Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/f89685-1174-45d5-a5dc-09db57469bb8/1/TlyvXlSV9UsDnx0PJHERJGfJeRw.mft
File: TlyvXlSV9UsDnx0PJHERJGfJeRw.mft (raw, json)
Hash identifier: gjX8yRcnR36E5m8I919eZFWURoqNqa2uZsMHns/FVXE=
Subject key identifier: 04:0E:58:55:95:AD:D1:D5:14:FE:0E:49:C8:62:B2:91:44:A3:D1:22
Authority key identifier: 4E:5C:AF:5E:54:95:F5:4B:03:9F:1D:0F:24:71:11:24:67:C9:79:1C
Certificate issuer: /CN=4e5caf5e5495f54b039f1d0f2471112467c9791c
Certificate serial: 01988E7DC99D663014C8CD74BA60BD7EFD3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TlyvXlSV9UsDnx0PJHERJGfJeRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/f89685-1174-45d5-a5dc-09db57469bb8/1/TlyvXlSV9UsDnx0PJHERJGfJeRw.mft
Manifest number: 1627
Signing time: Sat 09 Aug 2025 11:01:04 +0000
Manifest this update: Sat 09 Aug 2025 11:01:04 +0000
Manifest next update: Sun 10 Aug 2025 11:01:04 +0000
Files and hashes: 1: Sjk-hMVz5Yq15653m82LHzN2q2c.roa (hash: v2IafRkq9Sg922Tj4NY8dbGZtPOD35/xpm6wAYKPODI=)
2: TlyvXlSV9UsDnx0PJHERJGfJeRw.crl (hash: 4Mn04OIRwx5rW/GDqZyN22cqvwpKX/Dqpj2oZWdaRmw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/f89685-1174-45d5-a5dc-09db57469bb8/1/TlyvXlSV9UsDnx0PJHERJGfJeRw.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/f89685-1174-45d5-a5dc-09db57469bb8/1/TlyvXlSV9UsDnx0PJHERJGfJeRw.mft
rsync://rpki.ripe.net/repository/DEFAULT/TlyvXlSV9UsDnx0PJHERJGfJeRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 11:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:7d:c9:9d:66:30:14:c8:cd:74:ba:60:bd:7e:fd:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e5caf5e5495f54b039f1d0f2471112467c9791c
Validity
Not Before: Aug 9 11:01:04 2025 GMT
Not After : Aug 10 11:01:04 2025 GMT
Subject: CN=040e585595add1d514fe0e49c862b29144a3d122
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f7:45:75:bb:da:74:db:02:4d:dd:43:72:f5:
29:9d:f6:64:34:40:a1:57:7d:5a:a2:c6:71:30:c5:
e1:b4:54:b6:e3:3b:80:14:aa:cc:8c:1f:d7:91:48:
49:7a:02:6a:06:17:c8:72:51:35:d2:98:80:1f:9c:
b2:a2:31:a8:8f:24:a5:34:5d:bd:5a:10:5e:10:0a:
07:85:f4:64:7a:44:09:08:55:5e:3c:5b:6e:e5:87:
b6:be:14:96:a3:1e:04:1b:c1:19:db:a4:7f:07:80:
b9:45:45:c5:9a:fa:bc:db:34:77:29:94:74:60:f7:
52:2a:89:1e:0a:eb:87:11:c6:32:48:08:79:57:66:
a9:37:56:05:e0:77:c1:cf:18:e0:b8:b1:bb:f5:f8:
aa:30:25:d6:55:e4:8b:19:0e:5c:6c:b7:35:db:fa:
82:23:51:fc:5b:35:44:d2:71:56:21:84:5d:77:e3:
dd:16:9b:72:96:03:f0:03:b1:e1:9f:f1:72:7f:b3:
70:13:ac:fa:26:ea:76:39:60:a9:b9:61:0e:f3:86:
62:e9:89:fb:e6:f9:35:14:49:98:18:0e:8c:68:b1:
40:f6:5c:57:8e:2d:e0:8a:47:61:16:19:1a:49:86:
86:cc:b0:dd:69:7c:63:98:f8:64:f5:7a:30:98:c7:
94:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:0E:58:55:95:AD:D1:D5:14:FE:0E:49:C8:62:B2:91:44:A3:D1:22
X509v3 Authority Key Identifier:
keyid:4E:5C:AF:5E:54:95:F5:4B:03:9F:1D:0F:24:71:11:24:67:C9:79:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TlyvXlSV9UsDnx0PJHERJGfJeRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/f89685-1174-45d5-a5dc-09db57469bb8/1/TlyvXlSV9UsDnx0PJHERJGfJeRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/f89685-1174-45d5-a5dc-09db57469bb8/1/TlyvXlSV9UsDnx0PJHERJGfJeRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:2b:e0:23:18:40:d8:4e:b7:57:41:ac:46:d7:5d:e6:d2:33:
84:8b:44:2f:c8:5b:46:c1:2e:ae:b2:55:cb:9a:af:21:d7:4f:
eb:8e:3f:d8:15:16:d1:76:dc:7b:58:d0:b8:bc:2c:e2:e2:ee:
b0:e5:f9:f8:61:fe:89:f3:b3:b5:2c:0a:cb:08:c1:a7:1e:96:
6e:5c:c5:9a:0d:54:ec:f2:7d:18:63:d1:9e:bd:6f:c0:c1:39:
16:9d:6d:46:40:17:5f:db:8f:be:17:48:bb:8a:fe:95:80:c3:
32:f5:ec:05:69:c6:0c:cf:e1:74:99:b8:76:74:49:29:22:15:
f0:8a:f1:91:d6:48:92:df:58:dd:7e:ad:69:a8:1d:81:89:13:
bb:17:99:42:c3:25:20:65:3e:de:26:b7:bc:29:fa:a1:b4:80:
3a:b3:b4:d0:e8:8c:89:27:81:77:17:69:64:9a:5f:2f:d2:1c:
90:f7:58:5a:74:df:ca:fb:ee:c9:5c:cc:86:98:6c:7a:f8:3f:
69:ef:b6:40:a3:1d:80:a1:94:66:ec:32:8a:c2:a7:cb:09:bd:
1b:a6:89:1a:fc:d6:c4:70:69:d7:b6:3c:59:77:4f:a0:15:e6:
be:22:45:8c:e5:80:a6:b2:a5:c0:37:17:8a:2a:ca:50:f5:e0:
4e:9d:7a:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 20:44:28 2025 by rpki-client