Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.mft
File: TzYQM0T807V1ny2z88cHE3b54jM.mft (raw, json)
Hash identifier: XtxNoKTo13AjP04O4K4z7GIO+tc87BzUQYDh84Stfhs=
Subject key identifier: 8F:76:AD:53:18:0F:31:38:CB:30:A3:BB:28:1E:03:D5:AC:1C:52:A3
Authority key identifier: 4F:36:10:33:44:FC:D3:B5:75:9F:2D:B3:F3:C7:07:13:76:F9:E2:33
Certificate issuer: /CN=4f36103344fcd3b5759f2db3f3c7071376f9e233
Certificate serial: 01993680B424AB6E6439E481912359FDCB13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TzYQM0T807V1ny2z88cHE3b54jM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.mft
Manifest number: 1669
Signing time: Thu 11 Sep 2025 02:00:28 +0000
Manifest this update: Thu 11 Sep 2025 02:00:28 +0000
Manifest next update: Fri 12 Sep 2025 02:00:28 +0000
Files and hashes: 1: 8Wt50oYgSIhV5-nromefXM1xUHs.roa (hash: nonj7X6EJpkPkTZ26/d/JTxCuBr7E4OqIEl5kLX7Uvc=)
2: 8_cQRjzqzZHtBUadp-m1RHbfYtA.roa (hash: UqDtwYBpkHo94AcNyXlmGDGQI5vQH42VfJTVEsv7Dqg=)
3: LlXFwn2Cp-oz5_wkoV4hnOjpZhc.roa (hash: b+9t4WdjfYrQBYgVT5TU7qZAYZFFGjvTZY/AWbdEORo=)
4: TzYQM0T807V1ny2z88cHE3b54jM.crl (hash: JNEImMTA7v3Yk7i5bqYaTxavlsRzxigoNOo6WmSzPxk=)
5: X73zSfeynuQ2HFhZg92JJjuC-hI.roa (hash: S3jxFVJaRrRBYwj6SGNBku30PnQhyId+dYaYtS51gvo=)
6: qzzHZUBjcSRGFasL_IeeyUOUJ98.roa (hash: Lhbg0pCg1KfB+dSdb+vO645LuzkQlZQdXs3opMNsPwc=)
7: uFl9Jbyr6wsOz0RTyXyU1uLpiuQ.roa (hash: IIGP5wcOQKkgCwi0o8TwNvlGqyYDZZaNOwMVkOIQtWw=)
8: ugnRmlrkR8TJKKb_eVy88x5cRBU.roa (hash: wA1+l0+3DAminFs23I5vSPrzOSbWOqFz2PTbS6VlnsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.mft
rsync://rpki.ripe.net/repository/DEFAULT/TzYQM0T807V1ny2z88cHE3b54jM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 02:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:36:80:b4:24:ab:6e:64:39:e4:81:91:23:59:fd:cb:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f36103344fcd3b5759f2db3f3c7071376f9e233
Validity
Not Before: Sep 11 02:00:28 2025 GMT
Not After : Sep 12 02:00:28 2025 GMT
Subject: CN=8f76ad53180f3138cb30a3bb281e03d5ac1c52a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a0:ce:3e:9f:b1:49:55:57:6d:57:64:19:07:
c2:59:3e:d0:30:98:8e:e3:ff:69:73:4d:ac:cb:a0:
67:f5:e4:74:74:51:91:e6:aa:5b:4b:7f:34:db:7e:
ac:39:60:6f:9f:d4:91:48:78:01:fc:ff:db:ea:23:
ed:91:81:20:d9:06:a7:9f:8c:9d:a1:77:ba:de:60:
1c:97:ab:b4:5b:21:73:5a:90:69:99:66:66:54:31:
3b:30:91:42:6a:0f:d2:4a:bf:c0:a4:6f:01:07:66:
38:40:c0:80:3c:98:6d:7f:92:84:cf:06:db:77:02:
87:2f:51:a3:67:c6:71:21:0e:2c:2c:49:bc:1e:d7:
0e:24:68:ac:78:02:e1:a0:51:c9:81:65:32:c6:09:
b4:9a:1e:43:e0:18:9f:fd:e1:f9:ec:52:56:90:9a:
f5:43:e3:1b:88:fd:a4:2d:d6:1b:37:15:27:61:77:
54:42:b8:38:a6:9e:c7:e8:ff:63:9d:df:48:a6:50:
ee:09:a3:83:2b:25:c0:87:9e:c1:1b:93:68:63:69:
ba:fe:bf:80:e3:22:17:f6:ec:81:cd:3f:91:4d:a6:
0c:c9:62:65:aa:b1:96:ac:fd:a0:e5:d6:40:b9:7f:
e0:3c:42:35:45:ee:fb:eb:68:b4:34:e9:b7:e0:57:
a1:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:76:AD:53:18:0F:31:38:CB:30:A3:BB:28:1E:03:D5:AC:1C:52:A3
X509v3 Authority Key Identifier:
keyid:4F:36:10:33:44:FC:D3:B5:75:9F:2D:B3:F3:C7:07:13:76:F9:E2:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TzYQM0T807V1ny2z88cHE3b54jM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:b2:3a:d6:8c:4e:3d:16:1b:37:22:96:c2:76:f1:e2:83:b5:
db:c9:36:e1:a3:cb:63:3c:b8:b7:7d:65:8b:e3:81:2a:71:36:
b8:74:1e:76:b4:77:4c:54:65:17:66:cd:48:1d:1b:9f:7a:eb:
49:92:91:c6:10:f7:85:63:be:3b:61:32:a9:3e:ee:75:55:6f:
f2:46:07:95:a5:df:08:ed:a5:12:88:1b:e0:7a:94:14:03:a5:
c2:6b:16:6d:55:b1:9d:0a:ee:76:25:04:6a:b3:e1:eb:60:53:
57:79:89:b5:2b:67:41:30:51:ed:c3:ac:a0:4e:71:79:ef:a1:
ec:9e:54:86:ee:e0:d0:52:38:c1:2e:aa:05:65:50:9c:1b:4a:
9f:03:0f:6a:58:ba:3a:f2:99:45:a5:6e:93:38:9b:6a:a1:b2:
67:83:72:be:ba:7d:f4:4b:d0:28:e3:92:5e:5e:92:92:90:8a:
03:0e:1e:a8:30:d0:1e:07:c6:ce:a8:bd:41:d8:55:07:93:7e:
35:d4:0d:a6:fe:db:7c:a5:2c:a4:00:26:e9:ac:b0:98:ca:cf:
9f:25:58:69:14:2d:95:09:b1:fd:45:ca:2b:1d:58:ae:ef:58:
4e:a7:bf:f1:81:1b:a5:65:0b:17:55:42:f6:d8:29:5b:8b:f6:
2d:00:91:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 07:19:16 2025 by rpki-client