Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/b9a050-7726-4eb5-b403-7bf724056153/1/TyKDTEeXR7CovQphKfn-ZfgwJtA.mft
File: TyKDTEeXR7CovQphKfn-ZfgwJtA.mft (raw, json)
Hash identifier: O7TKbd4kP7E0P+0CIDJD9KP635qoMgKEylwZbxROk30=
Subject key identifier: 67:5A:74:1A:7B:7E:E0:4E:BC:CA:D6:68:B8:2D:FC:81:F8:F6:BB:8A
Authority key identifier: 4F:22:83:4C:47:97:47:B0:A8:BD:0A:61:29:F9:FE:65:F8:30:26:D0
Certificate issuer: /CN=4f22834c479747b0a8bd0a6129f9fe65f83026d0
Certificate serial: 01984777E4E1B6CB8C96F64FEDF621ECEED2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TyKDTEeXR7CovQphKfn-ZfgwJtA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/b9a050-7726-4eb5-b403-7bf724056153/1/TyKDTEeXR7CovQphKfn-ZfgwJtA.mft
Manifest number: 03EB
Signing time: Sat 26 Jul 2025 16:01:36 +0000
Manifest this update: Sat 26 Jul 2025 16:01:36 +0000
Manifest next update: Sun 27 Jul 2025 16:01:36 +0000
Files and hashes: 1: 5_qRdcU_zBI67bUjjCeGmUT4bso.roa (hash: S33Bj4i6cQIjVG+I+Gmo76E+1aI2U06ldTXtc0u4sXQ=)
2: TyKDTEeXR7CovQphKfn-ZfgwJtA.crl (hash: FskDjnO5/6JaK8MlSb9bVsDtGm/pyux5URMGHVO9ZQQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/b9a050-7726-4eb5-b403-7bf724056153/1/TyKDTEeXR7CovQphKfn-ZfgwJtA.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/b9a050-7726-4eb5-b403-7bf724056153/1/TyKDTEeXR7CovQphKfn-ZfgwJtA.mft
rsync://rpki.ripe.net/repository/DEFAULT/TyKDTEeXR7CovQphKfn-ZfgwJtA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:77:e4:e1:b6:cb:8c:96:f6:4f:ed:f6:21:ec:ee:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f22834c479747b0a8bd0a6129f9fe65f83026d0
Validity
Not Before: Jul 26 16:01:36 2025 GMT
Not After : Jul 27 16:01:36 2025 GMT
Subject: CN=675a741a7b7ee04ebccad668b82dfc81f8f6bb8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:da:f2:31:10:54:ad:83:2c:31:f1:16:d9:4b:
b2:08:75:b9:ed:eb:35:8f:ba:70:61:ae:8d:40:b7:
5a:9f:c9:bb:06:5f:bc:ae:51:60:e1:5f:02:97:de:
ca:10:0f:af:b4:4b:6a:a2:0f:cb:bb:ac:ed:87:6f:
55:0d:35:e6:ec:2b:af:a9:59:08:52:6c:da:b3:ef:
67:ad:ce:78:9f:b3:79:a1:78:0a:c0:13:a6:09:47:
0d:47:4f:16:fa:de:c7:43:e3:3e:94:14:5d:7d:4e:
b2:bb:9c:b7:5e:e9:bb:4f:f4:f9:b3:62:01:ca:fd:
54:17:e3:ca:52:5f:59:8f:15:53:59:ff:ad:37:3f:
07:90:b1:0d:84:a0:de:f0:6f:c7:1a:83:42:0b:42:
16:8e:08:b1:ee:ce:3d:d7:01:e1:9d:e0:0e:f6:1f:
ec:d8:38:dc:78:eb:3e:63:e1:1b:53:f9:c6:5e:25:
26:0b:b5:1a:cf:29:dc:0c:df:ae:cf:3a:7b:f0:f1:
61:4b:57:6b:08:71:a5:7e:10:f1:83:25:66:79:9d:
a1:bb:20:f3:bd:0a:c1:7d:89:2c:56:6a:df:7a:42:
b4:7a:8f:1c:78:11:d1:76:86:21:c3:35:0d:cf:88:
4d:20:ca:e0:d0:ba:e2:e4:26:85:1d:ce:fb:83:cf:
33:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:5A:74:1A:7B:7E:E0:4E:BC:CA:D6:68:B8:2D:FC:81:F8:F6:BB:8A
X509v3 Authority Key Identifier:
keyid:4F:22:83:4C:47:97:47:B0:A8:BD:0A:61:29:F9:FE:65:F8:30:26:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TyKDTEeXR7CovQphKfn-ZfgwJtA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b9a050-7726-4eb5-b403-7bf724056153/1/TyKDTEeXR7CovQphKfn-ZfgwJtA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b9a050-7726-4eb5-b403-7bf724056153/1/TyKDTEeXR7CovQphKfn-ZfgwJtA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:86:d8:71:a1:0b:2a:90:db:4d:5b:15:11:cb:04:a9:db:af:
87:cf:d6:a0:d8:4e:2f:67:0d:0f:b0:c1:c6:00:44:c2:2b:68:
a1:ea:a1:ad:5b:05:14:bd:36:7b:2e:f1:5c:72:63:6d:8b:92:
14:c2:fc:93:43:93:58:c8:22:39:e3:2b:6d:76:90:75:44:e2:
7e:08:9d:c4:db:00:74:22:40:51:a7:4b:9b:23:07:91:19:f7:
8b:f4:f0:b3:02:7f:7b:cd:d4:bc:5c:0f:79:72:df:f8:0a:b1:
c5:3c:2b:e3:21:6b:d5:3a:36:71:b5:0e:04:8d:a4:e7:2b:b0:
0c:af:81:36:0a:bd:d0:b5:73:be:4c:f5:cd:8b:fb:a6:38:a0:
3d:9e:12:aa:d3:48:23:3b:3e:66:96:70:22:d2:4a:ea:9e:0c:
a7:75:4a:ee:d0:11:8d:16:ac:49:25:a6:45:ba:f2:c1:a1:9d:
a2:af:50:f4:6b:5f:f3:52:4a:21:56:7d:c9:62:97:f4:c3:14:
43:e3:f2:35:98:47:2d:0e:f5:3e:13:88:b5:e5:80:f3:cd:e5:
f3:a0:13:d6:b9:d3:fa:5d:6d:cd:7b:6d:8c:b9:b7:64:17:39:
cc:04:f5:18:be:4a:e5:13:f6:08:44:c8:32:23:d5:f2:58:ae:
11:52:4d:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhHd+ThtsuMlvZP7fYh7O7SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMjI4MzRjNDc5NzQ3YjBhOGJkMGE2MTI5ZjlmZTY1Zjgz
MDI2ZDAwHhcNMjUwNzI2MTYwMTM2WhcNMjUwNzI3MTYwMTM2WjAzMTEwLwYDVQQD
Eyg2NzVhNzQxYTdiN2VlMDRlYmNjYWQ2NjhiODJkZmM4MWY4ZjZiYjhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9ryMRBUrYMsMfEW2UuyCHW57es1
j7pwYa6NQLdan8m7Bl+8rlFg4V8Cl97KEA+vtEtqog/Lu6zth29VDTXm7CuvqVkI
Umzas+9nrc54n7N5oXgKwBOmCUcNR08W+t7HQ+M+lBRdfU6yu5y3Xum7T/T5s2IB
yv1UF+PKUl9ZjxVTWf+tNz8HkLENhKDe8G/HGoNCC0IWjgix7s491wHhneAO9h/s
2DjceOs+Y+EbU/nGXiUmC7UazyncDN+uzzp78PFhS1drCHGlfhDxgyVmeZ2huyDz
vQrBfYksVmrfekK0eo8ceBHRdoYhwzUNz4hNIMrg0Lri5CaFHc77g88zWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGdadBp7fuBOvMrWaLgt/IH49ruKMB8GA1UdIwQY
MBaAFE8ig0xHl0ewqL0KYSn5/mX4MCbQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHlLRFRFZVhSN0NvdlFwaEtmbi1aZmd3SnRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9iOWEwNTAtNzcyNi00ZWI1LWI0MDMt
N2JmNzI0MDU2MTUzLzEvVHlLRFRFZVhSN0NvdlFwaEtmbi1aZmd3SnRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS9iOWEwNTAtNzcyNi00ZWI1LWI0MDMtN2JmNzI0MDU2MTUz
LzEvVHlLRFRFZVhSN0NvdlFwaEtmbi1aZmd3SnRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASYbYcaEL
KpDbTVsVEcsEqduvh8/WoNhOL2cND7DBxgBEwitooeqhrVsFFL02ey7xXHJjbYuS
FML8k0OTWMgiOeMrbXaQdUTifgidxNsAdCJAUadLmyMHkRn3i/TwswJ/e83UvFwP
eXLf+AqxxTwr4yFr1To2cbUOBI2k5yuwDK+BNgq90LVzvkz1zYv7pjigPZ4SqtNI
Izs+ZpZwItJK6p4Mp3VK7tARjRasSSWmRbrywaGdoq9Q9Gtf81JKIVZ9yWKX9MMU
Q+PyNZhHLQ71PhOIteWA883l86AT1rnT+l1tzXttjLm3ZBc5zAT1GL5K5RP2CETI
MiPV8liuEVJNKg==
-----END CERTIFICATE-----
Generated at Sat Jul 26 21:19:24 2025 by rpki-client