Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/9041b7-f543-4c63-8e2b-366a9761ea20/1/TqWy83Ukw9ONyApx2PAB7SxF6Jw.mft
File: TqWy83Ukw9ONyApx2PAB7SxF6Jw.mft (raw, json)
Hash identifier: nnlGEZiXwamQE2786ga0c3P9kl+n1jAzncskUTMJL18=
Subject key identifier: 6D:1D:DC:82:4B:E2:81:21:07:9E:16:5F:B8:85:97:54:1C:89:3B:CC
Authority key identifier: 4E:A5:B2:F3:75:24:C3:D3:8D:C8:0A:71:D8:F0:01:ED:2C:45:E8:9C
Certificate issuer: /CN=4ea5b2f37524c3d38dc80a71d8f001ed2c45e89c
Certificate serial: 0198936D5B10D665BA03BB6D28033FEE7FE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TqWy83Ukw9ONyApx2PAB7SxF6Jw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/9041b7-f543-4c63-8e2b-366a9761ea20/1/TqWy83Ukw9ONyApx2PAB7SxF6Jw.mft
Manifest number: 13ED
Signing time: Sun 10 Aug 2025 10:01:13 +0000
Manifest this update: Sun 10 Aug 2025 10:01:13 +0000
Manifest next update: Mon 11 Aug 2025 10:01:13 +0000
Files and hashes: 1: HJZuFg-aBDGic40vRoWhakH94Zo.roa (hash: b1vEsVgABbRc+hOZI2FcJP4+qO85CVqkQZmViTsB2bU=)
2: TqWy83Ukw9ONyApx2PAB7SxF6Jw.crl (hash: kxMIpyC+i6jnsz7SPSeYTvIIY5H8aakGTdaCR8aOFUg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/9041b7-f543-4c63-8e2b-366a9761ea20/1/TqWy83Ukw9ONyApx2PAB7SxF6Jw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/9041b7-f543-4c63-8e2b-366a9761ea20/1/TqWy83Ukw9ONyApx2PAB7SxF6Jw.mft
rsync://rpki.ripe.net/repository/DEFAULT/TqWy83Ukw9ONyApx2PAB7SxF6Jw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 10:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:6d:5b:10:d6:65:ba:03:bb:6d:28:03:3f:ee:7f:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ea5b2f37524c3d38dc80a71d8f001ed2c45e89c
Validity
Not Before: Aug 10 10:01:13 2025 GMT
Not After : Aug 11 10:01:13 2025 GMT
Subject: CN=6d1ddc824be28121079e165fb88597541c893bcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:8b:98:04:7d:01:1f:36:23:84:fe:a3:02:ad:
39:7d:0d:35:4b:79:34:bc:59:cf:69:a9:80:3a:0f:
2c:82:75:00:a8:52:5d:b8:03:ba:9d:8e:7e:bf:d8:
b7:cd:66:18:60:ff:20:ee:67:b0:2c:62:07:86:44:
cf:61:b5:7f:73:cb:3e:03:d8:a6:82:3d:29:6a:4c:
f0:64:61:3d:55:2e:ea:8f:81:1c:d9:c6:43:6d:26:
1d:47:61:ed:38:82:48:7f:45:75:fd:f8:77:34:de:
18:b1:23:0e:c9:f8:33:6c:b6:e8:72:b5:4c:41:f2:
85:eb:17:6c:ba:06:82:70:98:1f:27:b9:c7:56:39:
ef:8d:ed:6a:39:94:ac:b4:ee:d6:bb:9a:f4:d4:be:
ec:10:8a:f8:cf:0c:92:c7:7c:55:6f:02:83:d4:d4:
7d:3d:51:66:e5:28:44:f2:7d:2e:66:ad:d0:37:e9:
b8:bc:49:ea:da:03:d2:9c:15:93:3e:42:97:65:16:
a3:ad:7a:63:7a:d3:f6:f3:82:5c:75:40:86:69:97:
b6:b5:70:f5:80:19:66:ee:5a:f6:26:26:60:b9:a9:
92:e3:45:27:b3:60:96:de:ae:34:9c:07:4e:81:d4:
4f:c1:fd:c2:74:35:30:6f:33:2f:67:34:c3:c3:64:
04:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:1D:DC:82:4B:E2:81:21:07:9E:16:5F:B8:85:97:54:1C:89:3B:CC
X509v3 Authority Key Identifier:
keyid:4E:A5:B2:F3:75:24:C3:D3:8D:C8:0A:71:D8:F0:01:ED:2C:45:E8:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TqWy83Ukw9ONyApx2PAB7SxF6Jw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/9041b7-f543-4c63-8e2b-366a9761ea20/1/TqWy83Ukw9ONyApx2PAB7SxF6Jw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/9041b7-f543-4c63-8e2b-366a9761ea20/1/TqWy83Ukw9ONyApx2PAB7SxF6Jw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:19:37:51:90:ad:4c:c9:13:45:82:9d:0d:d8:de:6a:7c:3f:
80:1d:bd:28:6f:1a:4b:99:b0:e2:fb:2d:44:41:44:dd:a1:d7:
b2:13:db:69:bd:f1:ef:6a:17:f1:6b:43:74:56:73:4c:d0:6d:
e0:16:d8:94:4c:0b:54:59:8c:bf:f0:5e:b1:4c:ab:18:16:1f:
88:06:e4:0f:bf:0a:f9:73:e0:f4:ad:06:8d:eb:41:1a:ee:1c:
6d:0d:93:32:7f:f5:36:ba:a7:60:dd:2a:74:39:d1:8f:b6:fe:
74:c4:c2:d0:a4:6a:0b:6f:6a:e7:ca:7d:43:7d:55:be:de:44:
42:11:d6:32:ac:3d:85:9b:b8:f4:91:f5:91:e9:60:dc:1b:71:
21:65:89:7f:9b:2c:e4:74:08:06:98:34:56:eb:fe:c7:91:a6:
70:3e:83:f3:66:37:20:e1:a3:f6:ce:d2:84:b3:1f:3e:a7:81:
bf:d8:eb:da:a9:49:bd:08:a9:82:76:1d:fc:31:d4:5f:c1:1f:
de:1e:bc:d0:da:f6:57:55:aa:ac:cd:0c:a9:50:51:34:dd:21:
58:f9:27:e0:1b:43:5c:eb:79:8b:a5:05:36:57:62:7b:9f:e6:
6f:5b:48:38:2f:aa:f0:13:b2:0b:63:db:b2:24:72:e5:af:1b:
8d:d5:cc:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:13:07 2025 by rpki-client