Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/767119-28aa-4339-b741-4eeed8a4308b/1/TlqjjuoyTivXq2Qn51lqn6QdsOM.mft
File: TlqjjuoyTivXq2Qn51lqn6QdsOM.mft (raw, json)
Hash identifier: aWizsSwFGOwkrclQ+E8iekEGRMIL9w99zAU3V/Jq8dA=
Subject key identifier: DB:66:60:F4:7A:5A:B5:C3:EC:D7:76:38:3D:79:B3:67:CF:88:02:0B
Authority key identifier: 4E:5A:A3:8E:EA:32:4E:2B:D7:AB:64:27:E7:59:6A:9F:A4:1D:B0:E3
Certificate issuer: /CN=4e5aa38eea324e2bd7ab6427e7596a9fa41db0e3
Certificate serial: 019921B14F0EC79A62637881C292B4670051
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TlqjjuoyTivXq2Qn51lqn6QdsOM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/767119-28aa-4339-b741-4eeed8a4308b/1/TlqjjuoyTivXq2Qn51lqn6QdsOM.mft
Manifest number: 1675
Signing time: Sun 07 Sep 2025 01:01:32 +0000
Manifest this update: Sun 07 Sep 2025 01:01:32 +0000
Manifest next update: Mon 08 Sep 2025 01:01:32 +0000
Files and hashes: 1: GE0QPlemROw8Sbhr36vqfxvh7PA.roa (hash: +MZLj56FBFDLK0DCRu2QzT8kaBrzw0Ux8MFgsr68gZ8=)
2: TlqjjuoyTivXq2Qn51lqn6QdsOM.crl (hash: nbrmWUe6sq2VNj/o9UFo4qXQ+uTZKsnSC72NciJ/iQg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/767119-28aa-4339-b741-4eeed8a4308b/1/TlqjjuoyTivXq2Qn51lqn6QdsOM.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/767119-28aa-4339-b741-4eeed8a4308b/1/TlqjjuoyTivXq2Qn51lqn6QdsOM.mft
rsync://rpki.ripe.net/repository/DEFAULT/TlqjjuoyTivXq2Qn51lqn6QdsOM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b1:4f:0e:c7:9a:62:63:78:81:c2:92:b4:67:00:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e5aa38eea324e2bd7ab6427e7596a9fa41db0e3
Validity
Not Before: Sep 7 01:01:32 2025 GMT
Not After : Sep 8 01:01:32 2025 GMT
Subject: CN=db6660f47a5ab5c3ecd776383d79b367cf88020b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:2b:8b:b4:d1:29:12:2d:6f:3a:5a:2a:8a:10:
bf:33:a2:0a:51:ff:29:c3:b5:47:e9:36:1a:64:cd:
b2:62:e5:93:9b:34:bc:1a:c6:fc:3d:9d:97:9f:5e:
d3:b1:5e:4d:f8:bb:25:69:1a:b0:db:6b:be:7d:36:
02:5d:44:66:aa:7c:97:1f:6a:c5:6f:a0:c8:b6:23:
c6:3d:a6:b1:08:00:ae:82:73:06:ce:2f:00:d2:99:
b1:6d:c5:de:62:9f:43:fd:f3:d0:1d:ed:c8:f4:ca:
7d:4b:16:5a:d0:ac:a4:4d:4d:a4:59:99:b9:a5:03:
f4:41:a6:be:b7:36:ca:0f:c9:de:7b:4c:d2:8d:f0:
56:fa:1d:e3:d1:dd:78:9b:fe:0a:f4:71:37:b2:b3:
7b:b1:2b:31:4e:f4:c8:5c:72:ae:cb:ed:a6:c1:86:
b6:92:73:89:36:e3:1c:b2:9e:9d:26:4d:3b:11:b8:
16:11:f9:1b:2e:4b:6e:0b:56:f6:49:8d:58:ac:7b:
e7:92:fa:61:62:fc:f9:3c:16:bd:26:3b:fd:af:40:
04:d5:5b:0e:30:b8:c4:79:73:72:fb:c2:99:28:8a:
f7:e6:7d:67:bc:1e:5e:eb:14:34:44:3e:04:20:a7:
ee:9e:17:83:10:66:d8:13:93:8b:04:53:cd:48:c1:
c8:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:66:60:F4:7A:5A:B5:C3:EC:D7:76:38:3D:79:B3:67:CF:88:02:0B
X509v3 Authority Key Identifier:
keyid:4E:5A:A3:8E:EA:32:4E:2B:D7:AB:64:27:E7:59:6A:9F:A4:1D:B0:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TlqjjuoyTivXq2Qn51lqn6QdsOM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/767119-28aa-4339-b741-4eeed8a4308b/1/TlqjjuoyTivXq2Qn51lqn6QdsOM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/767119-28aa-4339-b741-4eeed8a4308b/1/TlqjjuoyTivXq2Qn51lqn6QdsOM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:0c:07:e5:1d:15:cd:a7:c0:9e:ae:09:54:2d:67:2d:07:50:
2a:38:df:d0:fa:7e:9f:d2:06:0d:c6:05:d4:c2:72:05:59:a1:
ad:96:26:71:5a:11:68:d2:0c:95:06:bd:98:c9:fc:95:d6:b1:
98:fb:19:d6:90:2b:71:ff:bc:44:d3:fb:51:5a:13:1c:a3:db:
1a:b4:c2:25:55:7d:e8:01:04:70:4a:7e:ce:2a:8f:db:00:da:
58:bc:14:21:37:38:d4:c0:e8:8c:5d:c5:07:1a:5c:47:29:e2:
97:bb:f9:b3:6f:06:60:3c:f0:3e:a7:4f:2d:89:41:75:6e:ea:
9e:7d:8e:79:62:83:cc:eb:aa:b0:fe:4c:64:56:00:82:37:38:
1b:3b:dd:ea:31:f0:69:b8:dd:9b:b3:a1:02:c4:6d:3e:a5:b5:
46:bc:dc:b2:95:62:94:fa:98:64:71:5f:a3:40:45:9e:b6:f2:
1d:90:1e:6a:b9:f2:b5:c5:61:41:03:cf:7b:ca:02:71:99:03:
e8:a8:8c:52:59:95:a0:e5:8e:18:24:58:6e:9d:c4:42:ea:54:
e5:81:1b:cd:ac:74:a0:85:28:4c:e6:05:09:ac:5e:97:8f:9c:
27:df:16:a2:22:cf:d8:e5:c7:29:56:38:ab:da:73:ef:67:80:
b4:6c:10:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:09:12 2025 by rpki-client