Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/9041b7-f543-4c63-8e2b-366a9761ea20/1/TqWy83Ukw9ONyApx2PAB7SxF6Jw.mft
File: TqWy83Ukw9ONyApx2PAB7SxF6Jw.mft (raw, json)
Hash identifier: GoVO7Ps3+QRRBc/sBGNn8nBPT9cjjZ2z7JRKHdentD4=
Subject key identifier: 75:E7:55:55:30:D7:CE:D2:92:B8:38:65:08:4D:93:A4:3C:3D:9B:70
Authority key identifier: 4E:A5:B2:F3:75:24:C3:D3:8D:C8:0A:71:D8:F0:01:ED:2C:45:E8:9C
Certificate issuer: /CN=4ea5b2f37524c3d38dc80a71d8f001ed2c45e89c
Certificate serial: 01992255E9032F4F234C713D45567ECF0D97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TqWy83Ukw9ONyApx2PAB7SxF6Jw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/9041b7-f543-4c63-8e2b-366a9761ea20/1/TqWy83Ukw9ONyApx2PAB7SxF6Jw.mft
Manifest number: 1437
Signing time: Sun 07 Sep 2025 04:01:19 +0000
Manifest this update: Sun 07 Sep 2025 04:01:19 +0000
Manifest next update: Mon 08 Sep 2025 04:01:19 +0000
Files and hashes: 1: HJZuFg-aBDGic40vRoWhakH94Zo.roa (hash: b1vEsVgABbRc+hOZI2FcJP4+qO85CVqkQZmViTsB2bU=)
2: TqWy83Ukw9ONyApx2PAB7SxF6Jw.crl (hash: BX806dd198sRYbxRsTutmWelTVxHEiVnIMY9FRXZTS0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/9041b7-f543-4c63-8e2b-366a9761ea20/1/TqWy83Ukw9ONyApx2PAB7SxF6Jw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/9041b7-f543-4c63-8e2b-366a9761ea20/1/TqWy83Ukw9ONyApx2PAB7SxF6Jw.mft
rsync://rpki.ripe.net/repository/DEFAULT/TqWy83Ukw9ONyApx2PAB7SxF6Jw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:e9:03:2f:4f:23:4c:71:3d:45:56:7e:cf:0d:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ea5b2f37524c3d38dc80a71d8f001ed2c45e89c
Validity
Not Before: Sep 7 04:01:19 2025 GMT
Not After : Sep 8 04:01:19 2025 GMT
Subject: CN=75e7555530d7ced292b83865084d93a43c3d9b70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:54:3b:32:5b:7a:cd:59:ff:db:41:43:80:6f:
69:8a:3d:31:d4:27:35:9e:b7:ad:46:1e:f8:26:f6:
9c:c1:98:3a:7e:d2:e2:0b:53:60:61:2d:cc:ad:41:
a2:6d:87:0a:d5:f4:c4:c2:6e:ea:49:21:29:51:27:
15:70:0e:d6:e7:f2:cf:fd:94:b2:53:10:a2:68:0a:
12:17:c4:eb:0e:be:1d:86:0e:3f:1c:80:25:e3:c1:
cf:34:ad:35:4c:95:ba:6c:24:2d:46:11:36:f2:fc:
0a:71:08:12:b8:9f:11:6d:f3:6c:7b:f0:7c:c6:ed:
78:28:6c:d9:e8:30:ea:39:6a:89:70:75:bc:63:b8:
03:c1:e8:83:14:79:62:25:e9:82:84:fc:ca:71:f4:
e4:09:b3:fc:bd:84:8d:70:94:4a:de:f0:77:e8:9f:
35:93:53:10:02:39:e1:ca:0c:fe:b4:a5:72:a8:3c:
45:ec:2c:b3:1b:87:95:93:88:c0:d0:c7:d5:c4:52:
a9:8e:09:6a:7e:77:ec:3f:8e:6c:cf:14:fa:88:1e:
9e:05:2d:76:67:06:5b:af:79:1b:7b:b7:63:02:2a:
c3:b8:d5:f2:5b:90:2f:f4:d7:64:93:a6:bf:70:6b:
58:0c:29:3e:d8:08:9f:91:ce:ef:49:7f:87:4a:5c:
25:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:E7:55:55:30:D7:CE:D2:92:B8:38:65:08:4D:93:A4:3C:3D:9B:70
X509v3 Authority Key Identifier:
keyid:4E:A5:B2:F3:75:24:C3:D3:8D:C8:0A:71:D8:F0:01:ED:2C:45:E8:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TqWy83Ukw9ONyApx2PAB7SxF6Jw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/9041b7-f543-4c63-8e2b-366a9761ea20/1/TqWy83Ukw9ONyApx2PAB7SxF6Jw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/9041b7-f543-4c63-8e2b-366a9761ea20/1/TqWy83Ukw9ONyApx2PAB7SxF6Jw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:df:f2:37:f6:14:9e:4c:2e:67:a1:14:8a:05:c6:08:d1:14:
60:4e:32:18:cb:f1:99:9e:aa:3b:de:28:65:89:8a:04:09:26:
0a:03:68:8a:37:ff:dc:75:8e:85:49:8f:fd:1c:16:91:09:4f:
af:98:4c:6e:9b:f5:ab:30:51:55:fc:90:28:0a:5e:11:d3:8f:
a8:db:08:6b:a1:bf:66:2d:3d:00:d6:68:2d:9a:84:c3:ed:6c:
35:15:91:2b:3f:cd:44:05:6e:7e:08:c8:95:89:84:dd:1f:30:
80:74:63:c6:a0:7d:9a:e1:00:6d:03:9b:e8:d8:9d:53:6e:5c:
3a:87:e3:bc:37:a9:13:7a:57:60:9e:a4:84:33:82:a4:2d:23:
4f:bf:3a:45:12:84:5c:74:b8:96:7d:9f:2b:91:34:b6:03:57:
3b:9e:a6:07:01:a5:93:09:29:b7:f4:27:da:ca:a3:a2:d7:cf:
a3:8c:6c:c3:45:cc:55:55:9f:10:a9:d0:97:66:b0:63:8b:9a:
02:d4:89:63:01:46:9d:d2:0f:65:ae:c9:e1:be:ce:d5:71:9d:
b0:0e:14:95:03:e7:a8:59:1d:04:9f:9c:94:78:80:1a:8f:0c:
cb:6e:03:5b:0d:a4:22:06:78:5d:21:2e:c6:3a:39:dd:9f:d9:
33:e1:35:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:55:33 2025 by rpki-client