Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/TsOgYsuW2aPyGostqEj4HG9zv5U.mft
File: TsOgYsuW2aPyGostqEj4HG9zv5U.mft (raw, json)
Hash identifier: TmzGMLUTACele0Gt8PD3EKjv2QiYIMV9Cu22480UHNk=
Subject key identifier: 37:44:3A:2A:3A:C2:72:99:91:8B:25:7E:EC:79:46:D9:48:9A:A0:3B
Authority key identifier: 4E:C3:A0:62:CB:96:D9:A3:F2:1A:8B:2D:A8:48:F8:1C:6F:73:BF:95
Certificate issuer: /CN=4ec3a062cb96d9a3f21a8b2da848f81c6f73bf95
Certificate serial: 019847093139AC480A14EC719EF4C4F5145A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TsOgYsuW2aPyGostqEj4HG9zv5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/TsOgYsuW2aPyGostqEj4HG9zv5U.mft
Manifest number: 159B
Signing time: Sat 26 Jul 2025 14:00:41 +0000
Manifest this update: Sat 26 Jul 2025 14:00:41 +0000
Manifest next update: Sun 27 Jul 2025 14:00:41 +0000
Files and hashes: 1: TsOgYsuW2aPyGostqEj4HG9zv5U.crl (hash: IkmkvYUtY0r7Ya6KZSunzcw4XwsDHfF4neeGkBCMzQA=)
2: Zo-iXOH7eoz1wcNDU4gFPp4lbTo.roa (hash: lEXdntgkazPfcD7Ym6WQrguJ42W+/3phyup2XOjaUaA=)
3: w0BgVrxvQVnjW2X3qjBQ3ko9xOc.roa (hash: Ucfa4JRcD7zc33DVXeSZa1Nus1iwZHoQ8xtQZD2xfUQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/TsOgYsuW2aPyGostqEj4HG9zv5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/TsOgYsuW2aPyGostqEj4HG9zv5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/TsOgYsuW2aPyGostqEj4HG9zv5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:09:31:39:ac:48:0a:14:ec:71:9e:f4:c4:f5:14:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ec3a062cb96d9a3f21a8b2da848f81c6f73bf95
Validity
Not Before: Jul 26 14:00:41 2025 GMT
Not After : Jul 27 14:00:41 2025 GMT
Subject: CN=37443a2a3ac27299918b257eec7946d9489aa03b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:3a:cc:69:1d:77:e6:62:8c:e5:2d:73:b0:33:
32:2a:aa:16:cc:56:e7:4e:9f:33:cb:a1:20:60:4e:
3c:d1:73:e5:99:14:2b:47:3a:7b:5e:42:7d:e4:9d:
32:86:4c:2a:d8:30:78:d7:96:25:03:6b:70:8d:0d:
27:59:a3:ac:6d:9f:5a:b3:1e:9c:bb:79:0d:a3:97:
d2:7c:d9:d9:2b:0c:3d:8d:cd:d9:50:64:73:06:c8:
03:8b:b7:d7:95:1f:2c:bb:5d:40:d4:d7:02:73:d1:
12:13:f8:df:f9:6f:79:05:3c:89:17:09:ee:f2:4d:
1e:50:8b:24:89:2f:48:10:5b:e2:cb:9b:e8:a0:37:
a6:e8:7c:d4:33:23:99:08:e2:cc:b7:2a:18:c9:8a:
7d:7d:24:f9:01:56:ae:15:f5:06:3d:cc:4e:ce:49:
e4:a8:01:e1:51:4c:f0:bd:80:d5:23:e5:a6:3f:4a:
f2:0d:51:0d:51:20:a1:b5:c9:e3:6c:d9:89:18:05:
38:14:b0:88:20:82:a1:78:d4:92:99:06:c3:55:b9:
2d:b2:e0:9a:ab:14:57:fe:01:13:e6:1b:ef:b2:65:
67:b0:99:f6:06:da:a1:58:15:33:da:b2:aa:ae:71:
26:86:7f:b2:3a:dd:63:08:b1:55:a7:07:06:ba:d9:
ab:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:44:3A:2A:3A:C2:72:99:91:8B:25:7E:EC:79:46:D9:48:9A:A0:3B
X509v3 Authority Key Identifier:
keyid:4E:C3:A0:62:CB:96:D9:A3:F2:1A:8B:2D:A8:48:F8:1C:6F:73:BF:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TsOgYsuW2aPyGostqEj4HG9zv5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/TsOgYsuW2aPyGostqEj4HG9zv5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/TsOgYsuW2aPyGostqEj4HG9zv5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:81:09:d8:41:54:c8:48:6a:eb:67:7e:b3:18:21:1d:fb:b3:
79:a1:1c:14:2e:d9:a1:eb:10:3a:f9:d9:19:29:ba:98:89:9a:
9c:77:f6:c6:bb:31:14:96:b4:05:02:85:68:87:aa:83:d6:9e:
3c:31:76:ec:5e:ef:d7:e7:37:59:51:36:9d:f1:ee:91:0c:35:
84:95:50:65:ca:46:b7:4e:3f:5e:5c:e9:3d:43:cc:03:8a:b3:
c2:96:b5:4f:d1:f3:96:cb:a1:ed:af:15:c9:1d:c1:90:26:ef:
a8:89:ac:ac:7b:31:84:83:1a:a9:05:78:36:2a:44:76:9e:d4:
3b:f8:14:15:e2:6d:20:40:e7:05:63:be:97:01:ca:65:9a:2e:
df:0a:69:d2:99:44:be:c1:21:c5:72:95:90:8e:cc:99:fc:d2:
45:ba:30:33:9a:43:e6:05:17:fc:f8:0b:3f:5f:87:13:11:9c:
db:45:c0:e3:9d:97:18:e6:ee:ed:61:e2:fa:d0:26:4d:3e:9e:
7e:ef:3f:54:5a:19:8c:9c:69:3b:99:1a:71:fc:65:79:d8:9a:
7b:97:00:56:c0:0a:d2:4c:fd:20:9d:1a:e7:c0:8d:1b:7b:ad:
66:52:9c:96:9e:6f:37:7a:bd:e8:1b:6c:f8:f4:66:2e:ba:fe:
b7:02:e4:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 19:25:11 2025 by rpki-client