Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/5b788e-f847-4df9-9334-964cca722f73/1/TK0YVBTBauXSKaiqK_oV_vxxoiI.mft
File: TK0YVBTBauXSKaiqK_oV_vxxoiI.mft (raw, json)
Hash identifier: uvi6/l2K/B0KCSCfCwdcCfsgnC8l340XneSpKXbmiFg=
Subject key identifier: 85:62:BA:F1:03:01:EE:D0:CE:BC:91:35:CE:05:FE:47:5D:9A:C8:EC
Authority key identifier: 4C:AD:18:54:14:C1:6A:E5:D2:29:A8:AA:2B:FA:15:FE:FC:71:A2:22
Certificate issuer: /CN=4cad185414c16ae5d229a8aa2bfa15fefc71a222
Certificate serial: 019842BEB4A06D4FC1D55B95B5AD2B0B68E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TK0YVBTBauXSKaiqK_oV_vxxoiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/5b788e-f847-4df9-9334-964cca722f73/1/TK0YVBTBauXSKaiqK_oV_vxxoiI.mft
Manifest number: 1591
Signing time: Fri 25 Jul 2025 18:00:50 +0000
Manifest this update: Fri 25 Jul 2025 18:00:50 +0000
Manifest next update: Sat 26 Jul 2025 18:00:50 +0000
Files and hashes: 1: TK0YVBTBauXSKaiqK_oV_vxxoiI.crl (hash: W86l0YFm/FyEOqZPcstUumQ9pRKfY8P/Ca2GimSLHx8=)
2: dxfaqcbOBYRpYzoiD3a-nfzNgyI.roa (hash: 9S4UtPoorxm2Y5jeo5Ht7EgjOkb+pCS05uOlyENLKPI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/5b788e-f847-4df9-9334-964cca722f73/1/TK0YVBTBauXSKaiqK_oV_vxxoiI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/5b788e-f847-4df9-9334-964cca722f73/1/TK0YVBTBauXSKaiqK_oV_vxxoiI.mft
rsync://rpki.ripe.net/repository/DEFAULT/TK0YVBTBauXSKaiqK_oV_vxxoiI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 17:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:42:be:b4:a0:6d:4f:c1:d5:5b:95:b5:ad:2b:0b:68:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cad185414c16ae5d229a8aa2bfa15fefc71a222
Validity
Not Before: Jul 25 18:00:50 2025 GMT
Not After : Jul 26 18:00:50 2025 GMT
Subject: CN=8562baf10301eed0cebc9135ce05fe475d9ac8ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:99:db:97:a1:c6:4b:b2:df:c0:3a:c0:b1:98:
88:32:c7:9e:bd:10:2e:63:81:a6:2e:62:26:91:9c:
4d:98:65:bb:79:6f:d0:9c:18:39:cb:1e:5a:4f:28:
cf:6f:db:7a:c1:f2:91:6c:c1:92:07:de:d9:e6:7c:
c1:8f:9e:03:8c:4c:94:85:a4:19:4e:ec:f7:37:1b:
f1:ef:de:30:f6:da:9f:df:b0:9a:ae:16:dd:5d:6b:
76:cf:7d:09:51:6e:18:2e:53:66:d0:fe:4d:95:c7:
3a:37:3f:31:ee:7b:e5:3f:37:1e:1d:9c:e5:34:1a:
60:27:36:a2:24:ac:9c:68:20:23:94:f8:b9:58:2f:
65:ab:ec:e2:29:52:7b:86:4d:71:47:10:54:56:ef:
ef:76:b4:6c:98:a7:ed:77:30:af:81:72:e4:0a:b7:
2a:f8:a3:6b:4c:26:75:8a:7a:bb:5e:70:61:53:b3:
a2:5c:77:4f:79:7f:73:6d:ec:9c:64:75:c7:a0:28:
bc:03:4e:78:81:c6:a7:81:66:b7:a6:0f:e4:56:ab:
dd:29:85:85:1e:83:c6:b5:67:43:7a:d3:29:81:af:
95:91:d5:89:a8:b8:40:2f:41:7e:a7:fe:da:10:e2:
f3:02:86:ce:27:48:ff:30:01:e2:e1:2d:8a:48:47:
44:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:62:BA:F1:03:01:EE:D0:CE:BC:91:35:CE:05:FE:47:5D:9A:C8:EC
X509v3 Authority Key Identifier:
keyid:4C:AD:18:54:14:C1:6A:E5:D2:29:A8:AA:2B:FA:15:FE:FC:71:A2:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TK0YVBTBauXSKaiqK_oV_vxxoiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5b788e-f847-4df9-9334-964cca722f73/1/TK0YVBTBauXSKaiqK_oV_vxxoiI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5b788e-f847-4df9-9334-964cca722f73/1/TK0YVBTBauXSKaiqK_oV_vxxoiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:26:1d:97:50:2f:fa:65:69:e3:ee:6f:c5:34:b9:47:3d:7d:
79:35:a4:ef:5a:64:be:5a:24:46:79:1d:f2:d1:17:be:e8:d2:
a8:a0:ee:3a:74:c7:b3:40:2d:5e:de:e2:de:49:20:f0:f7:e1:
e8:72:7e:c8:87:43:55:75:27:3d:e8:30:92:d2:e4:69:64:30:
ed:96:dd:35:ae:30:fe:d4:06:59:cf:aa:68:57:f3:88:f6:24:
36:a3:6e:0d:48:59:49:69:7a:5c:0b:dd:85:89:4e:55:f7:38:
28:83:2f:da:e8:95:de:40:81:62:fd:a1:c6:54:84:76:52:aa:
d3:f0:59:6f:b7:90:81:54:21:f8:23:92:da:cf:1c:b1:46:bb:
b6:7e:24:22:58:9f:f7:cb:86:ad:35:26:46:ca:00:9e:23:4a:
a4:32:37:0a:7c:f2:d0:9a:72:0e:b5:96:31:7b:f0:54:ce:a1:
80:b9:98:38:56:00:76:3e:84:c0:b7:bd:0b:3c:30:a9:d8:09:
fe:79:30:63:2f:a1:bb:f3:83:87:9a:df:79:79:0e:f8:b7:2b:
bc:a6:9d:64:12:a6:cd:78:d4:31:26:56:53:24:bc:dc:a9:a8:
ed:b7:2a:99:fc:27:35:7d:32:a5:de:8b:e9:a9:9c:e6:55:1a:
9d:27:6d:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:29:06 2025 by rpki-client