Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/bbedbe-8821-4bd8-bbcc-3adf9b61347d/1/TPzH4BfCyfdjLacpNHa7fkowNlo.mft
File: TPzH4BfCyfdjLacpNHa7fkowNlo.mft (raw, json)
Hash identifier: DGAq49tz3J1I6qOMYh3iijeNfeyR2+RO5FDXYK8SP/I=
Subject key identifier: 5B:94:1F:6F:4D:6C:24:CF:DD:30:6D:C1:27:AF:7A:C3:55:49:7A:99
Authority key identifier: 4C:FC:C7:E0:17:C2:C9:F7:63:2D:A7:29:34:76:BB:7E:4A:30:36:5A
Certificate issuer: /CN=4cfcc7e017c2c9f7632da7293476bb7e4a30365a
Certificate serial: 0198D6CDD03B1483F51C6812746591B525FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TPzH4BfCyfdjLacpNHa7fkowNlo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/bbedbe-8821-4bd8-bbcc-3adf9b61347d/1/TPzH4BfCyfdjLacpNHa7fkowNlo.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 12:01:09 +0000
Manifest this update: Sat 23 Aug 2025 12:01:09 +0000
Manifest next update: Sun 24 Aug 2025 12:01:09 +0000
Files and hashes: 1: OQKKfCP8SjNyLo9484epfP4wbRU.roa (hash: GIFqkdSx0szCVRVxH/rU2b7Y/JXh/nneSVo+VlwXpJY=)
2: TPzH4BfCyfdjLacpNHa7fkowNlo.crl (hash: yyCpjqQOyW0BIa0JF4HflJsZnspY1oxnCSZ2GmbnGZM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/bbedbe-8821-4bd8-bbcc-3adf9b61347d/1/TPzH4BfCyfdjLacpNHa7fkowNlo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/bbedbe-8821-4bd8-bbcc-3adf9b61347d/1/TPzH4BfCyfdjLacpNHa7fkowNlo.mft
rsync://rpki.ripe.net/repository/DEFAULT/TPzH4BfCyfdjLacpNHa7fkowNlo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:d0:3b:14:83:f5:1c:68:12:74:65:91:b5:25:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cfcc7e017c2c9f7632da7293476bb7e4a30365a
Validity
Not Before: Aug 23 12:01:09 2025 GMT
Not After : Aug 24 12:01:09 2025 GMT
Subject: CN=5b941f6f4d6c24cfdd306dc127af7ac355497a99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:14:20:9d:d3:0d:1d:88:0e:e2:83:df:01:4e:
1d:40:1f:34:93:cf:96:fc:c2:99:7b:eb:85:cc:03:
aa:2e:a9:dc:cf:1c:1d:a9:24:6f:44:13:ba:40:b0:
ff:be:63:a9:70:52:e3:63:ac:33:70:b5:03:fb:af:
c6:71:51:b7:ee:e2:c0:e9:aa:23:bc:5f:48:4b:ca:
10:47:4f:8e:5a:08:84:4a:d1:6f:c4:75:87:4d:7e:
5e:1a:11:ce:70:79:db:46:1b:e0:42:d6:99:7e:fd:
20:22:89:cf:70:35:b7:16:0f:9b:7a:34:bd:70:7d:
2e:b3:f4:a1:7b:69:36:72:ee:8c:5b:22:57:b5:e6:
f8:a1:1f:3b:ea:d1:7e:32:f9:26:01:40:14:82:97:
4d:20:71:0e:02:b8:1f:0a:c9:1e:f2:43:7a:f2:5d:
30:b6:7d:69:82:d8:a6:c8:d6:91:e8:57:fe:9b:f3:
58:b3:58:e1:b4:21:d7:7c:67:51:4c:fb:90:40:14:
39:7d:04:6f:4e:9c:f6:a1:e4:60:2e:29:5f:ef:63:
55:a5:aa:c7:41:f1:e4:68:9b:5c:ad:14:19:d9:88:
ae:4c:fc:2e:71:bd:37:c1:2b:89:df:ed:49:aa:ee:
3a:c3:9d:94:66:80:3d:52:df:cb:00:3a:b8:b9:83:
08:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:94:1F:6F:4D:6C:24:CF:DD:30:6D:C1:27:AF:7A:C3:55:49:7A:99
X509v3 Authority Key Identifier:
keyid:4C:FC:C7:E0:17:C2:C9:F7:63:2D:A7:29:34:76:BB:7E:4A:30:36:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TPzH4BfCyfdjLacpNHa7fkowNlo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/bbedbe-8821-4bd8-bbcc-3adf9b61347d/1/TPzH4BfCyfdjLacpNHa7fkowNlo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/bbedbe-8821-4bd8-bbcc-3adf9b61347d/1/TPzH4BfCyfdjLacpNHa7fkowNlo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:53:8d:21:89:26:14:d0:82:81:f7:58:84:74:e0:6d:8a:e0:
d5:a1:68:b8:0a:8d:74:0b:5d:7a:e9:01:b7:fb:d2:0a:a1:3a:
2d:4c:59:e7:83:bf:0b:bb:44:7c:1a:1d:1e:d9:f0:51:a4:90:
7c:98:a0:bd:21:30:00:d1:b4:3b:d7:18:9f:0b:ee:b2:87:6c:
b2:1c:58:22:6f:be:db:4e:b1:61:70:0a:26:a9:8a:8a:69:87:
76:36:23:48:4d:c1:4e:30:59:ea:ff:0c:0b:39:d9:e7:52:b6:
25:72:28:cb:92:28:0e:81:1b:80:fb:c2:31:cf:7d:73:c1:f6:
26:02:a2:ba:44:ca:4a:10:ac:78:04:54:90:4a:eb:53:e9:2f:
07:0a:29:ba:a6:22:61:ca:e3:05:f9:f2:f8:0a:e8:7e:c8:4b:
c8:d6:e4:53:d3:4b:e2:6d:80:30:9a:42:e2:ca:2f:d2:55:fe:
ef:6a:a8:b8:b5:91:04:75:9d:b9:8b:63:c7:12:33:d1:fc:17:
f7:b9:67:65:89:9b:da:75:9b:d7:59:c2:7a:45:d9:17:3e:eb:
a9:1a:d0:50:a1:6f:d9:cb:8b:46:1e:87:30:87:23:ea:cb:44:
9f:91:67:87:7f:5c:ee:96:ed:55:b4:ee:90:43:08:92:02:bf:
25:ab:e4:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:24:45 2025 by rpki-client