Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/b9a050-7726-4eb5-b403-7bf724056153/1/TyKDTEeXR7CovQphKfn-ZfgwJtA.mft
File: TyKDTEeXR7CovQphKfn-ZfgwJtA.mft (raw, json)
Hash identifier: z1nTZkrnL+KnWcTf/LrB+j1iCgkYCqGMGFaKHxXbDkk=
Subject key identifier: 3C:7A:EE:80:2F:57:B4:3D:E7:FF:15:95:FA:1B:FB:28:D5:C0:A7:AB
Authority key identifier: 4F:22:83:4C:47:97:47:B0:A8:BD:0A:61:29:F9:FE:65:F8:30:26:D0
Certificate issuer: /CN=4f22834c479747b0a8bd0a6129f9fe65f83026d0
Certificate serial: 019894B73F5E3D704B9FD1757760C07697A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TyKDTEeXR7CovQphKfn-ZfgwJtA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/b9a050-7726-4eb5-b403-7bf724056153/1/TyKDTEeXR7CovQphKfn-ZfgwJtA.mft
Manifest number: 0413
Signing time: Sun 10 Aug 2025 16:01:33 +0000
Manifest this update: Sun 10 Aug 2025 16:01:33 +0000
Manifest next update: Mon 11 Aug 2025 16:01:33 +0000
Files and hashes: 1: 5_qRdcU_zBI67bUjjCeGmUT4bso.roa (hash: S33Bj4i6cQIjVG+I+Gmo76E+1aI2U06ldTXtc0u4sXQ=)
2: TyKDTEeXR7CovQphKfn-ZfgwJtA.crl (hash: jOzM0nePVow5uUNF4SBKhw1d0ks0pnb+yKamHqVbUTA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/b9a050-7726-4eb5-b403-7bf724056153/1/TyKDTEeXR7CovQphKfn-ZfgwJtA.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/b9a050-7726-4eb5-b403-7bf724056153/1/TyKDTEeXR7CovQphKfn-ZfgwJtA.mft
rsync://rpki.ripe.net/repository/DEFAULT/TyKDTEeXR7CovQphKfn-ZfgwJtA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 16:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:94:b7:3f:5e:3d:70:4b:9f:d1:75:77:60:c0:76:97:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f22834c479747b0a8bd0a6129f9fe65f83026d0
Validity
Not Before: Aug 10 16:01:33 2025 GMT
Not After : Aug 11 16:01:33 2025 GMT
Subject: CN=3c7aee802f57b43de7ff1595fa1bfb28d5c0a7ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9f:d8:8a:bd:b4:b8:bd:aa:a7:0b:76:11:b8:
37:b6:09:5e:a7:01:b2:c8:fd:12:ff:c1:48:77:18:
83:53:40:e7:cd:f7:ef:ef:06:f5:43:25:dc:58:61:
53:57:44:04:33:05:3f:9d:0f:f7:78:f0:94:9b:23:
d4:2c:a3:64:83:06:5d:a7:cf:31:b1:9c:65:02:bd:
b2:5e:54:22:7f:d6:5c:d0:a8:a5:bc:74:b8:36:c7:
86:64:aa:d9:0c:e3:2e:a9:bf:c1:9c:a1:8d:86:d6:
c8:14:a5:c6:6f:9b:cf:b2:96:a8:9a:f7:5a:96:ce:
85:d4:f5:ff:db:84:4a:17:8c:e7:e5:07:bd:f8:42:
cf:63:3f:01:51:ee:50:d3:d6:62:e9:44:ba:ac:aa:
26:a7:10:12:e2:92:32:1a:e1:f0:1d:ca:be:8a:2e:
8a:31:76:c4:4b:5d:3c:98:6c:05:39:d1:04:8f:bd:
f5:4a:17:86:4d:d3:f3:ba:79:17:e5:19:5c:76:6f:
8c:51:f7:65:a2:39:5a:0e:c7:b0:90:76:85:63:ba:
8b:b2:43:5b:77:b5:0a:64:51:5f:19:47:33:ff:e1:
c6:7f:47:1b:9b:9a:23:3c:e2:5a:51:91:0e:ca:bf:
52:93:29:af:03:4a:7b:c1:f2:d7:f8:fb:e7:18:c7:
7f:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:7A:EE:80:2F:57:B4:3D:E7:FF:15:95:FA:1B:FB:28:D5:C0:A7:AB
X509v3 Authority Key Identifier:
keyid:4F:22:83:4C:47:97:47:B0:A8:BD:0A:61:29:F9:FE:65:F8:30:26:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TyKDTEeXR7CovQphKfn-ZfgwJtA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b9a050-7726-4eb5-b403-7bf724056153/1/TyKDTEeXR7CovQphKfn-ZfgwJtA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b9a050-7726-4eb5-b403-7bf724056153/1/TyKDTEeXR7CovQphKfn-ZfgwJtA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:63:4c:bf:34:66:ae:d6:c8:6d:48:65:21:bd:a9:07:af:d0:
60:be:f9:bc:cb:d6:24:88:82:a6:cf:ed:e5:9a:dc:ea:c8:fe:
05:7c:cd:f3:03:6a:b8:b5:ea:da:2a:e9:2c:9f:c2:13:14:fb:
dc:8d:3d:00:1e:10:b7:91:f3:01:d9:84:c8:32:fb:a9:0e:0f:
33:ec:0d:87:11:31:5a:d6:06:f9:78:18:50:ea:15:06:75:fb:
31:ce:41:5c:04:94:71:37:5a:41:8b:47:9b:10:51:c6:18:d9:
cf:12:04:01:02:9a:b9:a2:1a:f4:95:73:24:bd:22:09:c0:dc:
04:a5:28:b2:ae:d2:33:89:e7:32:d8:b9:c8:36:c3:0e:86:c3:
4b:8d:90:3d:5b:06:17:c5:00:2a:cf:6f:90:68:bd:55:2e:ef:
90:9f:e5:87:b9:0f:39:ad:cc:98:d5:ed:60:9e:55:87:03:cf:
a3:f8:eb:d4:c8:f5:b4:b6:73:22:bc:ab:3d:0b:2c:cb:d8:09:
e5:12:70:7c:69:8e:53:0b:19:3f:46:78:79:f7:80:55:7a:73:
14:4b:a9:65:69:d8:3d:f6:06:89:aa:7c:1d:0d:73:2e:98:a3:
ec:af:bd:4e:86:9d:5c:2c:00:38:3e:c2:fd:0d:ed:19:b3:2f:
86:b9:00:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:48:07 2025 by rpki-client