Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/c1d940-044d-49c4-a7a1-a0076679be60/1/TCYZGbVcLAj3Klqx0OsYXuEr3_c.mft
File: TCYZGbVcLAj3Klqx0OsYXuEr3_c.mft (raw, json)
Hash identifier: /y0+n4Xl2axvXSk1N6v+FTw1jfqmB1IrCB3A34TiuNk=
Subject key identifier: 60:7E:05:AB:29:94:6B:14:8B:4C:5C:7A:20:F5:5C:26:78:8D:C8:83
Authority key identifier: 4C:26:19:19:B5:5C:2C:08:F7:2A:5A:B1:D0:EB:18:5E:E1:2B:DF:F7
Certificate issuer: /CN=4c261919b55c2c08f72a5ab1d0eb185ee12bdff7
Certificate serial: 019935002E57701F42CB4D6521080DB6C01A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TCYZGbVcLAj3Klqx0OsYXuEr3_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/c1d940-044d-49c4-a7a1-a0076679be60/1/TCYZGbVcLAj3Klqx0OsYXuEr3_c.mft
Manifest number: 167A
Signing time: Wed 10 Sep 2025 19:00:28 +0000
Manifest this update: Wed 10 Sep 2025 19:00:28 +0000
Manifest next update: Thu 11 Sep 2025 19:00:28 +0000
Files and hashes: 1: 35EW9mUAS2KwaYDPUieiupydDBY.roa (hash: V/BNRylyiFUELWt9i2pyrF3sOU/lNLQC8epYI7MQKPY=)
2: TCYZGbVcLAj3Klqx0OsYXuEr3_c.crl (hash: 0wSWcD5wH0PLV0lu0mkppku9sl2rQbnUE+ZnFGQ1pQk=)
3: q0NSZKvbuZKPsTOzfMB4PKlh9Ys.roa (hash: jHJ+k8Z1pg8+GnjSpwYDBxeFhhnBTCkhDCcx/6sq1Z4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/c1d940-044d-49c4-a7a1-a0076679be60/1/TCYZGbVcLAj3Klqx0OsYXuEr3_c.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/c1d940-044d-49c4-a7a1-a0076679be60/1/TCYZGbVcLAj3Klqx0OsYXuEr3_c.mft
rsync://rpki.ripe.net/repository/DEFAULT/TCYZGbVcLAj3Klqx0OsYXuEr3_c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 19:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:00:2e:57:70:1f:42:cb:4d:65:21:08:0d:b6:c0:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c261919b55c2c08f72a5ab1d0eb185ee12bdff7
Validity
Not Before: Sep 10 19:00:28 2025 GMT
Not After : Sep 11 19:00:28 2025 GMT
Subject: CN=607e05ab29946b148b4c5c7a20f55c26788dc883
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:06:ef:2e:3e:79:c5:43:b5:46:82:ca:d2:3e:
10:1a:fc:b5:a1:91:87:99:46:a8:c4:d5:50:18:77:
51:3f:cf:83:f3:67:c5:b2:3c:55:f4:6d:01:16:90:
e0:4a:db:1e:93:27:2e:d2:92:0f:d2:1f:2f:8c:2c:
e4:e0:e9:ec:f1:ef:75:41:57:52:f6:f1:51:bf:cd:
ed:6d:66:a1:d0:1a:90:35:b6:8a:21:c7:15:36:6d:
e4:99:6e:1b:2e:45:4d:56:50:e6:80:a8:d9:75:41:
6d:d4:75:20:5d:8d:d4:8a:2b:78:c1:6e:da:ff:f7:
57:bb:35:d8:53:72:3e:43:a9:56:c8:ab:c1:c1:af:
a5:36:89:65:f5:82:b7:43:c6:d0:6c:17:44:35:bc:
1b:a7:08:85:ad:90:74:69:d0:85:92:38:e2:ba:1c:
47:bd:4a:6d:37:48:11:66:dd:46:c1:fa:66:8c:74:
5c:4e:f5:33:26:e2:35:92:52:54:b2:b4:ea:e6:1e:
28:5c:f0:f9:d0:df:fe:95:d1:ed:3c:0f:99:f3:d1:
38:cd:e4:35:5b:88:86:19:37:d2:37:c8:68:29:a1:
e4:fe:e1:a2:eb:ca:25:30:8e:77:21:ac:b6:82:a3:
7b:3f:5d:8c:34:cb:16:3b:8f:58:85:95:82:c6:0e:
2c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:7E:05:AB:29:94:6B:14:8B:4C:5C:7A:20:F5:5C:26:78:8D:C8:83
X509v3 Authority Key Identifier:
keyid:4C:26:19:19:B5:5C:2C:08:F7:2A:5A:B1:D0:EB:18:5E:E1:2B:DF:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TCYZGbVcLAj3Klqx0OsYXuEr3_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/c1d940-044d-49c4-a7a1-a0076679be60/1/TCYZGbVcLAj3Klqx0OsYXuEr3_c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/c1d940-044d-49c4-a7a1-a0076679be60/1/TCYZGbVcLAj3Klqx0OsYXuEr3_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:f5:b0:11:63:02:32:ab:af:1e:f7:75:67:d3:5d:18:91:c7:
c0:08:3f:a8:b8:97:5a:53:80:be:c6:c2:3a:3e:87:a9:ce:6e:
4d:ce:27:b7:c7:59:24:42:33:05:7d:75:be:61:78:1c:ca:a6:
86:3c:53:f6:5d:d3:eb:77:23:e1:e8:1d:17:9e:98:91:00:25:
53:51:09:ca:a9:2b:91:77:cb:66:8d:a7:65:df:a6:e5:0b:f4:
9b:9c:8e:5d:27:67:0e:67:39:0d:9b:14:4a:64:0a:5e:28:d2:
db:8d:21:d8:16:9d:e4:9b:88:fb:ba:b2:83:55:69:89:6c:5d:
49:03:bb:70:cc:8e:67:09:0c:42:dd:8a:af:44:a5:4a:01:af:
fb:91:a8:a8:c0:96:86:8b:ce:27:a0:b3:58:a1:5a:4e:dd:07:
ce:f8:b4:00:87:9d:b5:81:b5:de:d5:fd:8b:6e:de:f8:cd:b0:
82:7f:56:71:a1:23:2b:5a:23:07:fb:dc:01:78:55:a4:1a:af:
67:a3:eb:83:c3:0d:06:29:c7:95:1f:7a:c2:86:4d:7a:ef:bd:
50:4d:59:f4:f5:e3:70:21:77:77:7d:d1:5a:aa:c2:37:91:5b:
bd:2c:97:0d:1b:3c:32:3b:e0:55:7a:85:50:24:bd:9d:c8:3a:
0d:d2:ff:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 23:13:20 2025 by rpki-client