Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/1e1ac6-fcd6-4ae8-ad77-51e4bba6bf5b/1/Ty87yZp5UD4JdXR36O9kPhGIbIs.mft
File: Ty87yZp5UD4JdXR36O9kPhGIbIs.mft (raw, json)
Hash identifier: fyzwmwLfhBnpXLaNA1jNjBzLR+EibB7L1VpjpNnbWn8=
Subject key identifier: E8:34:79:DB:6A:F5:E4:18:A1:1A:C6:61:71:8B:34:D1:D6:00:C7:37
Authority key identifier: 4F:2F:3B:C9:9A:79:50:3E:09:75:74:77:E8:EF:64:3E:11:88:6C:8B
Certificate issuer: /CN=4f2f3bc99a79503e09757477e8ef643e11886c8b
Certificate serial: 019923A103CD1501286C04C439B0A23B1C0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ty87yZp5UD4JdXR36O9kPhGIbIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/1e1ac6-fcd6-4ae8-ad77-51e4bba6bf5b/1/Ty87yZp5UD4JdXR36O9kPhGIbIs.mft
Manifest number: 1523
Signing time: Sun 07 Sep 2025 10:02:58 +0000
Manifest this update: Sun 07 Sep 2025 10:02:58 +0000
Manifest next update: Mon 08 Sep 2025 10:02:58 +0000
Files and hashes: 1: DmY4OlpSGtRwQGNkVI6pwwKmQOM.roa (hash: QsmPHxvFnUbBb8Hdz5mPLnRJfO8cxjGYjuC9mmKC/hY=)
2: Ty87yZp5UD4JdXR36O9kPhGIbIs.crl (hash: V/JIaICFGg5zuLXALCQh9NyxIT717x9R0vh2hKvpAB4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/1e1ac6-fcd6-4ae8-ad77-51e4bba6bf5b/1/Ty87yZp5UD4JdXR36O9kPhGIbIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/1e1ac6-fcd6-4ae8-ad77-51e4bba6bf5b/1/Ty87yZp5UD4JdXR36O9kPhGIbIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ty87yZp5UD4JdXR36O9kPhGIbIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a1:03:cd:15:01:28:6c:04:c4:39:b0:a2:3b:1c:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f2f3bc99a79503e09757477e8ef643e11886c8b
Validity
Not Before: Sep 7 10:02:58 2025 GMT
Not After : Sep 8 10:02:58 2025 GMT
Subject: CN=e83479db6af5e418a11ac661718b34d1d600c737
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:2d:04:1e:ab:3a:41:9f:cf:88:8e:21:3e:c4:
e1:7f:96:af:31:79:4e:fa:d9:8d:2c:33:1e:fc:83:
fb:7c:a7:b9:7e:04:13:de:ef:8a:a7:f3:7f:7f:4f:
b8:c4:27:3f:60:12:97:21:07:16:48:ca:9b:fa:54:
d8:0d:05:34:38:07:44:9f:bf:fa:29:e0:0a:21:25:
f7:3a:ad:a2:8b:ab:7a:86:16:21:4e:5d:9f:49:7d:
78:94:9a:d8:53:a5:6f:e0:61:2a:ae:9e:6d:36:75:
5b:b2:73:bc:f0:73:2b:36:34:70:8d:c2:03:69:78:
b1:01:49:55:42:95:d2:89:57:b5:f2:18:72:05:46:
d4:d9:be:3c:14:8a:33:b0:88:90:87:76:d4:56:22:
df:12:8e:c4:35:9a:99:b6:f2:40:ec:32:2d:9c:99:
28:57:e6:ab:f2:bf:eb:ae:9b:bb:36:ba:ea:4a:98:
b9:e1:c3:51:b4:d7:a4:7d:96:dc:5a:20:92:df:ae:
c6:2a:98:4b:86:d7:c6:05:63:85:cb:dd:f8:50:6b:
2e:e5:51:c3:1c:3f:c3:8c:3e:a0:26:6a:1d:8d:b4:
3f:a4:bf:74:b6:ca:68:8c:1d:c6:1e:57:1d:ee:c6:
c0:bc:9a:dc:57:72:35:c1:54:05:00:37:37:75:c7:
a6:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:34:79:DB:6A:F5:E4:18:A1:1A:C6:61:71:8B:34:D1:D6:00:C7:37
X509v3 Authority Key Identifier:
keyid:4F:2F:3B:C9:9A:79:50:3E:09:75:74:77:E8:EF:64:3E:11:88:6C:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ty87yZp5UD4JdXR36O9kPhGIbIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/1e1ac6-fcd6-4ae8-ad77-51e4bba6bf5b/1/Ty87yZp5UD4JdXR36O9kPhGIbIs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/1e1ac6-fcd6-4ae8-ad77-51e4bba6bf5b/1/Ty87yZp5UD4JdXR36O9kPhGIbIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:5d:a1:2a:d1:b4:8d:a9:b1:9a:24:1a:36:31:7c:89:48:0b:
15:59:5e:92:26:07:61:40:cb:18:14:1c:f0:ff:60:7e:9f:4a:
5e:cb:bb:c1:65:c1:af:11:ad:56:38:20:a9:c7:e3:5b:de:7c:
6f:70:19:42:a8:69:62:dd:ba:33:d7:1b:3c:b6:a5:7e:52:68:
44:b5:f7:8a:2e:a8:44:8d:54:7c:a8:ba:66:f1:32:26:49:f4:
c8:9a:2c:09:c0:67:9c:59:7e:aa:59:d0:5d:e9:ed:44:b7:b5:
fc:b2:1b:6b:5a:a5:a2:73:6c:d0:d7:a3:48:ad:0d:b8:5f:04:
dd:cb:f8:34:27:25:81:12:c4:f8:02:6c:21:38:4f:92:47:c8:
48:c9:f7:8f:7e:3d:b7:ad:a5:5e:1a:5e:92:c5:a6:7b:dc:0a:
85:05:90:08:39:55:31:ff:8d:f1:3b:13:80:e9:e7:ff:aa:98:
60:71:0b:cb:c3:50:29:4f:56:a6:3f:a6:bb:6d:40:e2:3d:ff:
47:66:eb:d5:1d:18:13:ee:85:01:4e:9b:0e:e5:13:8c:f5:23:
73:28:a7:e3:43:26:c4:05:1e:2c:8a:32:08:1d:3f:e0:11:8f:
94:88:b8:5b:36:08:18:d3:32:a1:ce:ae:b8:22:77:1c:34:9a:
d4:a3:a8:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:56:18 2025 by rpki-client