056f589354/1/tyC-m1eyWx7aP4EJLgC0U4vosp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/tyC-m1eyWx7aP4EJLgC0U4vosp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:c4:73:e0:1e:e3:0f:2b:a9:03:a0:5c:90:8d:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b720be9b57b25b1eda3f81092e00b4538be8b29d
Validity
Not Before: Oct 19 19:02:11 2025 GMT
Not After : Oct 20 19:02:11 2025 GMT
Subject: CN=a47e363a5dbe34cf7a4cd0075f8b4ad134172142
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:7d:85:77:c9:13:2d:b1:aa:49:ac:81:9a:96:
e3:6c:40:56:f5:c9:01:73:cd:19:65:32:6f:42:66:
03:76:26:d7:dd:82:c4:b8:00:34:ce:02:4e:29:b6:
2a:cf:1b:2c:57:26:7b:ad:97:58:92:25:aa:e7:fb:
1a:72:fe:ca:c8:8a:5a:b2:f2:ec:52:78:70:a1:6e:
74:f1:2b:19:3c:00:f4:96:7c:a7:ec:55:0b:34:d3:
cc:21:98:69:de:fd:38:af:aa:9a:13:c4:8a:03:6c:
69:e7:ee:37:2d:1b:eb:44:35:dd:77:82:18:5b:63:
85:d9:52:06:df:67:49:5a:02:e9:2d:5c:e0:23:f0:
53:42:ac:2a:4b:66:be:74:01:3e:d0:fa:b9:52:4b:
41:ca:d8:0d:b9:63:a1:2e:08:e0:e2:7b:cb:59:d1:
18:5a:42:33:21:fb:81:c6:8a:da:56:0a:85:08:4b:
94:5c:bf:75:fa:75:d6:8f:41:78:ce:05:cb:86:0a:
97:6e:8d:ec:eb:f5:23:13:39:30:e3:8b:9d:55:70:
ce:26:6b:33:0e:f0:94:d2:f0:da:f5:61:4f:1b:c4:
58:98:66:be:c6:23:2a:a6:0b:29:7f:50:db:10:85:
8b:5b:2d:2f:fe:93:d2:cb:75:7b:c7:25:66:ca:4c:
04:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:7E:36:3A:5D:BE:34:CF:7A:4C:D0:07:5F:8B:4A:D1:34:17:21:42
X509v3 Authority Key Identifier:
keyid:B7:20:BE:9B:57:B2:5B:1E:DA:3F:81:09:2E:00:B4:53:8B:E8:B2:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tyC-m1eyWx7aP4EJLgC0U4vosp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/d1f89c-1909-4995-8dd1-a1056f589354/1/tyC-m1eyWx7aP4EJLgC0U4vosp0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/d1f89c-1909-4995-8dd1-a1056f589354/1/tyC-m1eyWx7aP4EJLgC0U4vosp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:c3:e6:ba:7e:86:eb:db:84:a6:ad:9b:f1:e8:f7:c2:bb:3e:
e2:ad:c4:2e:47:03:c9:a8:c3:c7:f4:f2:65:af:0e:62:54:0e:
1a:11:2b:86:2f:6b:c9:d2:90:8f:80:7c:6b:1a:25:74:2e:b3:
5c:b9:41:17:5e:82:23:00:92:46:ae:08:e8:8b:57:17:31:4a:
3f:9f:f8:d9:71:a2:45:36:86:e2:b1:d9:5a:5c:e6:46:7b:8b:
fe:88:72:1c:4a:36:1b:fd:f3:d6:5a:4a:d4:aa:fe:cd:f3:2f:
22:f6:66:df:11:dd:63:f3:3d:11:12:9d:f9:24:b9:9a:74:59:
5c:82:69:21:22:70:18:9f:b2:bd:99:0d:d5:e3:55:4c:ee:68:
92:4e:e1:7d:ec:08:a5:ca:08:a1:74:8c:fe:5d:a3:d2:15:32:
0d:b9:e8:9d:fc:83:21:65:94:39:d6:42:c7:80:3f:4d:fc:77:
c9:3a:3e:5e:55:e2:e4:16:b7:be:72:9e:a4:dd:41:a1:20:8d:
53:3b:97:df:8f:e7:4e:77:98:a7:08:0b:5d:8e:22:49:4f:50:
a3:7d:b0:fc:9a:10:e1:1e:e2:6f:72:b7:6e:4b:2c:7e:b5:08:
1c:9a:30:47:ec:54:14:42:25:61:08:10:80:7d:a3:04:aa:f9:
04:3b:f1:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:29:51 2025 by rpki-client