Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/95d780-baad-4db7-beb5-454599a4d22c/1/TYqYddfQ0SvEenC37emjymTYLTI.mft
File: TYqYddfQ0SvEenC37emjymTYLTI.mft (raw, json)
Hash identifier: 38c6vUTSAuQvG3WrzjQG8A/80LY6N4m8XJmg0rt1GqM=
Subject key identifier: CF:C4:A7:69:F9:CB:06:5B:76:D1:12:78:20:09:FA:6C:1F:70:DD:6F
Authority key identifier: 4D:8A:98:75:D7:D0:D1:2B:C4:7A:70:B7:ED:E9:A3:CA:64:D8:2D:32
Certificate issuer: /CN=4d8a9875d7d0d12bc47a70b7ede9a3ca64d82d32
Certificate serial: 01987D8BE64292679D1B58A9DEDEE236FD8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TYqYddfQ0SvEenC37emjymTYLTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/95d780-baad-4db7-beb5-454599a4d22c/1/TYqYddfQ0SvEenC37emjymTYLTI.mft
Manifest number: 0C95
Signing time: Wed 06 Aug 2025 04:02:56 +0000
Manifest this update: Wed 06 Aug 2025 04:02:56 +0000
Manifest next update: Thu 07 Aug 2025 04:02:56 +0000
Files and hashes: 1: Qkkirv8lLJuTeoHE2XBshzOic18.roa (hash: JXSnxQgZnKW02ndUqgQ4ahHIPbZr+aCryUo1lSsSpVM=)
2: TYqYddfQ0SvEenC37emjymTYLTI.crl (hash: pJaihkRJsDNOTrS0RQhqz+2hEBtPYBzXXa224/1zQDw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/95d780-baad-4db7-beb5-454599a4d22c/1/TYqYddfQ0SvEenC37emjymTYLTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/95d780-baad-4db7-beb5-454599a4d22c/1/TYqYddfQ0SvEenC37emjymTYLTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/TYqYddfQ0SvEenC37emjymTYLTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 04:02:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:8b:e6:42:92:67:9d:1b:58:a9:de:de:e2:36:fd:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d8a9875d7d0d12bc47a70b7ede9a3ca64d82d32
Validity
Not Before: Aug 6 04:02:56 2025 GMT
Not After : Aug 7 04:02:56 2025 GMT
Subject: CN=cfc4a769f9cb065b76d112782009fa6c1f70dd6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:eb:52:cb:0a:31:f3:ca:a9:70:66:45:ca:0b:
d5:6b:51:22:96:64:0b:2e:dd:c0:00:72:81:7b:57:
6e:0a:65:1f:5e:0c:34:db:8c:d2:74:a5:d9:65:b1:
9c:1a:05:77:ea:1e:3e:6a:b3:04:47:fa:02:96:5f:
ec:da:e6:96:63:c3:04:1e:34:eb:95:1f:ef:29:42:
cb:22:9b:b0:83:8e:05:10:4a:f4:b9:f2:ba:6f:9e:
1f:f3:d6:b3:20:a0:9a:63:31:c4:95:a3:f4:92:8f:
a7:1e:77:b3:79:33:f4:15:50:8a:68:c1:ca:9a:39:
b3:f9:1f:86:b7:6e:f4:e0:ae:ba:44:32:d2:12:e8:
2f:5d:ce:9e:96:ef:75:17:06:13:24:11:d7:59:3f:
63:07:26:13:e7:bb:ff:2e:73:d4:12:07:09:e7:07:
97:41:12:f4:81:6c:4c:35:25:8d:4d:43:32:f2:65:
89:e0:e6:db:56:c5:a4:3c:78:d5:95:69:40:7b:cd:
17:4e:0f:f5:9d:b9:a3:82:cd:42:a9:fb:82:1f:23:
fc:7f:0c:a8:7f:81:46:45:97:64:b4:99:5b:30:4b:
d4:ed:7f:a5:fa:48:af:82:ce:71:6d:2a:04:6a:40:
83:5c:9d:8e:c2:d9:85:d7:25:92:d1:67:ea:92:64:
56:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:C4:A7:69:F9:CB:06:5B:76:D1:12:78:20:09:FA:6C:1F:70:DD:6F
X509v3 Authority Key Identifier:
keyid:4D:8A:98:75:D7:D0:D1:2B:C4:7A:70:B7:ED:E9:A3:CA:64:D8:2D:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TYqYddfQ0SvEenC37emjymTYLTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/95d780-baad-4db7-beb5-454599a4d22c/1/TYqYddfQ0SvEenC37emjymTYLTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/95d780-baad-4db7-beb5-454599a4d22c/1/TYqYddfQ0SvEenC37emjymTYLTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:c5:dd:f6:de:fc:4f:2c:00:a7:e6:8b:c3:48:33:42:43:8d:
5a:0d:45:77:f6:ba:96:1d:36:af:e1:01:7e:0b:22:9c:1c:29:
34:39:cc:7f:8d:18:25:4c:fe:c1:2c:9f:fc:9b:f5:10:cc:e7:
0a:ea:f9:73:bb:93:75:ec:d5:50:d6:0f:a5:aa:29:07:61:0c:
16:10:67:9f:d6:ca:99:76:b6:4b:bd:31:a8:86:99:df:b7:f9:
6d:89:aa:16:1b:7f:bd:f1:b3:02:27:a6:a0:87:72:f0:fa:8c:
06:16:94:e2:1e:61:dd:5c:bf:30:6c:65:76:9e:93:d7:cf:70:
d1:2c:75:6f:85:30:cb:00:8d:28:35:90:16:a8:39:0a:72:41:
1a:e9:89:05:ce:15:cb:60:5b:1b:47:c7:90:ba:67:8b:4a:ec:
07:22:29:f7:89:1e:ea:04:7c:d1:b7:27:a4:18:c0:df:b2:54:
ed:8f:1c:2c:3b:49:7a:02:a9:2c:47:71:b7:9a:d1:fb:50:36:
1d:f7:bd:ef:15:3c:13:39:80:61:e8:74:34:58:9b:ef:7f:8d:
60:6b:f9:fb:06:7d:7b:26:be:a2:af:3d:1a:6d:32:45:b5:73:
22:39:76:98:4f:ce:fc:e0:6f:71:93:e1:8d:66:42:66:74:ca:
50:60:ca:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 14:15:15 2025 by rpki-client