Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/247ee2-2365-4768-977f-fefa1abaedcf/1/Tb0LE1p9_WtqobGEnrFjQC3o4bE.mft
File: Tb0LE1p9_WtqobGEnrFjQC3o4bE.mft (raw, json)
Hash identifier: +l9Hs+Du3DXArs0PYI/U6+VFoTmoG2Xe4uo3/n2kd04=
Subject key identifier: 55:73:F1:60:95:9D:83:C4:26:D4:E2:AE:C8:3E:01:92:41:39:1B:B7
Authority key identifier: 4D:BD:0B:13:5A:7D:FD:6B:6A:A1:B1:84:9E:B1:63:40:2D:E8:E1:B1
Certificate issuer: /CN=4dbd0b135a7dfd6b6aa1b1849eb163402de8e1b1
Certificate serial: 0197B70F4DA0CD446A01BF5B879285B68104
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tb0LE1p9_WtqobGEnrFjQC3o4bE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/247ee2-2365-4768-977f-fefa1abaedcf/1/Tb0LE1p9_WtqobGEnrFjQC3o4bE.mft
Manifest number: 1292
Signing time: Sat 28 Jun 2025 15:02:02 +0000
Manifest this update: Sat 28 Jun 2025 15:02:02 +0000
Manifest next update: Sun 29 Jun 2025 15:02:02 +0000
Files and hashes: 1: Tb0LE1p9_WtqobGEnrFjQC3o4bE.crl (hash: E0RUIgj7akz7CmLpgy2KZh2ogB8wdGIcQkM9wmG2ufY=)
2: fQVuwKT50hbkCaxxsedkAc4v4DM.roa (hash: 7+f7vmuufbnUl5kubA16fvBKejBnvUX170UQ3Kwi8yM=)
3: yI_RXXqJUefuh1flF2oTn9wC4DI.roa (hash: j2h6Y5w4TEDmVG2v4OM8fOFhUfhpchqy4oEvpRV83t4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/247ee2-2365-4768-977f-fefa1abaedcf/1/Tb0LE1p9_WtqobGEnrFjQC3o4bE.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/247ee2-2365-4768-977f-fefa1abaedcf/1/Tb0LE1p9_WtqobGEnrFjQC3o4bE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tb0LE1p9_WtqobGEnrFjQC3o4bE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:4d:a0:cd:44:6a:01:bf:5b:87:92:85:b6:81:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dbd0b135a7dfd6b6aa1b1849eb163402de8e1b1
Validity
Not Before: Jun 28 15:02:02 2025 GMT
Not After : Jun 29 15:02:02 2025 GMT
Subject: CN=5573f160959d83c426d4e2aec83e019241391bb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c1:dd:0f:b4:d1:47:d4:6a:1b:97:fa:29:f5:
22:08:04:70:7e:af:22:8f:4b:75:1f:57:57:10:1c:
63:f0:41:95:bf:c7:a8:e7:97:94:44:23:fa:99:07:
14:01:a4:10:ca:9b:df:51:d3:ce:05:56:84:0f:67:
43:35:82:f7:20:3a:37:20:9b:7d:30:32:48:e6:81:
90:8b:b4:2a:af:e8:49:d9:25:f4:a2:aa:56:46:0e:
05:63:84:05:95:a8:9b:a2:89:40:1e:99:22:3d:7b:
d1:2c:43:bb:ef:77:1d:d0:c4:5a:1c:0a:62:70:d4:
0e:2d:23:cf:36:7b:c9:69:64:d5:e1:23:3a:36:3d:
6b:3f:cf:e3:52:fb:2e:9a:f1:96:a5:2a:a9:eb:4a:
74:d1:52:87:c0:94:bc:92:48:a8:c6:df:8f:88:de:
46:b7:bb:92:4d:11:04:70:86:ba:3c:a9:2e:cc:8c:
33:e3:34:63:be:76:1f:c4:2c:7f:5f:d4:7e:f2:3f:
10:8e:23:9e:72:a3:2c:f8:c9:35:e5:5a:62:7b:be:
96:d4:33:5c:e6:19:4c:90:34:82:5b:c0:6c:9b:9d:
c3:39:4b:16:7c:6d:ac:a0:77:d1:ad:c9:71:6d:2e:
7d:c9:5e:e6:b1:79:39:bf:5c:68:c6:2e:e2:1a:8b:
24:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:73:F1:60:95:9D:83:C4:26:D4:E2:AE:C8:3E:01:92:41:39:1B:B7
X509v3 Authority Key Identifier:
keyid:4D:BD:0B:13:5A:7D:FD:6B:6A:A1:B1:84:9E:B1:63:40:2D:E8:E1:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tb0LE1p9_WtqobGEnrFjQC3o4bE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/247ee2-2365-4768-977f-fefa1abaedcf/1/Tb0LE1p9_WtqobGEnrFjQC3o4bE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/247ee2-2365-4768-977f-fefa1abaedcf/1/Tb0LE1p9_WtqobGEnrFjQC3o4bE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:7d:c2:e8:31:bf:5a:20:b0:86:52:21:c3:d2:be:62:f7:39:
0d:60:b9:79:92:00:e4:55:79:26:b3:27:8b:67:41:20:3a:85:
e7:6b:75:59:09:7a:86:a5:8f:b8:73:15:44:d5:ab:81:94:de:
26:95:3d:d2:5c:c3:33:d7:07:74:fd:3e:1c:06:4c:1e:81:f4:
52:52:e2:15:30:09:97:39:3a:bc:2a:8b:bc:cf:42:ad:cd:8d:
e6:87:ea:0d:d3:fe:f0:fc:9c:75:b6:a4:6f:7a:7a:bb:0d:27:
51:e4:a6:f7:87:ef:36:67:79:d1:ff:be:4b:39:80:00:1c:34:
7b:26:6f:66:74:43:16:37:7e:5c:1f:bf:df:25:64:28:df:cf:
fc:f2:33:8e:ed:42:4c:45:6c:19:ac:22:2f:7d:bd:88:db:23:
69:7f:2f:a5:79:d7:1e:bb:a1:24:ad:c8:b4:8f:aa:e4:ee:c7:
e5:cc:d6:a9:d7:ea:b6:50:e1:34:62:1a:fb:c5:72:10:8e:63:
b2:28:56:04:bb:e3:24:0c:7a:ea:37:d0:c3:06:ee:aa:e5:d4:
64:de:ae:98:f6:cc:87:4d:f8:b6:b3:61:0b:db:d3:b1:e4:6b:
9d:f1:81:4f:d0:0c:94:e1:78:a3:88:40:5c:e4:f0:31:94:15:
8e:3a:24:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:40:47 2025 by rpki-client