Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/cce5ba-ff93-4438-a8e3-4a637c6d9938/1/TQ1ZQ8JANzDegY4xubX_HYwcnEc.mft
File: TQ1ZQ8JANzDegY4xubX_HYwcnEc.mft (raw, json)
Hash identifier: UDBLE/1MzMie5rC14VhHERQtRCeaKwH5KlS5iqANCAk=
Subject key identifier: 4D:EA:1A:EC:C4:97:5A:C3:06:22:98:70:FA:51:68:00:20:15:56:72
Authority key identifier: 4D:0D:59:43:C2:40:37:30:DE:81:8E:31:B9:B5:FF:1D:8C:1C:9C:47
Certificate issuer: /CN=4d0d5943c2403730de818e31b9b5ff1d8c1c9c47
Certificate serial: 019846641A00E0428E3ED94BCCC8CED8DB2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TQ1ZQ8JANzDegY4xubX_HYwcnEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/cce5ba-ff93-4438-a8e3-4a637c6d9938/1/TQ1ZQ8JANzDegY4xubX_HYwcnEc.mft
Manifest number: 1601
Signing time: Sat 26 Jul 2025 11:00:22 +0000
Manifest this update: Sat 26 Jul 2025 11:00:22 +0000
Manifest next update: Sun 27 Jul 2025 11:00:22 +0000
Files and hashes: 1: TQ1ZQ8JANzDegY4xubX_HYwcnEc.crl (hash: bDmQ6phzO5zAJ2sJHK/OERqY2P9+lWZiaUhptvk928E=)
2: gtQnPoHQAssVploPdQKF3wMqPqg.roa (hash: oTvtYktXpzo6IvRkclIhI8X73gjSVVDXnm/5bjUENeo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/cce5ba-ff93-4438-a8e3-4a637c6d9938/1/TQ1ZQ8JANzDegY4xubX_HYwcnEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/cce5ba-ff93-4438-a8e3-4a637c6d9938/1/TQ1ZQ8JANzDegY4xubX_HYwcnEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/TQ1ZQ8JANzDegY4xubX_HYwcnEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:64:1a:00:e0:42:8e:3e:d9:4b:cc:c8:ce:d8:db:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d0d5943c2403730de818e31b9b5ff1d8c1c9c47
Validity
Not Before: Jul 26 11:00:22 2025 GMT
Not After : Jul 27 11:00:22 2025 GMT
Subject: CN=4dea1aecc4975ac306229870fa51680020155672
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ef:35:d3:7c:be:e4:95:be:cb:ec:ee:63:cf:
12:d3:70:8d:61:c4:b0:26:31:a0:53:70:12:f9:12:
51:95:f0:af:c2:9c:26:fb:98:20:0a:95:d7:a4:b8:
0a:f2:71:62:94:f6:a5:86:74:0c:a6:05:b2:1d:e3:
03:fd:0a:81:0b:12:c9:ac:52:d8:57:26:56:1b:5d:
fd:5c:21:ba:5b:bf:55:89:e3:d8:06:79:65:6c:05:
07:0d:b7:d7:56:1c:e5:0c:e6:71:2c:91:a1:3b:0e:
ef:80:ac:85:9e:1f:07:3f:09:31:f6:91:15:3a:66:
db:86:cd:75:2b:b8:20:c4:ff:b4:7e:a1:f5:57:b2:
aa:43:ff:9f:a3:d2:82:bd:d5:36:a6:30:5a:8d:6e:
82:23:e0:cd:77:06:fd:f8:f6:ea:15:f8:77:37:b6:
93:2c:63:e2:6f:62:63:67:bc:13:dd:1d:bd:54:71:
66:0e:8d:17:4a:c4:ad:6a:11:5e:a4:75:14:1e:d0:
f5:cb:44:6e:b9:2b:43:0b:b8:6b:05:3c:51:2e:cc:
af:2a:4d:03:43:48:19:d7:5c:7b:ec:68:92:61:32:
24:d2:8a:8f:91:8f:9b:16:94:ce:d3:42:bc:4c:32:
69:15:c5:44:67:e3:17:0f:c0:57:43:f9:41:9f:da:
e5:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:EA:1A:EC:C4:97:5A:C3:06:22:98:70:FA:51:68:00:20:15:56:72
X509v3 Authority Key Identifier:
keyid:4D:0D:59:43:C2:40:37:30:DE:81:8E:31:B9:B5:FF:1D:8C:1C:9C:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TQ1ZQ8JANzDegY4xubX_HYwcnEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/cce5ba-ff93-4438-a8e3-4a637c6d9938/1/TQ1ZQ8JANzDegY4xubX_HYwcnEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/cce5ba-ff93-4438-a8e3-4a637c6d9938/1/TQ1ZQ8JANzDegY4xubX_HYwcnEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:fb:d2:c2:81:eb:fa:1d:1a:d2:ee:41:94:d5:11:8c:2f:16:
9e:1a:25:e8:3a:0e:ae:04:29:89:b8:49:31:00:b4:fb:70:6c:
69:74:b4:f9:3b:78:13:c3:60:1e:ff:cd:40:30:23:6d:f6:1e:
fa:5b:1f:e0:6a:f5:b7:81:2a:ce:5f:91:17:36:f6:b2:bc:a8:
24:0c:01:c8:79:ff:95:d0:d2:04:59:82:40:b1:e1:a8:40:f5:
3f:16:e2:d2:94:a7:3a:f3:eb:0a:09:f8:fb:91:af:aa:1b:32:
38:a1:47:b4:de:ea:e5:92:8c:a5:e7:11:55:0b:bc:68:4f:bd:
dc:a6:69:cf:4c:75:7c:72:cb:9d:8b:43:1b:a2:ca:4d:e4:93:
2b:7a:dc:fa:31:6d:0d:7e:11:18:10:98:4d:9f:cc:27:5b:19:
15:e7:22:5c:6d:19:6e:93:19:04:5b:ef:ee:47:7c:dd:02:f7:
ed:26:4b:42:b3:71:45:6b:5c:9a:b0:ed:2d:78:1d:c3:4e:53:
a6:5a:4d:9e:f5:a0:ed:de:49:2a:44:bc:ff:17:5f:e8:d6:f3:
cc:6f:43:cc:29:c2:97:ea:82:76:33:ae:5b:40:ca:83:d7:4d:
dd:b2:2b:1f:69:93:74:5c:41:20:54:df:2b:85:9e:29:7a:57:
9b:b7:08:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 19:02:42 2025 by rpki-client