Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/649a98-339a-4f4b-8750-6e9d3b732b08/1/tWyxebPbXGs2zTMINAgB_tsrfRk.mft
File: tWyxebPbXGs2zTMINAgB_tsrfRk.mft (raw, json)
Hash identifier: ssbZoYxdQNZFYPpQH6PqbJ58b9jwNXg4uG21enABiP0=
Subject key identifier: 03:BA:C1:79:DF:EF:F3:10:92:9A:66:88:C8:53:35:00:66:9B:10:CD
Authority key identifier: B5:6C:B1:79:B3:DB:5C:6B:36:CD:33:08:34:08:01:FE:DB:2B:7D:19
Certificate issuer: /CN=b56cb179b3db5c6b36cd3308340801fedb2b7d19
Certificate serial: 0198744FDB4436092870D209F00F4B14475E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tWyxebPbXGs2zTMINAgB_tsrfRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/649a98-339a-4f4b-8750-6e9d3b732b08/1/tWyxebPbXGs2zTMINAgB_tsrfRk.mft
Manifest number: 1619
Signing time: Mon 04 Aug 2025 09:00:47 +0000
Manifest this update: Mon 04 Aug 2025 09:00:47 +0000
Manifest next update: Tue 05 Aug 2025 09:00:47 +0000
Files and hashes: 1: egERklG4JDoNVaiZcO7pQtm8HwI.roa (hash: UCPCOxDDKaXVSI1SbOM7CcRIC7mRuotxlKVUCRUv8VQ=)
2: tWyxebPbXGs2zTMINAgB_tsrfRk.crl (hash: 15pukNxcP4c11kgCMKi9k9FvdDvTZm3htfX1iia+LZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/649a98-339a-4f4b-8750-6e9d3b732b08/1/tWyxebPbXGs2zTMINAgB_tsrfRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/649a98-339a-4f4b-8750-6e9d3b732b08/1/tWyxebPbXGs2zTMINAgB_tsrfRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/tWyxebPbXGs2zTMINAgB_tsrfRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:4f:db:44:36:09:28:70:d2:09:f0:0f:4b:14:47:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b56cb179b3db5c6b36cd3308340801fedb2b7d19
Validity
Not Before: Aug 4 09:00:47 2025 GMT
Not After : Aug 5 09:00:47 2025 GMT
Subject: CN=03bac179dfeff310929a6688c8533500669b10cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a7:39:0e:54:44:93:42:3b:a2:ad:64:14:b5:
87:68:ba:76:76:29:89:b4:aa:c0:bc:89:67:0a:6f:
7c:f2:96:19:f1:2f:be:40:20:fa:fc:0d:f0:9a:07:
a8:40:f3:30:fd:00:d4:09:0c:f3:8f:e2:1c:9d:d7:
66:1f:58:bc:63:25:99:a0:2d:e1:99:86:d6:fe:f9:
12:8c:c3:a7:ad:5f:b4:53:f0:61:cc:bb:0d:65:70:
ba:21:57:a5:52:4c:04:70:11:7f:86:4f:96:1c:4c:
aa:a9:3d:03:ae:10:fe:49:9e:64:7a:53:96:2c:ab:
1e:f1:49:b0:aa:6e:85:75:c1:99:4f:0f:db:82:62:
04:d2:7a:3d:58:92:4e:78:60:fd:7c:65:a6:b7:dd:
47:5a:7e:ec:55:3e:9d:f4:09:65:bc:a0:4c:37:80:
4c:45:ec:f0:c9:35:ca:3f:50:ec:30:c0:d4:91:cb:
a0:9d:ed:d7:94:92:c4:4a:d4:8e:de:d9:d0:d4:89:
8b:a7:a9:42:eb:28:4a:53:21:5e:59:16:4d:b7:5c:
c0:41:08:da:90:50:a6:e7:bf:f0:ab:ee:7d:b0:9c:
bd:b3:87:cd:29:e0:26:d5:ba:8c:1c:b1:15:62:ac:
33:8c:f9:f3:d4:c9:f3:f0:30:c4:fe:b0:7a:9b:f8:
01:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:BA:C1:79:DF:EF:F3:10:92:9A:66:88:C8:53:35:00:66:9B:10:CD
X509v3 Authority Key Identifier:
keyid:B5:6C:B1:79:B3:DB:5C:6B:36:CD:33:08:34:08:01:FE:DB:2B:7D:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tWyxebPbXGs2zTMINAgB_tsrfRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/649a98-339a-4f4b-8750-6e9d3b732b08/1/tWyxebPbXGs2zTMINAgB_tsrfRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/649a98-339a-4f4b-8750-6e9d3b732b08/1/tWyxebPbXGs2zTMINAgB_tsrfRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:48:67:0f:2a:d3:5f:0a:9c:6e:97:55:90:cc:ef:05:3c:60:
7e:7b:70:af:c6:c6:36:09:70:2d:f4:e8:59:5d:15:37:8e:f1:
b9:61:07:ff:d8:be:02:f8:0e:cf:62:4b:82:32:fb:ee:63:93:
d6:53:c3:e5:74:68:29:c9:8e:e4:b6:51:03:05:c3:e7:a1:61:
f5:c8:66:0a:1d:73:82:ec:33:81:77:0a:a6:a9:a3:c7:0d:9f:
ca:b7:b1:f3:e1:33:cf:bc:28:01:14:29:78:59:ed:75:93:72:
80:2a:f6:f5:7b:72:c7:b4:02:92:c8:a7:6e:b2:f3:17:03:6c:
14:4e:76:a0:74:71:6d:10:77:07:3e:56:f1:59:4c:76:d9:a8:
ce:54:0d:5f:94:41:b3:a3:06:5a:f6:73:b7:d8:de:2a:b3:b9:
39:cb:3f:d5:46:a1:ce:06:eb:87:11:da:d9:a9:09:0b:e3:e6:
91:ff:c2:55:7b:ca:69:13:ce:a5:66:d8:e7:75:ce:67:16:9c:
2a:d9:67:39:4f:a3:21:33:0f:55:3d:db:b0:04:26:c9:bf:07:
13:72:3c:04:78:5d:64:f5:c9:5a:e5:d5:9f:e6:a3:07:c5:ff:
89:05:54:c6:ce:5b:c8:82:8d:27:d3:f6:72:dc:a1:cf:0a:66:
15:8a:04:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:19:20 2025 by rpki-client