Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/1e1ac6-fcd6-4ae8-ad77-51e4bba6bf5b/1/Ty87yZp5UD4JdXR36O9kPhGIbIs.mft
File: Ty87yZp5UD4JdXR36O9kPhGIbIs.mft (raw, json)
Hash identifier: BRJt5naW1DYHlmdvmfdysPfsaFLA80a8A7iVpWAH5Rw=
Subject key identifier: F5:75:FB:9B:12:35:29:5C:AD:0B:BD:7B:3D:0A:38:6B:92:76:48:FE
Authority key identifier: 4F:2F:3B:C9:9A:79:50:3E:09:75:74:77:E8:EF:64:3E:11:88:6C:8B
Certificate issuer: /CN=4f2f3bc99a79503e09757477e8ef643e11886c8b
Certificate serial: 0198D4746E2CCC3420BB495C168972CDE370
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ty87yZp5UD4JdXR36O9kPhGIbIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/1e1ac6-fcd6-4ae8-ad77-51e4bba6bf5b/1/Ty87yZp5UD4JdXR36O9kPhGIbIs.mft
Manifest number: 14FA
Signing time: Sat 23 Aug 2025 01:04:16 +0000
Manifest this update: Sat 23 Aug 2025 01:04:16 +0000
Manifest next update: Sun 24 Aug 2025 01:04:16 +0000
Files and hashes: 1: DmY4OlpSGtRwQGNkVI6pwwKmQOM.roa (hash: QsmPHxvFnUbBb8Hdz5mPLnRJfO8cxjGYjuC9mmKC/hY=)
2: Ty87yZp5UD4JdXR36O9kPhGIbIs.crl (hash: Y6MGudmIsmw2T8pfyTi28E4RdmZdUUuw/R2o9HS78pg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/1e1ac6-fcd6-4ae8-ad77-51e4bba6bf5b/1/Ty87yZp5UD4JdXR36O9kPhGIbIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/1e1ac6-fcd6-4ae8-ad77-51e4bba6bf5b/1/Ty87yZp5UD4JdXR36O9kPhGIbIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ty87yZp5UD4JdXR36O9kPhGIbIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:74:6e:2c:cc:34:20:bb:49:5c:16:89:72:cd:e3:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f2f3bc99a79503e09757477e8ef643e11886c8b
Validity
Not Before: Aug 23 01:04:16 2025 GMT
Not After : Aug 24 01:04:16 2025 GMT
Subject: CN=f575fb9b1235295cad0bbd7b3d0a386b927648fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ac:28:7a:80:b8:07:32:53:da:a0:0c:62:5c:
4a:32:c3:a5:8a:38:b1:39:ee:33:67:26:0d:23:31:
24:1e:4c:90:6a:12:45:24:e4:0e:7a:21:df:f4:17:
8e:b1:da:7f:b2:d1:16:e3:40:a0:ab:9a:15:e7:d0:
63:2d:30:76:c9:40:60:5d:13:b5:dd:fe:92:ad:96:
60:db:20:64:fd:ab:0a:73:f7:4d:c0:c7:89:5c:9d:
d1:e0:f5:4f:85:cb:c4:f7:60:7f:df:4d:a9:f0:ae:
73:d3:cf:2f:4a:1b:bc:54:c7:e4:a0:10:3f:ba:29:
45:35:7e:36:de:15:cd:42:41:9f:8b:ee:e9:03:78:
f9:96:7d:a6:50:75:c7:03:c2:2c:3e:23:1c:ec:02:
c0:c5:d7:c6:cb:10:52:0a:df:4c:c1:33:9f:27:ce:
02:fd:6d:e7:f5:33:34:61:da:ac:a6:89:fd:d0:d4:
ef:3e:98:ee:fb:ed:51:af:2d:80:66:61:63:68:72:
55:ba:59:43:99:7a:d1:ca:17:82:55:35:1d:3d:32:
dd:9e:eb:77:a5:7d:a2:66:6c:55:5a:95:b4:81:a3:
ef:a1:40:d9:4c:0c:d9:60:e5:a9:9a:18:bc:f0:8c:
0e:0d:5b:18:02:aa:50:e1:a1:2d:37:47:57:e4:20:
24:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:75:FB:9B:12:35:29:5C:AD:0B:BD:7B:3D:0A:38:6B:92:76:48:FE
X509v3 Authority Key Identifier:
keyid:4F:2F:3B:C9:9A:79:50:3E:09:75:74:77:E8:EF:64:3E:11:88:6C:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ty87yZp5UD4JdXR36O9kPhGIbIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/1e1ac6-fcd6-4ae8-ad77-51e4bba6bf5b/1/Ty87yZp5UD4JdXR36O9kPhGIbIs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/1e1ac6-fcd6-4ae8-ad77-51e4bba6bf5b/1/Ty87yZp5UD4JdXR36O9kPhGIbIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:23:81:ff:71:17:5d:36:6d:8c:fa:38:4e:0e:c5:cb:64:bd:
cc:50:e6:b7:1f:bc:a8:11:ec:b6:6b:25:32:d4:95:55:29:fb:
58:33:52:b5:fa:da:1c:06:24:a4:b8:c5:95:41:ce:97:fb:57:
7d:e5:6b:9d:a1:91:95:1c:69:fa:98:5d:e0:b0:a5:15:2e:81:
79:b3:59:e9:c2:10:d8:1b:e7:7b:86:56:44:01:38:34:fe:62:
2d:f3:96:db:ec:3f:69:0e:30:84:dc:f7:41:d6:22:e8:6b:f2:
86:6e:9a:4a:cd:42:f3:8d:bb:97:a4:00:f6:3e:dc:76:5d:0e:
29:98:4c:89:bc:44:c5:ab:6c:83:a2:22:5a:57:dc:1a:24:10:
60:b9:5c:58:e7:35:44:d4:7e:60:96:5d:82:a9:31:4e:b5:fe:
a3:f8:1d:9c:71:b8:6e:24:ab:74:48:95:06:c7:6d:56:9f:14:
e6:94:64:2f:dd:76:71:93:d4:a8:b4:e5:0d:23:1d:5a:ca:21:
fa:c6:80:ea:f3:78:03:5a:59:0a:88:f6:47:cc:5b:6f:af:3e:
14:9d:63:fa:e6:d4:43:b0:d3:d5:fb:56:0b:1a:d2:be:a2:21:
65:f0:77:ea:79:f3:04:af:c7:ab:73:64:43:bd:86:45:28:be:
9c:a4:81:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:49:16 2025 by rpki-client