Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.mft
File: TSHLmy-MXenaowiJ2eI5RTe6Pjg.mft (raw, json)
Hash identifier: +aZWG08erS5HdCLT0SVajD8dT8+SWBpYKeqNZNzV//k=
Subject key identifier: 1E:CC:1B:38:40:D5:91:0B:F5:0C:8F:2C:4F:F4:C1:27:FF:60:80:3F
Authority key identifier: 4D:21:CB:9B:2F:8C:5D:E9:DA:A3:08:89:D9:E2:39:45:37:BA:3E:38
Certificate issuer: /CN=4d21cb9b2f8c5de9daa30889d9e2394537ba3e38
Certificate serial: 01988C587C0D9B6F1518BDF723DE5F89128D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TSHLmy-MXenaowiJ2eI5RTe6Pjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.mft
Manifest number: 1622
Signing time: Sat 09 Aug 2025 01:01:05 +0000
Manifest this update: Sat 09 Aug 2025 01:01:05 +0000
Manifest next update: Sun 10 Aug 2025 01:01:05 +0000
Files and hashes: 1: RV8paaJ3goMy9MfTaatO8nD3vp0.roa (hash: e4c5enruS1aSsE+Y/GCFoVHc8KGnXiS/8gSNbBU+Ybc=)
2: TSHLmy-MXenaowiJ2eI5RTe6Pjg.crl (hash: UluMfaVOYuZfc5GgR6jOtgAsgX650zzMG/AejgR5xKQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/TSHLmy-MXenaowiJ2eI5RTe6Pjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8c:58:7c:0d:9b:6f:15:18:bd:f7:23:de:5f:89:12:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d21cb9b2f8c5de9daa30889d9e2394537ba3e38
Validity
Not Before: Aug 9 01:01:05 2025 GMT
Not After : Aug 10 01:01:05 2025 GMT
Subject: CN=1ecc1b3840d5910bf50c8f2c4ff4c127ff60803f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:c0:95:25:5e:6d:f5:09:17:68:f6:b2:fe:d8:
e6:b8:0c:d5:0d:d4:75:73:0a:29:27:56:af:3f:86:
75:ff:9d:f8:b2:5f:4c:5f:73:9e:6a:cc:df:7e:37:
00:f0:ea:5a:21:1a:ee:49:69:91:c1:b5:a2:90:37:
6a:56:e1:0b:e3:35:57:07:3e:fa:f6:7b:9d:8b:2b:
f6:2f:cd:27:cf:ce:c8:dc:86:a3:71:37:d4:06:fd:
1b:a8:0c:f2:c6:cf:be:81:d6:70:06:04:af:f3:e8:
a4:5d:06:75:32:a5:33:cc:8a:91:9c:51:4e:7d:df:
a3:d7:e5:e3:b5:da:84:64:c4:ab:85:c6:9d:9a:c9:
ba:c7:36:bf:f3:f8:f5:3c:07:13:b3:58:26:18:7a:
7a:02:9e:37:97:ac:99:01:3b:21:ad:fb:bc:81:1a:
98:16:66:9b:3d:96:7c:5f:49:0b:9f:97:2d:2d:66:
87:29:01:74:0c:8e:16:26:bc:c0:b3:e7:af:a2:88:
19:d4:04:bd:29:cd:4a:69:75:e8:46:54:e5:82:41:
1d:cc:50:97:9c:35:b0:1f:49:e4:81:a9:80:d5:66:
61:de:a1:84:7b:19:b1:fa:ab:45:3a:72:c4:18:4e:
e3:db:c5:2e:3f:d0:fe:8b:ac:a3:3b:03:a2:4b:b4:
fa:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:CC:1B:38:40:D5:91:0B:F5:0C:8F:2C:4F:F4:C1:27:FF:60:80:3F
X509v3 Authority Key Identifier:
keyid:4D:21:CB:9B:2F:8C:5D:E9:DA:A3:08:89:D9:E2:39:45:37:BA:3E:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TSHLmy-MXenaowiJ2eI5RTe6Pjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:fe:c9:dc:be:7e:15:ad:4c:d6:d9:be:9d:eb:5f:0b:98:a4:
9d:84:b6:43:aa:e3:15:0d:83:24:36:19:cc:a0:8d:a3:75:be:
54:bc:c0:d4:c5:4a:24:1e:84:34:45:38:2d:da:02:b8:ad:8a:
da:a3:0d:b9:ed:d6:57:2a:9c:fc:fe:be:0f:94:ce:45:54:51:
40:ac:b6:76:91:6f:52:2b:6a:e6:d5:0f:80:87:80:8c:09:4e:
25:1e:b7:d5:68:b8:88:9f:75:42:ae:72:dd:7d:a7:14:d5:27:
70:1e:df:53:48:63:0c:d7:eb:13:2f:c1:56:1e:da:8a:f3:98:
77:3f:aa:5f:45:8b:71:c7:2b:58:70:35:26:77:23:05:b8:d5:
be:c9:1a:0c:72:4b:8b:fc:e7:fa:04:fb:e3:c3:24:e6:e6:70:
af:04:19:a5:56:47:af:8f:45:70:45:88:bd:19:fb:31:5b:19:
e7:c5:8b:5b:4c:1d:07:91:7e:4f:ae:7b:0d:03:4f:9b:42:e7:
72:14:e6:49:aa:3d:5c:f0:55:47:3f:e7:cf:d3:23:39:6e:77:
c3:89:a0:95:85:aa:67:ea:a7:4d:66:17:3e:e2:b2:d0:d1:9e:
2f:16:97:94:fa:c0:20:6b:9f:32:53:01:2c:27:5f:f6:db:bd:
54:7d:48:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:37:08 2025 by rpki-client