Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/d7fb6d-ebbe-43a2-b119-393c45742259/1/tyDzzrDmtZejgUXFp0M2nH9JZuA.mft
File: tyDzzrDmtZejgUXFp0M2nH9JZuA.mft (raw, json)
Hash identifier: 2QctnJD1f5wCoxp3WdsXHJcfmq2/f1qbBHnVlSabYX0=
Subject key identifier: 74:84:70:DA:E8:E3:EE:82:EB:43:08:16:DE:C4:CC:1D:2F:A3:EB:52
Authority key identifier: B7:20:F3:CE:B0:E6:B5:97:A3:81:45:C5:A7:43:36:9C:7F:49:66:E0
Certificate issuer: /CN=b720f3ceb0e6b597a38145c5a743369c7f4966e0
Certificate serial: 0198C9EDB39D6FCC3E80AF337B292267DC44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tyDzzrDmtZejgUXFp0M2nH9JZuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/d7fb6d-ebbe-43a2-b119-393c45742259/1/tyDzzrDmtZejgUXFp0M2nH9JZuA.mft
Manifest number: 107F
Signing time: Thu 21 Aug 2025 00:00:55 +0000
Manifest this update: Thu 21 Aug 2025 00:00:55 +0000
Manifest next update: Fri 22 Aug 2025 00:00:55 +0000
Files and hashes: 1: ggC5V29BMdNUn59EruOGoGZJaaQ.roa (hash: ttIpUsiJ4qeM8pCSgboK+Vkbkx0DrAYP7DxfAZL+EN4=)
2: tyDzzrDmtZejgUXFp0M2nH9JZuA.crl (hash: DheaIpZVjoIv7DdjyNfibePikQ37A8aXA2YwUSHp2RY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/d7fb6d-ebbe-43a2-b119-393c45742259/1/tyDzzrDmtZejgUXFp0M2nH9JZuA.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/d7fb6d-ebbe-43a2-b119-393c45742259/1/tyDzzrDmtZejgUXFp0M2nH9JZuA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tyDzzrDmtZejgUXFp0M2nH9JZuA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 23:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c9:ed:b3:9d:6f:cc:3e:80:af:33:7b:29:22:67:dc:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b720f3ceb0e6b597a38145c5a743369c7f4966e0
Validity
Not Before: Aug 21 00:00:55 2025 GMT
Not After : Aug 22 00:00:55 2025 GMT
Subject: CN=748470dae8e3ee82eb430816dec4cc1d2fa3eb52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:25:e4:77:1f:18:58:ae:6a:02:f8:33:29:d7:
ef:f1:a7:6b:98:56:f0:27:15:7a:f6:03:84:fc:9c:
1c:6d:fd:86:f2:29:15:b3:a3:78:a4:b2:73:27:a7:
18:03:62:57:94:06:b3:0b:ba:9c:94:b8:e5:ca:4c:
80:ef:33:3f:f5:c1:c0:88:4e:64:aa:92:8d:2a:0b:
8b:e5:49:2f:2b:a9:dd:e9:40:ed:ad:49:80:a4:1c:
db:43:01:76:01:89:31:6d:ab:59:0b:96:fd:76:71:
40:19:51:ca:d2:36:a1:27:f1:71:19:6f:94:53:c0:
81:8a:42:49:5a:ad:18:7d:73:79:f2:23:b7:2a:59:
47:ca:49:e7:0a:ca:f7:c3:a3:4d:99:76:47:62:36:
d1:14:54:7f:55:97:43:42:f8:05:01:e7:18:d5:00:
f6:47:be:b7:d1:ae:57:ae:50:9c:2e:e2:45:de:a0:
84:03:23:b8:f5:af:6d:f2:c5:56:0d:fb:ad:69:1f:
6f:b8:f6:1d:0f:0a:2e:75:9f:4a:ea:f4:ae:94:09:
37:e1:a1:2a:af:80:f9:30:0d:7e:46:9d:ac:be:a0:
7a:3f:29:7d:f4:de:66:3e:13:8c:48:46:4a:fc:09:
6d:6a:d1:bb:dc:8b:30:41:85:40:aa:4c:57:57:7b:
21:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:84:70:DA:E8:E3:EE:82:EB:43:08:16:DE:C4:CC:1D:2F:A3:EB:52
X509v3 Authority Key Identifier:
keyid:B7:20:F3:CE:B0:E6:B5:97:A3:81:45:C5:A7:43:36:9C:7F:49:66:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tyDzzrDmtZejgUXFp0M2nH9JZuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/d7fb6d-ebbe-43a2-b119-393c45742259/1/tyDzzrDmtZejgUXFp0M2nH9JZuA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/d7fb6d-ebbe-43a2-b119-393c45742259/1/tyDzzrDmtZejgUXFp0M2nH9JZuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:cf:50:75:64:d0:47:b6:29:1d:54:1e:de:3d:4f:69:77:5f:
7d:d5:8c:99:74:2e:aa:ae:10:27:c4:7a:b7:9d:80:8a:00:bd:
4a:bd:ef:d8:40:ee:a8:4c:61:36:d1:fb:6b:60:db:4b:ec:7b:
62:49:0f:f2:e1:2b:f5:02:ce:fc:d4:2c:80:36:32:50:69:78:
08:12:f3:08:82:0b:ac:76:26:7c:5b:e7:be:df:ff:34:26:92:
b7:b2:7b:fb:11:7b:f4:c0:62:a0:1a:7b:30:b7:31:6a:6b:ca:
73:be:06:e6:b9:3c:b2:db:7c:bd:71:a7:9d:bb:ec:2f:fd:af:
82:cb:9e:5d:f9:1b:4b:9c:75:ba:f3:46:a2:5d:0c:ee:ce:73:
77:c4:e4:95:42:c8:cf:3d:91:a5:80:04:6c:eb:73:ba:a5:a5:
1b:b7:a4:74:a9:c5:90:be:e3:0f:69:f3:13:a3:0f:ee:7f:b9:
37:a6:a7:eb:be:40:cb:db:2b:8d:ed:9d:59:3c:96:0b:48:bb:
b4:43:62:db:44:9b:d1:16:ec:09:02:8a:57:d0:ed:b4:36:56:
5f:fb:98:4f:e5:30:4b:ca:96:32:85:de:e3:34:60:1a:72:5d:
fb:53:c1:2d:11:64:47:2c:5f:27:db:f2:a8:2d:9e:e9:32:6d:
15:89:87:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 07:20:26 2025 by rpki-client