Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/c1d940-044d-49c4-a7a1-a0076679be60/1/TCYZGbVcLAj3Klqx0OsYXuEr3_c.mft
File: TCYZGbVcLAj3Klqx0OsYXuEr3_c.mft (raw, json)
Hash identifier: md4JizGrLRBtoZTacdhHCvXMn0RaQQd0LkeVoMsQ2ZI=
Subject key identifier: 68:52:AE:39:F3:E9:15:E0:EF:39:31:21:FD:2C:EF:00:B4:57:E3:B6
Authority key identifier: 4C:26:19:19:B5:5C:2C:08:F7:2A:5A:B1:D0:EB:18:5E:E1:2B:DF:F7
Certificate issuer: /CN=4c261919b55c2c08f72a5ab1d0eb185ee12bdff7
Certificate serial: 01984B53DD11C59D2B5D7743C86AFA08A3A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TCYZGbVcLAj3Klqx0OsYXuEr3_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/c1d940-044d-49c4-a7a1-a0076679be60/1/TCYZGbVcLAj3Klqx0OsYXuEr3_c.mft
Manifest number: 1601
Signing time: Sun 27 Jul 2025 10:00:43 +0000
Manifest this update: Sun 27 Jul 2025 10:00:43 +0000
Manifest next update: Mon 28 Jul 2025 10:00:43 +0000
Files and hashes: 1: 35EW9mUAS2KwaYDPUieiupydDBY.roa (hash: V/BNRylyiFUELWt9i2pyrF3sOU/lNLQC8epYI7MQKPY=)
2: TCYZGbVcLAj3Klqx0OsYXuEr3_c.crl (hash: 2jMsSPqqT87qOW1cXl1AMp/D+UijHV5oIrrEVfiXOSA=)
3: q0NSZKvbuZKPsTOzfMB4PKlh9Ys.roa (hash: jHJ+k8Z1pg8+GnjSpwYDBxeFhhnBTCkhDCcx/6sq1Z4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/c1d940-044d-49c4-a7a1-a0076679be60/1/TCYZGbVcLAj3Klqx0OsYXuEr3_c.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/c1d940-044d-49c4-a7a1-a0076679be60/1/TCYZGbVcLAj3Klqx0OsYXuEr3_c.mft
rsync://rpki.ripe.net/repository/DEFAULT/TCYZGbVcLAj3Klqx0OsYXuEr3_c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:53:dd:11:c5:9d:2b:5d:77:43:c8:6a:fa:08:a3:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c261919b55c2c08f72a5ab1d0eb185ee12bdff7
Validity
Not Before: Jul 27 10:00:43 2025 GMT
Not After : Jul 28 10:00:43 2025 GMT
Subject: CN=6852ae39f3e915e0ef393121fd2cef00b457e3b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:ac:b4:45:22:e6:c2:f2:06:0a:20:8c:40:9b:
9b:fd:9b:6b:45:22:de:b1:08:f3:cc:94:0b:ec:13:
86:5b:6e:ac:92:4a:6b:c6:03:18:10:95:c0:0b:02:
fb:74:34:2e:18:b0:f3:05:3f:32:34:0d:4a:29:15:
dc:1d:eb:d5:23:e1:58:2f:ae:6e:6c:e2:6e:95:55:
11:31:41:37:28:f1:ec:16:d2:6e:08:64:e3:59:63:
5d:e9:8a:9f:e3:86:ad:f5:1e:bf:56:87:6b:5a:90:
89:7c:49:05:6e:f3:4b:e2:7b:c9:49:bb:ee:26:d1:
c6:50:07:a5:fb:d5:d1:f9:3f:2a:47:13:c1:6b:db:
03:51:14:64:84:fa:5f:4e:ef:60:a8:95:11:e5:69:
d8:3c:4c:2f:c8:a0:9e:b9:51:06:de:98:9b:b3:f4:
93:f9:b6:8e:fd:a2:12:7d:18:e0:19:6a:97:d6:b7:
a5:bb:bd:2d:72:d2:c4:f2:e0:73:22:92:78:db:63:
2f:11:c5:3c:02:3c:79:a1:59:22:5f:d7:b5:96:22:
9f:4d:fa:9c:91:f3:de:8a:9d:2c:33:50:b8:98:fb:
b2:36:f3:9e:8c:80:03:69:a7:6e:4f:e5:5f:1e:a9:
53:e8:bc:71:e8:cf:c2:63:8e:23:15:bc:53:15:33:
bf:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:52:AE:39:F3:E9:15:E0:EF:39:31:21:FD:2C:EF:00:B4:57:E3:B6
X509v3 Authority Key Identifier:
keyid:4C:26:19:19:B5:5C:2C:08:F7:2A:5A:B1:D0:EB:18:5E:E1:2B:DF:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TCYZGbVcLAj3Klqx0OsYXuEr3_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/c1d940-044d-49c4-a7a1-a0076679be60/1/TCYZGbVcLAj3Klqx0OsYXuEr3_c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/c1d940-044d-49c4-a7a1-a0076679be60/1/TCYZGbVcLAj3Klqx0OsYXuEr3_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:97:a8:53:c0:9e:7b:8b:a3:c7:1b:b9:1c:bf:a9:b0:8d:c5:
24:87:c0:01:0a:b9:12:7d:cd:c9:45:4f:f6:c8:e1:06:c2:20:
0b:5d:c5:62:4e:52:77:fe:1f:39:6d:cc:99:1c:45:97:97:33:
c5:06:23:b3:d8:e4:ec:2e:3e:40:51:45:72:f0:41:e5:0b:2c:
fe:22:ec:7b:96:0b:6f:aa:a9:2a:56:99:a4:db:1f:19:51:7e:
74:c1:ee:ff:e8:9f:d2:dd:4c:0f:c4:bc:a0:a7:20:fd:f1:c8:
09:74:c3:5f:25:57:ea:22:bd:a9:39:47:be:81:c9:e0:8f:91:
0e:99:e4:44:03:b9:76:e7:bf:e3:24:b4:b4:4c:34:b5:8d:2c:
b5:32:34:d9:5b:cb:22:41:74:d8:94:4a:f5:f1:dd:81:98:f6:
89:bb:d0:36:c4:39:23:32:d6:e3:2e:d6:f5:7a:a6:4d:ae:92:
55:14:0b:69:c0:c8:0d:f0:37:1e:a8:9f:c2:75:75:8e:ce:b7:
e8:b8:02:5e:2d:95:3c:e6:81:13:a9:87:07:b2:4d:14:06:d7:
e8:a0:4e:7b:c2:b5:91:66:b6:2b:7b:3e:ae:f9:96:72:1d:70:
62:96:b9:27:f3:71:65:93:16:5e:66:fa:02:3f:3f:88:d6:25:
d3:b7:40:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 13:07:54 2025 by rpki-client