Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/767119-28aa-4339-b741-4eeed8a4308b/1/TlqjjuoyTivXq2Qn51lqn6QdsOM.mft
File: TlqjjuoyTivXq2Qn51lqn6QdsOM.mft (raw, json)
Hash identifier: V98gNnpOE6NUVQJ3TAjXunkg+xeja3lTjF+CdDf8wYk=
Subject key identifier: 63:08:04:A1:89:3D:53:AF:00:12:F7:86:9D:87:60:D6:97:AC:5E:42
Authority key identifier: 4E:5A:A3:8E:EA:32:4E:2B:D7:AB:64:27:E7:59:6A:9F:A4:1D:B0:E3
Certificate issuer: /CN=4e5aa38eea324e2bd7ab6427e7596a9fa41db0e3
Certificate serial: 0198989488E2ED9AE098EA1268CF08DBA3D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TlqjjuoyTivXq2Qn51lqn6QdsOM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/767119-28aa-4339-b741-4eeed8a4308b/1/TlqjjuoyTivXq2Qn51lqn6QdsOM.mft
Manifest number: 162E
Signing time: Mon 11 Aug 2025 10:02:07 +0000
Manifest this update: Mon 11 Aug 2025 10:02:07 +0000
Manifest next update: Tue 12 Aug 2025 10:02:07 +0000
Files and hashes: 1: GE0QPlemROw8Sbhr36vqfxvh7PA.roa (hash: +MZLj56FBFDLK0DCRu2QzT8kaBrzw0Ux8MFgsr68gZ8=)
2: TlqjjuoyTivXq2Qn51lqn6QdsOM.crl (hash: CoK+DFser4EcqDfYYGEQHA9Hkh8xjfEQsIxM3sm31N4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/767119-28aa-4339-b741-4eeed8a4308b/1/TlqjjuoyTivXq2Qn51lqn6QdsOM.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/767119-28aa-4339-b741-4eeed8a4308b/1/TlqjjuoyTivXq2Qn51lqn6QdsOM.mft
rsync://rpki.ripe.net/repository/DEFAULT/TlqjjuoyTivXq2Qn51lqn6QdsOM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 10:02:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:98:94:88:e2:ed:9a:e0:98:ea:12:68:cf:08:db:a3:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e5aa38eea324e2bd7ab6427e7596a9fa41db0e3
Validity
Not Before: Aug 11 10:02:07 2025 GMT
Not After : Aug 12 10:02:07 2025 GMT
Subject: CN=630804a1893d53af0012f7869d8760d697ac5e42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:91:ee:88:df:78:39:61:54:40:32:fa:a9:0d:
22:1e:76:4e:d8:ec:40:33:10:55:fd:e8:13:2c:f2:
6e:d6:39:65:3e:02:f2:9a:49:83:78:88:85:bf:2e:
c2:87:fd:08:86:1b:d3:cf:36:1d:ee:7b:7c:de:2e:
53:da:b8:b7:4d:4d:c4:a6:68:bc:68:fb:2c:6f:80:
bc:3b:b9:02:d0:14:7a:df:88:bf:ea:6c:43:74:fc:
fc:2e:0f:43:7f:f7:98:2b:45:f0:3a:05:76:b9:9f:
89:b2:80:2b:53:99:6c:5a:9b:d9:3a:3b:5d:ae:0b:
44:89:01:bc:ad:9f:80:23:d8:a4:fd:18:b0:c6:17:
4b:5b:2a:d1:b5:a6:76:32:66:09:16:0f:dc:9f:0c:
c4:73:80:63:fb:33:3a:f2:4d:2b:aa:7e:d7:64:14:
66:ca:78:b8:5c:b4:2e:e7:2f:ac:39:98:56:34:56:
ff:c1:65:f0:0d:cd:8b:e4:a6:7b:14:74:35:79:85:
70:fa:a2:98:7e:4e:bd:1a:e2:a3:ea:85:65:b0:55:
fd:4d:b5:e3:c3:50:f4:7c:52:f8:41:f7:df:c7:19:
ae:1e:1a:7c:a3:9d:7b:25:d6:69:5e:8b:a2:34:9c:
ca:b9:c2:97:d3:fd:e2:af:92:4b:60:ab:65:63:69:
52:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:08:04:A1:89:3D:53:AF:00:12:F7:86:9D:87:60:D6:97:AC:5E:42
X509v3 Authority Key Identifier:
keyid:4E:5A:A3:8E:EA:32:4E:2B:D7:AB:64:27:E7:59:6A:9F:A4:1D:B0:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TlqjjuoyTivXq2Qn51lqn6QdsOM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/767119-28aa-4339-b741-4eeed8a4308b/1/TlqjjuoyTivXq2Qn51lqn6QdsOM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/767119-28aa-4339-b741-4eeed8a4308b/1/TlqjjuoyTivXq2Qn51lqn6QdsOM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:ef:6a:9b:5d:00:08:7f:5c:d8:88:35:bc:f6:b4:fa:5a:d3:
30:ad:18:9a:8e:9c:f7:fe:b3:5a:b0:50:bc:b2:1d:1e:7b:2b:
f1:f2:52:aa:07:47:47:03:0a:00:bd:eb:c6:2e:07:73:36:37:
13:ce:1b:0b:09:94:73:e6:b2:ab:6e:e6:f6:74:42:21:b2:a2:
c8:ab:ef:41:ec:de:3a:a3:1b:30:b3:15:80:d1:74:b2:58:46:
e4:d6:49:0c:63:a2:79:b8:6b:1d:08:a3:f1:cd:6f:6c:2e:3c:
6c:1f:51:fe:c6:71:70:00:49:be:77:21:ba:1b:e0:12:4d:32:
66:28:da:ec:57:47:b3:89:2c:33:fd:ed:c5:c0:02:21:d0:da:
1e:20:6f:68:2f:d5:ff:f4:27:2e:fb:e6:5c:1c:6d:e2:c8:e0:
bd:86:d8:b8:37:a8:97:18:87:10:09:11:7c:37:dc:73:fd:e7:
df:34:b1:1b:05:36:eb:47:ee:35:aa:17:61:d1:7a:5d:45:2d:
a1:0b:15:46:e7:47:fe:0b:b8:7d:e3:33:92:05:90:a2:0f:88:
5b:3b:2f:19:58:94:1b:8d:9c:8a:7f:76:d1:af:21:39:51:bc:
f8:74:83:7f:a6:6d:5e:99:ba:07:45:6f:70:4b:7d:0e:9a:1f:
79:9c:4e:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 13:05:23 2025 by rpki-client