
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/4c3e19-a489-4e3a-a3a2-7e52e749c3ad/1/tYe8Eust4poQJrj1a-jUafL1jPM.mft
File: tYe8Eust4poQJrj1a-jUafL1jPM.mft (raw, json)
Hash identifier: JMKG03SqrSsv2Wk5NqF3Zkr4dbrFETPpIH7vJJCZ+4w=
Subject key identifier: DC:08:AB:79:A5:65:87:6D:65:34:54:EA:EE:B2:64:D5:CA:D3:E5:69
Authority key identifier: B5:87:BC:12:EB:2D:E2:9A:10:26:B8:F5:6B:E8:D4:69:F2:F5:8C:F3
Certificate issuer: /CN=b587bc12eb2de29a1026b8f56be8d469f2f58cf3
Certificate serial: 01984EC2886C8F47CA549236BD2FCB89A519
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tYe8Eust4poQJrj1a-jUafL1jPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/4c3e19-a489-4e3a-a3a2-7e52e749c3ad/1/tYe8Eust4poQJrj1a-jUafL1jPM.mft
Manifest number: 1603
Signing time: Mon 28 Jul 2025 02:00:28 +0000
Manifest this update: Mon 28 Jul 2025 02:00:28 +0000
Manifest next update: Tue 29 Jul 2025 02:00:28 +0000
Files and hashes: 1: SRbcYTDvBK2K42GBZURfc-9owLk.roa (hash: ou7G18aw8/QVFexo/f3lobAxj/5Hzi02IWmge/V7dxQ=)
2: tYe8Eust4poQJrj1a-jUafL1jPM.crl (hash: socKNw5Ek4mfIInowWnaTPhGWaVLqC3zGs0gkjL++4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/4c3e19-a489-4e3a-a3a2-7e52e749c3ad/1/tYe8Eust4poQJrj1a-jUafL1jPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/4c3e19-a489-4e3a-a3a2-7e52e749c3ad/1/tYe8Eust4poQJrj1a-jUafL1jPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/tYe8Eust4poQJrj1a-jUafL1jPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4e:c2:88:6c:8f:47:ca:54:92:36:bd:2f:cb:89:a5:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b587bc12eb2de29a1026b8f56be8d469f2f58cf3
Validity
Not Before: Jul 28 02:00:28 2025 GMT
Not After : Jul 29 02:00:28 2025 GMT
Subject: CN=dc08ab79a565876d653454eaeeb264d5cad3e569
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:05:74:4a:fd:9e:67:a0:ae:b1:d7:7a:01:19:
0f:ff:d4:48:2b:9e:ed:f8:d1:f6:70:b4:9e:cc:fb:
0e:38:46:10:ea:17:a1:98:b0:40:a9:4b:35:15:23:
9d:79:8d:ac:fe:4e:1e:23:f1:e9:21:d4:f6:d0:fc:
d7:a9:90:62:49:22:76:f0:08:18:5a:19:f6:0c:e0:
5f:a1:ce:d7:f3:65:07:62:25:39:52:8f:71:1b:1d:
4f:7d:5f:90:a0:17:84:96:f2:2a:10:e8:f6:62:93:
b1:9b:35:66:c0:64:ee:37:bf:1a:d1:09:aa:e2:9a:
8d:a9:0c:4e:6f:e7:1c:16:f1:dd:b5:5d:65:49:5b:
50:bd:47:18:29:e9:ab:5b:a6:ad:6b:81:d8:21:65:
d6:33:90:43:31:d0:d2:23:63:63:71:20:62:4d:c4:
41:5c:63:40:76:82:01:3f:e1:cd:17:59:a8:32:b3:
53:02:57:f6:ad:7c:83:bc:b3:39:6a:bc:d4:94:52:
a9:9b:00:0d:78:74:a3:11:30:87:b0:38:de:eb:0f:
f0:df:63:81:94:d8:1a:fc:27:ca:53:51:a6:ad:f5:
6e:c3:9e:a4:8f:45:5f:c0:91:2b:13:eb:49:3e:fe:
51:35:9d:6a:65:89:af:5f:a6:2b:c7:b5:ca:1b:a1:
e6:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:08:AB:79:A5:65:87:6D:65:34:54:EA:EE:B2:64:D5:CA:D3:E5:69
X509v3 Authority Key Identifier:
keyid:B5:87:BC:12:EB:2D:E2:9A:10:26:B8:F5:6B:E8:D4:69:F2:F5:8C:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tYe8Eust4poQJrj1a-jUafL1jPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/4c3e19-a489-4e3a-a3a2-7e52e749c3ad/1/tYe8Eust4poQJrj1a-jUafL1jPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/4c3e19-a489-4e3a-a3a2-7e52e749c3ad/1/tYe8Eust4poQJrj1a-jUafL1jPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:66:00:88:9b:6e:cb:c5:99:88:4e:36:24:09:99:1b:f0:13:
60:58:86:3d:31:80:c8:2d:22:da:a4:1b:1f:c5:15:ce:01:df:
25:da:25:27:a5:0c:0b:d1:b1:a4:33:eb:85:99:df:f4:05:0c:
69:4b:35:48:b1:33:b5:4c:49:34:5a:e2:fa:a9:d6:d0:11:be:
ca:fc:1b:fd:e5:52:53:64:fe:96:c0:53:f0:e2:94:19:da:f9:
8c:9a:1f:68:58:0c:7f:c2:45:fd:37:ab:d1:81:f0:29:38:d7:
93:3a:a3:91:2f:3a:8f:e4:84:d7:b9:25:7c:ec:58:de:a7:60:
4d:b0:d1:61:7c:c6:c8:5a:3e:77:29:35:18:72:af:c0:c2:62:
a8:7e:13:dd:f0:78:35:ac:95:a8:15:22:1c:c6:ba:bf:32:56:
13:ff:71:54:36:a4:85:97:f3:10:39:b3:49:b4:63:1d:f1:57:
66:a8:c0:8a:45:84:60:11:4c:e8:50:b4:47:7f:cf:1c:ac:47:
cb:f8:e0:dd:e5:dd:f3:e8:c2:4a:39:71:fd:b0:7b:1a:3e:77:
69:6d:48:b8:88:7f:2e:0c:c7:54:c5:ed:e2:f5:95:bf:30:33:
e8:3b:e5:b0:82:97:52:61:c8:4e:ea:d8:58:89:4d:4d:26:ed:
5a:90:13:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 05:44:02 2025 by rpki-client