Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/d1f89c-1909-4995-8dd1-a1056f589354/1/tyC-m1eyWx7aP4EJLgC0U4vosp0.mft
File: tyC-m1eyWx7aP4EJLgC0U4vosp0.mft (raw, json)
Hash identifier: AvU6rA4qGYFFCkp27zOpDL7+IsRq8tbgD32lHDEh3jg=
Subject key identifier: A2:31:82:E9:DF:8B:D4:3A:A9:21:62:91:A7:76:0C:F2:EC:7E:FD:C3
Authority key identifier: B7:20:BE:9B:57:B2:5B:1E:DA:3F:81:09:2E:00:B4:53:8B:E8:B2:9D
Certificate issuer: /CN=b720be9b57b25b1eda3f81092e00b4538be8b29d
Certificate serial: 01984588469C266394FAE1D9DEC70A707178
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tyC-m1eyWx7aP4EJLgC0U4vosp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/d1f89c-1909-4995-8dd1-a1056f589354/1/tyC-m1eyWx7aP4EJLgC0U4vosp0.mft
Manifest number: 158B
Signing time: Sat 26 Jul 2025 07:00:15 +0000
Manifest this update: Sat 26 Jul 2025 07:00:15 +0000
Manifest next update: Sun 27 Jul 2025 07:00:15 +0000
Files and hashes: 1: tyC-m1eyWx7aP4EJLgC0U4vosp0.crl (hash: eGt/ZNCEI80R7846Zi7p07OoTwDXCQILzjbFexwIL3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/d1f89c-1909-4995-8dd1-a1056f589354/1/tyC-m1eyWx7aP4EJLgC0U4vosp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/d1f89c-1909-4995-8dd1-a1056f589354/1/tyC-m1eyWx7aP4EJLgC0U4vosp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/tyC-m1eyWx7aP4EJLgC0U4vosp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:88:46:9c:26:63:94:fa:e1:d9:de:c7:0a:70:71:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b720be9b57b25b1eda3f81092e00b4538be8b29d
Validity
Not Before: Jul 26 07:00:15 2025 GMT
Not After : Jul 27 07:00:15 2025 GMT
Subject: CN=a23182e9df8bd43aa9216291a7760cf2ec7efdc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:cc:cd:11:7d:a5:44:a6:c0:2e:0a:db:0d:5e:
01:91:33:25:e7:98:61:7f:17:30:8c:4a:2c:09:41:
9e:b4:5d:08:99:c9:2b:28:78:19:97:5f:9e:02:73:
df:32:06:70:57:5a:73:68:21:8e:76:08:53:f3:9a:
d1:0c:5f:81:00:7d:e7:ff:c1:f3:cd:1b:09:9c:26:
a2:9e:01:0c:a8:cd:ca:ba:06:73:04:9d:8e:e3:00:
1e:a2:63:7b:ed:24:63:96:8a:bd:0a:65:a3:9b:05:
60:f3:c8:e8:90:8b:57:26:81:b8:27:c9:f7:30:85:
0a:14:9f:cb:0f:1c:ff:27:0d:f5:70:a4:c5:e9:b5:
fb:ae:86:17:48:fe:c1:e5:59:f5:c6:f7:2b:e4:8d:
d9:55:a7:b4:39:40:4c:9c:79:d1:89:ad:1e:b6:cd:
d5:cd:79:b2:52:35:39:1d:d7:1a:2d:d0:5f:8e:04:
c6:71:f3:27:c5:cb:6d:c6:60:7a:7b:96:31:86:1f:
e1:ba:a4:ed:8c:11:84:f6:ed:5b:73:da:ec:6b:a6:
98:05:6e:af:9e:cd:bc:99:d7:9c:a2:6f:40:b1:a3:
3b:e5:83:b8:90:a5:03:e5:d2:ba:c0:ef:4f:9d:fc:
6c:f7:da:bf:b8:d1:3d:10:85:81:cd:86:a5:e8:9b:
bc:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:31:82:E9:DF:8B:D4:3A:A9:21:62:91:A7:76:0C:F2:EC:7E:FD:C3
X509v3 Authority Key Identifier:
keyid:B7:20:BE:9B:57:B2:5B:1E:DA:3F:81:09:2E:00:B4:53:8B:E8:B2:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tyC-m1eyWx7aP4EJLgC0U4vosp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/d1f89c-1909-4995-8dd1-a1056f589354/1/tyC-m1eyWx7aP4EJLgC0U4vosp0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/d1f89c-1909-4995-8dd1-a1056f589354/1/tyC-m1eyWx7aP4EJLgC0U4vosp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:83:08:73:f6:c6:b7:ed:2e:3b:f1:59:ee:07:5c:31:63:fc:
5f:9f:d5:66:29:57:99:5e:d4:75:aa:3d:1a:17:4e:16:11:70:
5f:f7:f1:30:1a:98:d0:12:8c:0d:30:86:8d:25:8b:2d:7b:a1:
70:6b:98:c0:05:ba:4c:3a:7c:9c:c3:6f:83:cb:22:bf:0e:d8:
84:94:56:32:9c:a9:a8:5e:a8:e3:d1:13:6b:48:1a:e7:cd:81:
f8:87:ba:20:57:1c:05:8e:0a:74:c2:41:0f:b4:e3:57:68:54:
93:1e:ee:dd:51:18:d3:05:14:6f:12:9b:64:d0:45:1d:30:25:
70:42:0a:42:26:5b:97:cc:bc:d0:dc:6d:50:b5:36:76:e2:58:
6e:14:da:a6:a0:b4:a1:35:08:a8:5a:00:7e:2b:0e:d8:ed:dd:
2b:ff:90:a2:06:0b:01:0d:2c:22:16:f2:2d:e4:20:df:f7:0c:
4a:ca:f8:55:94:22:01:27:c9:09:da:a1:bb:a8:87:b8:b5:f0:
3f:85:d8:d0:ef:8c:a9:a3:cb:9d:2e:98:1d:05:28:04:fb:98:
a8:7c:bc:1f:fb:81:32:01:a8:6c:ca:ba:a0:82:cb:e7:22:a8:
40:bf:0a:ba:c1:04:ae:61:bc:65:2d:b5:7b:8e:c5:e4:40:05:
15:2c:f3:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:27:44 2025 by rpki-client