Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/09da87-a2b2-429b-be96-cd009b300a6c/1/TZj-UCrBbpV8wz68LsG-g7vtfMQ.mft
File: TZj-UCrBbpV8wz68LsG-g7vtfMQ.mft (raw, json)
Hash identifier: n57qqqnWFGua8GW95H/MVkT2oqgAjb6+JG89Te+MfTk=
Subject key identifier: C5:DD:3D:07:40:44:2B:83:00:0A:CA:E5:12:02:6A:D5:FB:E7:11:42
Authority key identifier: 4D:98:FE:50:2A:C1:6E:95:7C:C3:3E:BC:2E:C1:BE:83:BB:ED:7C:C4
Certificate issuer: /CN=4d98fe502ac16e957cc33ebc2ec1be83bbed7cc4
Certificate serial: 0198481BA706ED9E8B12A848CEC7D3F60645
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TZj-UCrBbpV8wz68LsG-g7vtfMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/09da87-a2b2-429b-be96-cd009b300a6c/1/TZj-UCrBbpV8wz68LsG-g7vtfMQ.mft
Manifest number: 1602
Signing time: Sat 26 Jul 2025 19:00:28 +0000
Manifest this update: Sat 26 Jul 2025 19:00:28 +0000
Manifest next update: Sun 27 Jul 2025 19:00:28 +0000
Files and hashes: 1: TZj-UCrBbpV8wz68LsG-g7vtfMQ.crl (hash: TvtBYo9XWpM7/AMbxtb7qh+6MkWeIrps6A1Geg6qeKs=)
2: duQK_L6CU_XoLOUwAAqGbBQ_c-w.roa (hash: c1e0IDxT38pGihwSE7PrZG6hwT/3gvgX+OwTOhT9gWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/09da87-a2b2-429b-be96-cd009b300a6c/1/TZj-UCrBbpV8wz68LsG-g7vtfMQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/09da87-a2b2-429b-be96-cd009b300a6c/1/TZj-UCrBbpV8wz68LsG-g7vtfMQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/TZj-UCrBbpV8wz68LsG-g7vtfMQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:1b:a7:06:ed:9e:8b:12:a8:48:ce:c7:d3:f6:06:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d98fe502ac16e957cc33ebc2ec1be83bbed7cc4
Validity
Not Before: Jul 26 19:00:28 2025 GMT
Not After : Jul 27 19:00:28 2025 GMT
Subject: CN=c5dd3d0740442b83000acae512026ad5fbe71142
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:1b:56:bb:34:90:06:a9:2f:03:ac:8b:9b:a0:
88:89:37:a6:fa:d1:0d:82:7a:f9:e5:6c:b0:cb:03:
fa:a1:00:2c:a0:ec:38:04:75:72:f9:4b:1e:2d:38:
de:04:53:f5:7a:85:2e:1a:51:81:20:ed:ce:be:f8:
48:bf:f3:c7:24:a5:69:1f:75:47:15:04:b9:c1:3e:
9a:43:8d:48:4f:6f:e6:e1:86:8a:f4:f2:d7:4f:7b:
f3:c2:a1:22:7d:d0:5b:0d:bc:d6:3c:02:83:72:10:
57:65:58:14:2b:7a:ab:7d:9f:dc:51:b1:ef:eb:8c:
a2:a9:df:58:ec:b0:9f:73:33:19:c1:90:8c:5c:f3:
16:e7:23:57:a8:86:f8:e3:79:d0:cb:d0:b4:af:f5:
f5:88:a7:fa:a7:d1:e9:01:49:2f:27:59:96:f3:41:
e5:d3:3b:3f:01:88:9c:9c:c7:85:7e:3b:b7:16:54:
76:ff:0d:37:e6:8c:be:be:42:54:a8:3c:5b:49:42:
92:54:9d:fe:36:f0:ac:64:e0:24:87:c2:2e:96:3e:
47:5d:dd:0f:6c:43:bd:93:97:a7:d5:97:c7:52:eb:
02:01:9e:63:38:36:76:44:f2:b4:80:ca:56:e7:f0:
bb:78:60:54:1f:d9:bb:c2:2f:d9:bc:31:11:b8:d2:
b6:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:DD:3D:07:40:44:2B:83:00:0A:CA:E5:12:02:6A:D5:FB:E7:11:42
X509v3 Authority Key Identifier:
keyid:4D:98:FE:50:2A:C1:6E:95:7C:C3:3E:BC:2E:C1:BE:83:BB:ED:7C:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TZj-UCrBbpV8wz68LsG-g7vtfMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/09da87-a2b2-429b-be96-cd009b300a6c/1/TZj-UCrBbpV8wz68LsG-g7vtfMQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/09da87-a2b2-429b-be96-cd009b300a6c/1/TZj-UCrBbpV8wz68LsG-g7vtfMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:f7:ba:be:62:0c:f5:ab:69:5a:e2:45:96:90:67:20:29:16:
33:51:56:b9:ae:33:50:26:52:be:c0:1e:06:b8:28:90:8d:49:
94:97:04:ad:3b:02:ee:78:d2:e3:1c:e0:1b:0a:c8:67:d8:19:
41:d3:58:cf:01:da:ba:5e:ad:5d:6c:ab:a4:ca:fe:92:db:9a:
72:20:63:f6:57:72:a5:ae:7d:d5:f8:22:3f:75:50:c0:2d:f2:
ed:68:24:ee:88:9e:5a:9b:8a:7d:f0:15:71:07:82:1b:40:2f:
36:1f:f6:e5:cf:af:8e:ab:a2:fd:76:57:ca:91:26:39:f5:a1:
a3:cb:d5:fb:ab:87:93:81:54:d5:e3:82:03:a9:a2:77:a0:a9:
26:b6:f6:a7:61:33:a8:8b:bf:75:d9:6b:78:af:ef:87:e9:a1:
45:73:1d:5c:36:c2:4d:3e:5e:d5:bf:45:e8:ad:97:17:9e:3c:
d8:9d:db:6a:71:be:b7:cd:69:d5:6c:7a:4c:cf:1a:76:2d:1b:
97:0f:69:e6:f6:81:0e:9d:cf:a1:d6:2c:73:a4:5b:51:37:85:
2d:c4:3c:12:b1:6b:cf:88:bb:ef:4a:b1:e9:5f:de:45:3c:ea:
c3:be:b5:b2:86:58:e3:b6:60:59:07:1b:72:f4:5b:a2:d9:50:
08:6b:b1:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:31:29 2025 by rpki-client