Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/41e287-50b4-46ef-82cc-ca3b7278dde2/1/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.mft
File: tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.mft (raw, json)
Hash identifier: ZNxGWYp6TEvZ+pdFtgAfKdFPIuKI3PaAAb6m7lHoC1A=
Subject key identifier: B9:B2:1C:52:F5:5E:69:F3:9F:3C:24:08:4B:16:F7:61:50:08:DA:2A
Authority key identifier: B6:9C:B7:09:93:4B:99:F6:89:DD:1E:99:D7:2C:1B:00:0F:D8:72:C5
Certificate issuer: /CN=b69cb709934b99f689dd1e99d72c1b000fd872c5
Certificate serial: 019874F4A9048600A6037871DDDA57299991
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/41e287-50b4-46ef-82cc-ca3b7278dde2/1/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.mft
Manifest number: 161A
Signing time: Mon 04 Aug 2025 12:00:47 +0000
Manifest this update: Mon 04 Aug 2025 12:00:47 +0000
Manifest next update: Tue 05 Aug 2025 12:00:47 +0000
Files and hashes: 1: iRWK7zhmEqe5kSfNzw4pTeBGjvE.roa (hash: x9g5RUDfgJ6Mixu1OZfai6p4BgXIl99taX8ijSdqumo=)
2: tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.crl (hash: SZyg5aFdCcglj8PHXDX4fIM5BcCubr/c24asKoSuBv4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/41e287-50b4-46ef-82cc-ca3b7278dde2/1/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/41e287-50b4-46ef-82cc-ca3b7278dde2/1/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:f4:a9:04:86:00:a6:03:78:71:dd:da:57:29:99:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b69cb709934b99f689dd1e99d72c1b000fd872c5
Validity
Not Before: Aug 4 12:00:47 2025 GMT
Not After : Aug 5 12:00:47 2025 GMT
Subject: CN=b9b21c52f55e69f39f3c24084b16f7615008da2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:64:96:f2:56:57:24:41:07:d9:05:fb:6a:b1:
50:d2:d0:b3:2e:f9:90:9d:65:34:a1:22:49:5a:d5:
a9:c1:cf:f8:3a:50:33:8b:ff:d3:0f:3d:9b:18:bc:
f4:5e:20:e4:54:40:5a:b8:7f:10:88:f5:62:4c:cf:
e3:63:c3:84:1e:9d:5b:3e:13:71:8c:8c:3f:0d:4e:
06:6b:f2:91:04:37:9f:4a:7a:1a:8d:9c:85:06:35:
9a:02:ae:e5:f0:fc:21:7a:47:90:aa:fe:08:58:ee:
e3:1f:40:29:df:fe:c4:35:78:73:e9:44:37:a6:aa:
56:cc:f3:53:4b:a2:61:08:3d:4c:95:9f:7f:e0:c7:
c3:d3:b8:77:d2:a1:ef:e9:9d:8b:2f:76:5d:69:d6:
2c:aa:fd:01:d4:c6:ec:fa:d4:80:2f:0a:4a:bf:cd:
d8:aa:1a:bf:b3:91:df:69:6f:3e:29:76:4d:3c:c3:
47:3f:cd:90:69:c0:ab:6a:53:1c:2f:c0:7d:df:26:
41:6c:31:9f:7f:2d:fb:ae:f3:95:d1:82:2e:9b:b5:
4e:52:62:17:cc:38:1c:a4:4e:b9:6b:64:c1:89:ec:
ce:27:fe:33:79:80:16:e3:50:20:fd:49:2a:be:b7:
56:d6:89:cb:d2:19:04:6a:20:ae:18:cb:39:2e:cd:
ed:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:B2:1C:52:F5:5E:69:F3:9F:3C:24:08:4B:16:F7:61:50:08:DA:2A
X509v3 Authority Key Identifier:
keyid:B6:9C:B7:09:93:4B:99:F6:89:DD:1E:99:D7:2C:1B:00:0F:D8:72:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/41e287-50b4-46ef-82cc-ca3b7278dde2/1/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/41e287-50b4-46ef-82cc-ca3b7278dde2/1/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:28:1d:c2:29:80:ee:16:3d:87:37:11:7e:44:5d:6d:94:da:
5c:ef:ce:4d:b3:11:6b:17:d0:dd:38:2a:5a:12:fa:26:48:a2:
a1:a9:3a:33:53:2c:45:b9:79:33:2b:f6:4a:0b:2c:47:72:42:
b8:f5:2b:2a:96:ab:0a:62:74:17:73:02:82:6f:d7:8d:d7:f9:
d6:9e:1a:a9:97:f2:f8:52:5c:9c:9a:27:01:a0:4b:53:80:53:
35:97:41:7c:26:5c:be:29:17:4a:ea:c8:d6:cd:b2:d3:5d:51:
a6:dc:7a:e9:c8:eb:19:97:26:4d:f0:6f:c1:b8:ed:ab:3e:52:
55:f3:e9:02:b4:55:08:8b:14:a0:7b:5f:4e:73:5c:f1:e7:c9:
e7:80:0d:6d:45:bf:63:93:87:81:a1:9b:5f:0b:40:ca:64:f3:
8a:c8:01:d0:26:ff:2c:c4:2c:45:6c:99:2f:aa:50:d7:e1:8f:
d1:af:f1:bd:59:c1:48:c9:75:bb:67:57:f6:a0:56:6d:b6:c7:
89:a8:9a:a8:9f:fa:07:01:d0:74:0c:a8:2d:1d:ae:99:03:a0:
61:27:0f:af:e0:e3:d7:d1:c1:12:ff:bb:b6:db:cf:71:7b:c1:
93:0a:83:86:3e:12:48:93:49:0d:95:c7:57:bb:ad:1e:78:dc:
34:ea:8c:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:59:34 2025 by rpki-client