Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/TJETJOhpvEyl7IutDT3f9oVEGXk.mft
File: TJETJOhpvEyl7IutDT3f9oVEGXk.mft (raw, json)
Hash identifier: NQ2X230ut9jNriWoBbbsMVxDtBMYvUjXzhsKjY4Rbhs=
Subject key identifier: B2:9A:45:F7:40:DC:D0:55:03:2C:AC:A6:0B:DC:48:7E:95:A9:E4:C1
Authority key identifier: 4C:91:13:24:E8:69:BC:4C:A5:EC:8B:AD:0D:3D:DF:F6:85:44:19:79
Certificate issuer: /CN=4c911324e869bc4ca5ec8bad0d3ddff685441979
Certificate serial: 019848C031C5FFD9B83AD5942582193C8C91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TJETJOhpvEyl7IutDT3f9oVEGXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/TJETJOhpvEyl7IutDT3f9oVEGXk.mft
Manifest number: 1607
Signing time: Sat 26 Jul 2025 22:00:11 +0000
Manifest this update: Sat 26 Jul 2025 22:00:11 +0000
Manifest next update: Sun 27 Jul 2025 22:00:11 +0000
Files and hashes: 1: 06AfR8ZbdQ5_MZMYhDQjdfTo_kA.roa (hash: EEGnzX0afqpfc3Kn5NnezY7IPw+uVu1JdUrzEk+iDpk=)
2: 1-g-A4hn_DsUBjrSOtmwbaV2sjfc.roa (hash: H/p8gImyoUDaEoDvhM9gHqspIznQXZjV/layX0BmypQ=)
3: 43zHI9RV_-UV0H8FudTqslXERT8.roa (hash: jjlOWoTue0eCIb3Fk8Ot7n6TxzmNBAQWzlFe/V95Bl4=)
4: NBksY7qoZYso21Vw3xYrZFLq5eE.roa (hash: uWalzSU+haa+ieD4qUwSSt1pReJEBtMSVsUZjZILj3c=)
5: TJETJOhpvEyl7IutDT3f9oVEGXk.crl (hash: en5YxLgcq8dLqvNPL9CQiwM+4X/TuVLCq1pgjco51/E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/TJETJOhpvEyl7IutDT3f9oVEGXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/TJETJOhpvEyl7IutDT3f9oVEGXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TJETJOhpvEyl7IutDT3f9oVEGXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:c0:31:c5:ff:d9:b8:3a:d5:94:25:82:19:3c:8c:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c911324e869bc4ca5ec8bad0d3ddff685441979
Validity
Not Before: Jul 26 22:00:11 2025 GMT
Not After : Jul 27 22:00:11 2025 GMT
Subject: CN=b29a45f740dcd055032caca60bdc487e95a9e4c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:9e:9f:3a:23:3f:14:b1:db:02:0c:10:7a:93:
83:c8:7f:1d:f6:f3:cd:de:c5:2d:55:57:38:c3:c3:
7a:35:4d:53:90:ad:75:de:71:23:8c:70:09:64:66:
6b:c4:2d:cf:6c:cf:6c:99:b5:65:99:24:a9:04:8e:
c6:18:c6:d1:a2:86:91:ec:19:68:5b:e7:81:33:97:
9c:e6:24:9a:b8:cd:75:a5:cb:60:5c:84:28:d9:b5:
62:5b:73:0d:3a:60:87:28:db:63:68:b0:05:f5:85:
bd:20:a9:8b:c1:08:53:85:d1:11:19:c6:f6:e5:8b:
b5:3a:6d:31:23:09:10:f3:5d:6f:49:a0:f9:57:56:
c3:67:be:ac:0b:80:0d:db:91:72:0d:ba:b2:00:ee:
88:64:d1:34:f8:ca:5a:1e:0a:1d:29:04:d8:fd:05:
bd:12:44:e2:e0:94:ef:83:ed:32:b2:c7:01:b5:c2:
06:b4:e9:07:af:a2:b5:b1:e7:ad:5f:d5:4c:b6:b0:
a2:8c:4c:4f:d4:b7:6e:05:40:f9:9e:4c:30:dc:b9:
23:0a:b2:01:91:4d:0e:90:b7:2c:d5:aa:26:cd:6f:
49:f0:98:d4:e0:0d:2a:d0:bc:e8:91:df:11:3c:3b:
03:10:8b:13:54:d5:8e:13:39:08:b6:fc:f5:f9:50:
b3:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:9A:45:F7:40:DC:D0:55:03:2C:AC:A6:0B:DC:48:7E:95:A9:E4:C1
X509v3 Authority Key Identifier:
keyid:4C:91:13:24:E8:69:BC:4C:A5:EC:8B:AD:0D:3D:DF:F6:85:44:19:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TJETJOhpvEyl7IutDT3f9oVEGXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/TJETJOhpvEyl7IutDT3f9oVEGXk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/TJETJOhpvEyl7IutDT3f9oVEGXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:92:eb:aa:1c:68:47:85:92:ca:85:c3:be:55:17:15:43:11:
ec:fe:cd:3f:85:11:f2:38:37:e4:8f:49:0c:06:48:93:10:24:
dc:a4:07:a2:9d:06:93:81:6f:29:67:67:50:95:86:13:eb:7e:
b2:85:2a:85:b5:d3:09:ed:94:bc:e2:67:93:8e:86:37:70:2b:
ea:00:f4:7f:7f:b5:8a:24:f1:a0:3d:0e:4a:43:28:d3:16:ed:
23:0b:f0:4e:f0:f7:2f:ea:5f:ea:fe:46:7a:fe:90:9f:82:68:
3b:56:0c:13:4b:41:48:45:ca:39:8b:16:5c:01:f2:11:4b:bf:
30:a4:b3:28:e6:c9:7e:30:32:74:9f:39:5c:6a:e7:f9:4d:b4:
3b:a3:55:ff:6a:35:99:30:71:51:80:53:9f:17:10:b3:55:b1:
76:96:05:bb:e1:c5:6b:94:c6:97:cc:37:2c:fe:bc:b0:d0:16:
70:5f:08:6c:94:f9:e1:7f:39:b1:9e:e2:c7:73:03:47:3a:70:
90:04:85:10:06:37:e4:52:d4:29:50:be:c4:58:82:84:cd:ab:
bc:02:ce:c7:b7:3b:ea:a2:ad:0f:d5:c9:6b:6c:4a:96:13:22:
7e:f4:59:0e:42:9e:bd:dc:21:40:0d:58:df:9a:f9:90:32:c0:
b5:be:0b:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 23:49:14 2025 by rpki-client