Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/b5fb58-928c-438f-bcef-858f8aca323f/1/TJ--R1YCj6QYejmVlfrGXDwcQ8Y.mft
File: TJ--R1YCj6QYejmVlfrGXDwcQ8Y.mft (raw, json)
Hash identifier: pE++ulYvLwj7zoi5XjnthBaYyOygxeQnpZZlTOGeAf8=
Subject key identifier: AC:5A:E8:6E:7A:91:35:25:78:52:12:B8:16:1E:A7:E3:72:42:DC:E3
Authority key identifier: 4C:9F:BE:47:56:02:8F:A4:18:7A:39:95:95:FA:C6:5C:3C:1C:43:C6
Certificate issuer: /CN=4c9fbe4756028fa4187a399595fac65c3c1c43c6
Certificate serial: 0198D54E2355B4268575E7A2883D8DBFDFA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TJ--R1YCj6QYejmVlfrGXDwcQ8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/b5fb58-928c-438f-bcef-858f8aca323f/1/TJ--R1YCj6QYejmVlfrGXDwcQ8Y.mft
Manifest number: 0891
Signing time: Sat 23 Aug 2025 05:02:04 +0000
Manifest this update: Sat 23 Aug 2025 05:02:04 +0000
Manifest next update: Sun 24 Aug 2025 05:02:04 +0000
Files and hashes: 1: TJ--R1YCj6QYejmVlfrGXDwcQ8Y.crl (hash: vbeRe4ayLNeX0QWZ/ziLIyJFa5FLq6szrdPs1A1G2j8=)
2: jkZUIqdvougoYWTFFIYTmQ_0c3I.roa (hash: FvJzMAch2URVowys51R40ZrFG4sKpVwuQwZnFuBLSQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/b5fb58-928c-438f-bcef-858f8aca323f/1/TJ--R1YCj6QYejmVlfrGXDwcQ8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/b5fb58-928c-438f-bcef-858f8aca323f/1/TJ--R1YCj6QYejmVlfrGXDwcQ8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/TJ--R1YCj6QYejmVlfrGXDwcQ8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:23:55:b4:26:85:75:e7:a2:88:3d:8d:bf:df:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c9fbe4756028fa4187a399595fac65c3c1c43c6
Validity
Not Before: Aug 23 05:02:04 2025 GMT
Not After : Aug 24 05:02:04 2025 GMT
Subject: CN=ac5ae86e7a913525785212b8161ea7e37242dce3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:73:7c:24:d0:f9:26:df:de:f4:1c:ed:1e:d7:
ec:c8:ad:b2:3f:be:72:ac:23:62:a5:d5:c7:19:83:
93:f3:f0:75:3b:b0:3a:28:5d:da:a7:38:8c:cb:b1:
02:5c:5d:0a:02:ed:ff:e0:ad:72:98:c0:0d:8b:b0:
e6:3c:d4:ee:bb:3d:57:ee:eb:65:72:ad:37:a6:38:
3d:0a:9e:1d:0f:bc:96:aa:ec:95:74:35:1f:6a:5a:
73:cf:70:f5:39:08:ae:10:ce:70:ce:95:51:7b:0e:
d4:32:b2:e4:ae:ba:cd:4d:ea:65:19:7e:56:d9:e2:
c4:e6:4d:04:5d:cb:a8:0e:e0:47:0f:87:e1:ee:87:
5e:4f:31:25:f8:c4:07:d8:30:6f:b8:4f:73:4a:16:
59:a0:90:3c:0c:1c:05:c8:d3:a1:f0:2d:6f:16:6f:
75:56:04:2a:c2:98:6f:b1:b3:bf:1b:a8:dc:a9:26:
74:ba:dd:cd:a9:38:64:3f:8e:51:48:20:a1:51:58:
8b:55:b5:9b:6c:e9:72:d1:bf:e7:cf:1a:40:b5:79:
a5:69:af:59:52:c1:da:4e:66:ea:90:c7:1d:23:2a:
a5:ec:40:3f:29:d4:e4:7d:8b:7e:07:c5:00:ad:c7:
6c:c8:ee:67:a0:e1:91:29:f2:be:24:c6:c2:3b:7d:
00:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:5A:E8:6E:7A:91:35:25:78:52:12:B8:16:1E:A7:E3:72:42:DC:E3
X509v3 Authority Key Identifier:
keyid:4C:9F:BE:47:56:02:8F:A4:18:7A:39:95:95:FA:C6:5C:3C:1C:43:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TJ--R1YCj6QYejmVlfrGXDwcQ8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/b5fb58-928c-438f-bcef-858f8aca323f/1/TJ--R1YCj6QYejmVlfrGXDwcQ8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/b5fb58-928c-438f-bcef-858f8aca323f/1/TJ--R1YCj6QYejmVlfrGXDwcQ8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:2d:23:78:2d:69:eb:9a:21:ca:c3:ca:07:24:0c:12:e2:0a:
17:54:a8:cb:e0:8d:3f:18:87:51:ba:af:4a:65:51:bf:34:f6:
32:13:64:d7:e1:b6:36:d1:1c:eb:d2:e4:2c:40:f3:bb:f3:2a:
02:b6:9a:3c:dd:78:c7:36:13:3e:c8:3e:0c:27:dc:86:33:7d:
74:7b:d0:02:d0:85:fb:68:e5:ed:a5:66:f3:08:0e:f3:3d:df:
70:6d:58:41:6e:e5:1a:fb:8a:96:7c:f5:17:bd:be:50:bc:69:
dc:4f:c4:bd:d4:d2:a3:7d:77:41:a5:df:90:64:33:ca:29:44:
94:e1:f2:73:ef:46:b5:66:a9:fa:a0:9d:8b:bf:81:98:c9:cd:
43:d6:ac:1f:92:8d:8f:da:10:98:4d:49:f3:d7:93:89:60:9c:
04:33:f4:48:41:14:1c:fd:b1:65:ed:27:57:91:da:26:fa:0b:
ba:3a:d7:97:d0:42:0c:f5:c6:6d:8f:46:9b:3a:db:cd:1c:36:
d4:18:e1:34:eb:16:e4:e8:a9:fa:06:0a:53:48:f2:a8:03:27:
84:82:9b:ca:96:7a:4b:25:d6:a2:50:2f:a9:ac:34:43:10:43:
80:e3:c4:94:cd:ad:dc:89:35:24:db:17:a4:32:2c:1b:08:35:
cb:0c:31:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:20 2025 by rpki-client