Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/cce5ba-ff93-4438-a8e3-4a637c6d9938/1/TQ1ZQ8JANzDegY4xubX_HYwcnEc.mft
File: TQ1ZQ8JANzDegY4xubX_HYwcnEc.mft (raw, json)
Hash identifier: l2fOqOA57VrLot+Ha+tO24dIixnK7pfgRJMw3nklT7E=
Subject key identifier: 79:5E:CD:08:1D:39:AB:23:EF:F5:F5:12:5B:55:AF:2F:BE:C9:90:49
Authority key identifier: 4D:0D:59:43:C2:40:37:30:DE:81:8E:31:B9:B5:FF:1D:8C:1C:9C:47
Certificate issuer: /CN=4d0d5943c2403730de818e31b9b5ff1d8c1c9c47
Certificate serial: 0198D54DEC03F0943C4AC115F26D354BBAA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TQ1ZQ8JANzDegY4xubX_HYwcnEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/cce5ba-ff93-4438-a8e3-4a637c6d9938/1/TQ1ZQ8JANzDegY4xubX_HYwcnEc.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 05:01:50 +0000
Manifest this update: Sat 23 Aug 2025 05:01:50 +0000
Manifest next update: Sun 24 Aug 2025 05:01:50 +0000
Files and hashes: 1: TQ1ZQ8JANzDegY4xubX_HYwcnEc.crl (hash: BlpaewWjrAFgGNNVw7NuXavmMN9RzKB79KWasvi9Q7c=)
2: gtQnPoHQAssVploPdQKF3wMqPqg.roa (hash: oTvtYktXpzo6IvRkclIhI8X73gjSVVDXnm/5bjUENeo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/cce5ba-ff93-4438-a8e3-4a637c6d9938/1/TQ1ZQ8JANzDegY4xubX_HYwcnEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/cce5ba-ff93-4438-a8e3-4a637c6d9938/1/TQ1ZQ8JANzDegY4xubX_HYwcnEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/TQ1ZQ8JANzDegY4xubX_HYwcnEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:ec:03:f0:94:3c:4a:c1:15:f2:6d:35:4b:ba:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d0d5943c2403730de818e31b9b5ff1d8c1c9c47
Validity
Not Before: Aug 23 05:01:50 2025 GMT
Not After : Aug 24 05:01:50 2025 GMT
Subject: CN=795ecd081d39ab23eff5f5125b55af2fbec99049
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5a:06:50:3d:f4:3b:3f:d0:55:22:22:3c:60:
f6:87:ac:fd:11:51:6d:3e:47:11:03:98:64:1a:97:
e5:49:bd:d0:06:6e:0d:36:63:3d:88:af:e3:a2:ba:
d7:4c:02:e0:6d:61:bf:71:25:80:4d:f7:61:22:d8:
8a:ce:11:b4:df:00:bb:a0:a0:d3:21:bf:5f:0b:35:
f8:ea:6c:3c:b2:1a:46:ae:4c:51:cb:a8:20:66:ad:
70:7b:35:f0:b9:c6:69:3d:5e:28:19:8f:56:e1:04:
a6:25:c9:b8:87:e7:27:1b:31:c6:a6:54:d4:8c:97:
22:9b:71:dd:ad:b2:ff:e6:35:1f:03:e0:95:f7:dd:
87:82:58:1b:d3:6b:fc:d2:23:7c:f3:0c:91:0c:d9:
78:ad:48:87:23:76:e6:42:d6:0c:98:ad:86:d8:ae:
14:09:07:e0:12:ad:e8:91:33:70:14:5f:2f:12:11:
de:0f:7a:96:ce:19:d1:61:ed:7f:d5:d7:43:f9:6a:
19:12:c0:c2:dd:ec:53:bb:85:f6:c2:4e:17:65:92:
dc:a9:4e:b8:c9:c6:ab:72:8c:cd:84:25:22:00:05:
b4:90:ad:37:a0:66:0b:c5:da:f9:64:66:85:31:b8:
0c:ba:4d:e2:b0:9e:2e:ca:0a:a2:a0:06:ff:ac:69:
5a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:5E:CD:08:1D:39:AB:23:EF:F5:F5:12:5B:55:AF:2F:BE:C9:90:49
X509v3 Authority Key Identifier:
keyid:4D:0D:59:43:C2:40:37:30:DE:81:8E:31:B9:B5:FF:1D:8C:1C:9C:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TQ1ZQ8JANzDegY4xubX_HYwcnEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/cce5ba-ff93-4438-a8e3-4a637c6d9938/1/TQ1ZQ8JANzDegY4xubX_HYwcnEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/cce5ba-ff93-4438-a8e3-4a637c6d9938/1/TQ1ZQ8JANzDegY4xubX_HYwcnEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:1b:30:e0:9c:08:da:bc:9a:04:93:ac:80:36:34:bc:6e:a2:
cc:b0:ef:2b:b4:0a:74:ec:25:4d:8d:a9:0f:e3:34:a9:56:01:
b4:c8:46:c5:68:97:42:99:ad:49:f1:6f:38:38:c7:2d:13:7c:
94:a2:31:ba:5e:d6:fd:2d:20:fb:7e:fe:fc:cb:37:3a:4b:0d:
01:40:da:e4:ef:d8:de:5f:50:40:fc:11:c9:ac:f4:91:7b:54:
0f:2e:e1:33:15:c2:bb:13:61:73:54:64:69:5f:bc:46:e8:e9:
81:f8:db:01:46:fc:95:8d:3d:d9:35:9a:4e:db:26:86:3d:f9:
95:59:10:62:0d:05:f4:4a:2a:66:86:68:12:9a:1e:dc:46:14:
e7:82:54:5c:98:00:8f:c3:31:21:d7:35:c0:d8:e7:b0:ac:75:
19:23:5c:5b:21:90:19:70:ea:3a:cf:0d:25:11:30:36:72:b4:
57:d9:34:87:fa:3c:8c:b5:db:2d:44:a4:80:2d:da:4d:13:51:
d3:f5:07:6d:2d:e8:b9:f2:8b:18:77:2d:d8:f1:ed:e7:80:b3:
2a:92:58:f6:a5:29:24:fb:24:44:eb:87:9a:bb:34:95:f9:9b:
3c:59:c4:7f:6a:72:e7:90:af:56:0a:12:0c:c5:e1:06:a6:ed:
52:c6:6a:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:33:57 2025 by rpki-client