Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/790099-2f90-43bc-bf0d-6d5496cb1a42/1/TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.mft
File: TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.mft (raw, json)
Hash identifier: PNBiZ1STelw0dtbE4aCcOG/VPEqG9xwC0rjuCgCFOi4=
Subject key identifier: 95:98:53:EA:FE:08:EB:B2:0D:7E:2D:E9:B6:E6:E2:FA:27:2A:A9:F2
Authority key identifier: 4D:8C:0C:A9:C2:1F:A1:9D:C0:59:32:BE:FD:90:60:B1:60:ED:C5:C1
Certificate issuer: /CN=4d8c0ca9c21fa19dc05932befd9060b160edc5c1
Certificate serial: 0198D515AE9DCA4E7D6D3C12CCDA64CA1D23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/790099-2f90-43bc-bf0d-6d5496cb1a42/1/TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.mft
Manifest number: 1646
Signing time: Sat 23 Aug 2025 04:00:24 +0000
Manifest this update: Sat 23 Aug 2025 04:00:24 +0000
Manifest next update: Sun 24 Aug 2025 04:00:24 +0000
Files and hashes: 1: TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.crl (hash: 5LKymN1pVwBPUfePgL+aqf7oi8gHGCipYHiZJLbaKDo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/790099-2f90-43bc-bf0d-6d5496cb1a42/1/TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/790099-2f90-43bc-bf0d-6d5496cb1a42/1/TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.mft
rsync://rpki.ripe.net/repository/DEFAULT/TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:ae:9d:ca:4e:7d:6d:3c:12:cc:da:64:ca:1d:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d8c0ca9c21fa19dc05932befd9060b160edc5c1
Validity
Not Before: Aug 23 04:00:24 2025 GMT
Not After : Aug 24 04:00:24 2025 GMT
Subject: CN=959853eafe08ebb20d7e2de9b6e6e2fa272aa9f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:82:e5:78:f9:cf:27:71:33:b1:48:dc:a4:0d:
53:7d:eb:f2:30:0c:b3:d6:a0:39:7f:3b:1a:1a:58:
17:cb:28:1e:dc:6f:95:fa:4a:47:96:55:79:72:19:
2d:31:2b:f1:5b:3e:f8:45:c3:96:f8:09:62:86:3a:
c8:24:02:d8:68:8a:b7:0c:8e:96:67:2b:6e:75:dc:
35:94:f6:d5:90:ee:e8:0e:c3:5e:c5:c8:49:8d:31:
36:33:8f:e6:0c:f2:64:51:a0:1f:d3:3c:0a:97:e0:
5d:78:a2:3a:16:68:6a:0b:da:88:9d:4a:5b:b3:37:
ae:20:ae:02:ee:a2:87:98:34:e9:2f:18:63:4f:e1:
2d:97:90:ad:33:91:cf:ba:e1:68:d9:4c:3c:4d:0f:
b6:18:40:1e:7f:b4:d6:63:d8:14:24:e9:85:bc:42:
9c:83:b1:be:42:6e:ab:a5:6e:bb:c8:ec:ad:cc:9b:
30:b7:36:b5:5a:bf:03:4d:24:0e:42:be:53:58:85:
b7:47:62:ca:b2:45:32:79:b0:1c:aa:6e:9d:32:96:
10:99:ef:24:17:53:24:4f:69:1a:fc:33:1c:df:fa:
d1:25:d2:bb:d9:46:b4:33:be:65:c3:13:6d:fe:04:
c2:59:6c:ee:f8:39:a4:6d:85:5f:71:99:ed:d5:e2:
3a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:98:53:EA:FE:08:EB:B2:0D:7E:2D:E9:B6:E6:E2:FA:27:2A:A9:F2
X509v3 Authority Key Identifier:
keyid:4D:8C:0C:A9:C2:1F:A1:9D:C0:59:32:BE:FD:90:60:B1:60:ED:C5:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/790099-2f90-43bc-bf0d-6d5496cb1a42/1/TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/790099-2f90-43bc-bf0d-6d5496cb1a42/1/TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:89:d8:a5:9e:ab:61:1f:a5:c7:30:fe:d7:0b:6c:46:f7:76:
80:4c:b0:fd:3b:c1:d2:2c:71:d0:ed:1d:f9:b7:c2:22:97:69:
a3:25:2a:a9:43:3d:1d:3b:a7:e2:2c:9d:5d:06:54:32:2a:15:
aa:6b:b0:4e:f7:b2:e3:c4:74:32:50:0e:a2:40:19:32:7d:28:
fd:02:46:ec:cd:d0:54:3b:39:14:70:d6:86:a2:ec:50:7d:b8:
63:97:7c:9d:8f:59:27:d3:4b:03:47:9d:78:1f:0c:7b:31:bf:
bd:db:1f:dd:2e:c9:2e:7d:e1:93:e3:fa:9e:d9:a7:17:d4:b9:
85:1f:d3:9f:93:d4:df:f0:88:19:f1:f9:d1:e4:99:9d:96:d9:
0d:a1:60:c5:10:61:3b:d4:1d:2c:0e:0e:62:80:41:15:95:ef:
31:fa:46:af:f6:85:c9:89:a7:14:2d:a4:78:b5:88:06:78:e9:
20:e8:8c:d8:57:b2:32:f7:c6:b9:18:c6:60:9b:2b:97:41:5b:
ef:7a:0b:b3:15:c6:b8:d0:cf:92:5e:93:6f:8f:fa:a5:6a:ca:
05:d0:e9:6f:88:9a:c3:14:86:9b:03:61:3a:c8:f1:4b:f3:86:
ea:a8:cc:6c:d5:82:46:34:2c:aa:e5:d7:f5:b8:ec:6c:6d:d5:
19:33:5b:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:17:24 2025 by rpki-client