Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/bbedbe-8821-4bd8-bbcc-3adf9b61347d/1/TPzH4BfCyfdjLacpNHa7fkowNlo.mft
File: TPzH4BfCyfdjLacpNHa7fkowNlo.mft (raw, json)
Hash identifier: jdH+juBVIfTXztAmk+Lc0p9BzxoNvusqHLDiYhCdEdM=
Subject key identifier: 6C:20:30:0B:71:E4:91:99:A0:D3:AC:C8:C2:4A:8F:01:F4:C4:CE:4B
Authority key identifier: 4C:FC:C7:E0:17:C2:C9:F7:63:2D:A7:29:34:76:BB:7E:4A:30:36:5A
Certificate issuer: /CN=4cfcc7e017c2c9f7632da7293476bb7e4a30365a
Certificate serial: 019874509638A02EB60DEC83718978246223
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TPzH4BfCyfdjLacpNHa7fkowNlo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/bbedbe-8821-4bd8-bbcc-3adf9b61347d/1/TPzH4BfCyfdjLacpNHa7fkowNlo.mft
Manifest number: 1619
Signing time: Mon 04 Aug 2025 09:01:34 +0000
Manifest this update: Mon 04 Aug 2025 09:01:34 +0000
Manifest next update: Tue 05 Aug 2025 09:01:34 +0000
Files and hashes: 1: OQKKfCP8SjNyLo9484epfP4wbRU.roa (hash: GIFqkdSx0szCVRVxH/rU2b7Y/JXh/nneSVo+VlwXpJY=)
2: TPzH4BfCyfdjLacpNHa7fkowNlo.crl (hash: KkFGBQ/ztqL0O3OSJcSol9o7XnRgH45xjrhtUbkyzaY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/bbedbe-8821-4bd8-bbcc-3adf9b61347d/1/TPzH4BfCyfdjLacpNHa7fkowNlo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/bbedbe-8821-4bd8-bbcc-3adf9b61347d/1/TPzH4BfCyfdjLacpNHa7fkowNlo.mft
rsync://rpki.ripe.net/repository/DEFAULT/TPzH4BfCyfdjLacpNHa7fkowNlo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 09:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:96:38:a0:2e:b6:0d:ec:83:71:89:78:24:62:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cfcc7e017c2c9f7632da7293476bb7e4a30365a
Validity
Not Before: Aug 4 09:01:34 2025 GMT
Not After : Aug 5 09:01:34 2025 GMT
Subject: CN=6c20300b71e49199a0d3acc8c24a8f01f4c4ce4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d5:62:6f:a0:df:7d:a9:97:fa:1e:8d:91:a9:
22:07:9a:3e:74:3b:9b:7c:31:64:99:f5:0a:a8:61:
b7:bc:65:a7:b0:55:47:15:96:ba:92:c7:be:2c:1c:
bc:a7:00:73:b2:60:2d:88:0b:0d:f9:c6:f0:e5:8a:
58:41:bd:eb:f2:dd:a9:f5:65:29:d0:7e:fc:10:7d:
98:e5:02:f3:95:e8:4f:1a:c3:aa:53:fa:00:c0:fc:
08:6f:67:fa:c1:fb:b8:a8:e6:c0:8f:4a:6e:17:f5:
72:d9:9c:e9:ba:59:5d:2e:4b:a2:73:00:bd:47:1e:
52:03:a8:9a:1a:f0:e0:7a:b9:d7:81:0e:72:9a:af:
28:25:e0:40:92:9d:53:b7:dd:92:82:db:94:94:42:
83:36:70:f4:b3:b2:07:7d:f5:1f:8f:6e:98:d1:3f:
3b:e8:a0:ca:90:f1:e1:1e:cc:c9:7b:7e:2c:4f:5d:
d7:23:3a:da:05:68:ef:5b:f4:e8:1c:53:fb:62:73:
72:d0:a7:d5:ed:f8:b3:35:d2:b6:50:8d:e6:16:5a:
43:1d:37:1b:ef:ff:79:41:cc:45:10:b6:22:e0:c7:
3f:4f:e1:93:91:b0:d8:8c:45:b7:ed:5b:5e:d3:53:
33:cb:dc:1e:09:d6:50:4e:5b:6a:df:ea:af:19:73:
51:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:20:30:0B:71:E4:91:99:A0:D3:AC:C8:C2:4A:8F:01:F4:C4:CE:4B
X509v3 Authority Key Identifier:
keyid:4C:FC:C7:E0:17:C2:C9:F7:63:2D:A7:29:34:76:BB:7E:4A:30:36:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TPzH4BfCyfdjLacpNHa7fkowNlo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/bbedbe-8821-4bd8-bbcc-3adf9b61347d/1/TPzH4BfCyfdjLacpNHa7fkowNlo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/bbedbe-8821-4bd8-bbcc-3adf9b61347d/1/TPzH4BfCyfdjLacpNHa7fkowNlo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:11:71:30:92:3f:73:d8:46:96:1d:c9:95:89:63:03:f5:70:
da:58:1e:d6:85:df:ad:8d:f8:5a:12:49:73:64:2d:f1:fc:48:
11:72:2c:6f:06:04:23:bd:2e:00:a4:93:e0:8f:70:1b:a0:92:
bb:e4:08:a1:85:5a:fd:55:65:64:c3:a8:e6:21:c5:96:15:c8:
21:84:c4:75:8e:6b:b2:4c:7d:9b:e9:29:a0:82:9d:af:70:5b:
4a:c1:70:d6:09:6f:91:f0:f2:f9:d9:f1:9f:65:3f:e2:bc:a8:
cb:1a:98:5d:71:55:98:ed:82:ea:70:37:01:87:8c:6d:22:4a:
52:1c:2c:cc:00:f8:e5:20:ce:7e:c1:67:82:b5:e0:19:00:34:
41:70:00:b4:49:d6:22:92:32:6d:97:8d:cf:dd:69:02:e5:31:
ac:31:8a:3c:67:36:e2:84:e1:fb:d9:dc:5e:78:61:60:84:78:
04:e7:d4:2f:27:0e:ad:17:70:91:46:78:5e:43:91:dc:93:5a:
a3:9f:45:fe:aa:26:bf:8e:a4:9b:8f:a2:93:54:80:33:ee:24:
d3:3a:b4:77:57:a5:a9:4e:5c:43:90:02:fa:da:ad:6a:40:a7:
d1:90:b9:a3:d8:e7:17:55:fb:b7:1e:df:2f:5e:e3:c2:5f:26:
a6:70:d1:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 13:59:27 2025 by rpki-client