Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/d1f89c-1909-4995-8dd1-a1056f589354/1/tyC-m1eyWx7aP4EJLgC0U4vosp0.mft
File: tyC-m1eyWx7aP4EJLgC0U4vosp0.mft (raw, json)
Hash identifier: L4FdkMznklxYXKhcxa9gO7/F6n52IW026Yey7tDZzKc=
Subject key identifier: 1C:3F:F9:79:00:C6:A4:83:B4:46:F9:17:EC:53:FA:A9:18:29:85:78
Authority key identifier: B7:20:BE:9B:57:B2:5B:1E:DA:3F:81:09:2E:00:B4:53:8B:E8:B2:9D
Certificate issuer: /CN=b720be9b57b25b1eda3f81092e00b4538be8b29d
Certificate serial: 019873E2AFB5B2BA463C4393298A07A83CAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tyC-m1eyWx7aP4EJLgC0U4vosp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/d1f89c-1909-4995-8dd1-a1056f589354/1/tyC-m1eyWx7aP4EJLgC0U4vosp0.mft
Manifest number: 15A3
Signing time: Mon 04 Aug 2025 07:01:32 +0000
Manifest this update: Mon 04 Aug 2025 07:01:32 +0000
Manifest next update: Tue 05 Aug 2025 07:01:32 +0000
Files and hashes: 1: tyC-m1eyWx7aP4EJLgC0U4vosp0.crl (hash: oLaYlWIG/QQkWRuKMavKVwX7i738id5Sd21cAajhzrs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/d1f89c-1909-4995-8dd1-a1056f589354/1/tyC-m1eyWx7aP4EJLgC0U4vosp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/d1f89c-1909-4995-8dd1-a1056f589354/1/tyC-m1eyWx7aP4EJLgC0U4vosp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/tyC-m1eyWx7aP4EJLgC0U4vosp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:af:b5:b2:ba:46:3c:43:93:29:8a:07:a8:3c:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b720be9b57b25b1eda3f81092e00b4538be8b29d
Validity
Not Before: Aug 4 07:01:32 2025 GMT
Not After : Aug 5 07:01:32 2025 GMT
Subject: CN=1c3ff97900c6a483b446f917ec53faa918298578
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ea:8d:1a:e7:bb:db:91:b9:5a:f9:d7:63:6e:
59:c6:f9:d7:49:a0:4f:97:fd:ba:f1:49:51:ad:da:
ce:e0:13:e0:22:48:d2:c4:cd:37:9f:cb:31:bb:24:
9c:dd:29:56:44:e2:05:89:03:31:66:26:d6:ae:84:
93:51:6f:a2:39:e7:53:00:78:70:55:f7:31:6e:e4:
76:81:1b:35:ea:d6:00:b5:77:ed:a6:88:a9:bc:cb:
fe:41:74:0a:5f:a5:c4:ec:94:a6:5d:32:4b:00:7d:
b9:41:02:35:ca:34:78:6e:4b:42:5e:03:33:8a:e7:
df:37:cb:44:ca:2f:c2:87:2d:50:64:9b:1a:91:5f:
a0:18:f3:86:16:a0:3c:ba:10:59:10:bd:dc:f8:01:
a3:9a:5a:0d:01:d0:e7:6e:f9:fa:ae:c6:85:b4:92:
64:75:5b:40:5d:83:bc:c3:e5:9e:e8:5f:84:72:fb:
0c:5a:ae:59:07:02:89:a0:7a:ed:de:17:2c:0c:14:
aa:51:c2:1e:07:62:8e:de:a4:67:24:d3:48:fb:dd:
90:df:65:92:77:e4:35:ef:af:74:0b:e3:0c:e2:1c:
a6:35:b4:4f:dc:8d:92:a5:80:29:41:f9:43:ec:56:
9f:22:c5:49:f9:11:71:f9:f8:50:a6:7d:cb:2c:cf:
d4:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:3F:F9:79:00:C6:A4:83:B4:46:F9:17:EC:53:FA:A9:18:29:85:78
X509v3 Authority Key Identifier:
keyid:B7:20:BE:9B:57:B2:5B:1E:DA:3F:81:09:2E:00:B4:53:8B:E8:B2:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tyC-m1eyWx7aP4EJLgC0U4vosp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/d1f89c-1909-4995-8dd1-a1056f589354/1/tyC-m1eyWx7aP4EJLgC0U4vosp0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/d1f89c-1909-4995-8dd1-a1056f589354/1/tyC-m1eyWx7aP4EJLgC0U4vosp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:70:9f:87:e7:7b:54:3b:47:ea:99:48:7c:71:79:ed:ae:03:
16:74:cb:40:74:f9:dd:a3:a7:51:12:b4:d7:7c:b4:d2:4f:3e:
e0:d5:8a:10:79:6f:f7:35:60:0b:dd:ea:3c:b7:f2:46:73:ea:
3b:4c:1a:64:c0:3a:ea:2a:19:1a:0a:8e:e6:4b:63:0f:34:79:
36:58:7d:d9:07:06:af:1f:1c:97:d1:70:e2:a3:d1:0f:6b:ed:
54:a1:f4:83:17:f4:f5:95:68:79:c3:ce:69:27:86:05:92:26:
a0:44:4a:50:81:26:53:e0:50:a3:ce:03:ea:2e:05:23:ae:27:
da:6a:13:a6:00:f0:be:2c:ab:c3:ed:77:90:88:c6:b6:3d:a7:
be:92:ad:95:b2:54:34:20:09:d5:56:f5:ec:37:8d:7f:53:e3:
11:f4:71:2e:5c:4f:81:93:b8:a9:be:f5:09:89:81:60:79:ec:
a9:de:d4:bb:7f:bd:f5:5f:53:85:9a:f7:fd:68:70:7e:c2:d2:
83:6f:e4:e1:69:aa:29:a3:ae:f2:48:57:e0:63:27:8e:90:1d:
1d:48:07:57:f1:33:52:e7:da:ac:4f:4b:07:23:b9:9c:82:90:
5c:5e:ce:45:ee:1b:af:69:93:b9:0a:22:de:84:3f:da:60:80:
43:8b:1a:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:10:24 2025 by rpki-client