Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/0e3d64-f290-4893-9a40-c9e141333d58/1/tT2fG8Pw2QttzR6fb9HlBhiOp8I.mft
File: tT2fG8Pw2QttzR6fb9HlBhiOp8I.mft (raw, json)
Hash identifier: rYdq0jmmS7F7R5hl0FhiuDEnasqM7MG/bMCVLdaDsl4=
Subject key identifier: E9:71:F4:6F:DA:62:47:0A:89:D4:A4:FE:DD:7A:88:C0:3B:8B:7D:15
Authority key identifier: B5:3D:9F:1B:C3:F0:D9:0B:6D:CD:1E:9F:6F:D1:E5:06:18:8E:A7:C2
Certificate issuer: /CN=b53d9f1bc3f0d90b6dcd1e9f6fd1e506188ea7c2
Certificate serial: 0197B77C82D2ACB29F2355BE8B544156F618
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tT2fG8Pw2QttzR6fb9HlBhiOp8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/0e3d64-f290-4893-9a40-c9e141333d58/1/tT2fG8Pw2QttzR6fb9HlBhiOp8I.mft
Manifest number: 0856
Signing time: Sat 28 Jun 2025 17:01:19 +0000
Manifest this update: Sat 28 Jun 2025 17:01:19 +0000
Manifest next update: Sun 29 Jun 2025 17:01:19 +0000
Files and hashes: 1: P4_VmIDFfqYiDiPBdVVMzIA4LMY.roa (hash: fbL8P+MktK6PkeO1KtnH7o+BeC/FNslw8AAfJjr38OY=)
2: WKELc_W8mdXUUZ324MSWDeu1wXI.roa (hash: 0tteI0ps1fiC7XdrvhsFyeYnjz3rCzmXkLHL3vxN7GA=)
3: tT2fG8Pw2QttzR6fb9HlBhiOp8I.crl (hash: 4zcf5WYmaZH+HwtyJhro2rAlOUqHylLKJG0ZUfpxKsc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/0e3d64-f290-4893-9a40-c9e141333d58/1/tT2fG8Pw2QttzR6fb9HlBhiOp8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/0e3d64-f290-4893-9a40-c9e141333d58/1/tT2fG8Pw2QttzR6fb9HlBhiOp8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/tT2fG8Pw2QttzR6fb9HlBhiOp8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:82:d2:ac:b2:9f:23:55:be:8b:54:41:56:f6:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b53d9f1bc3f0d90b6dcd1e9f6fd1e506188ea7c2
Validity
Not Before: Jun 28 17:01:19 2025 GMT
Not After : Jun 29 17:01:19 2025 GMT
Subject: CN=e971f46fda62470a89d4a4fedd7a88c03b8b7d15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ce:9f:c4:72:2b:1f:b4:f7:ae:38:b6:63:b8:
c4:5b:67:d1:e4:02:1e:ef:a1:b2:9f:17:f1:20:74:
89:b1:8a:28:58:c4:81:5a:91:dd:16:62:b0:b3:f6:
1c:07:d2:53:63:f7:f3:6a:c1:bd:37:62:c8:0c:d9:
7d:f4:10:fc:75:28:ae:c4:9e:c5:fd:64:76:c4:f7:
77:48:13:71:e4:e9:d8:a8:99:64:b5:8d:28:78:48:
58:8a:69:1b:08:51:4d:33:4a:09:92:e9:67:bd:0e:
76:e5:89:4c:d3:fd:47:35:5b:f8:22:82:b3:f0:54:
9a:4f:fe:ea:2e:7a:0a:ba:b9:79:67:15:ad:e4:3e:
3c:7e:19:e6:54:42:e3:13:7f:94:06:56:e8:46:b4:
8e:21:ad:3c:9b:f9:15:04:f4:6a:ac:f1:39:b8:2b:
35:83:39:99:51:83:c6:8e:35:ef:ff:a9:d7:00:fe:
c1:24:3d:d6:b2:32:72:cf:53:94:10:47:d1:f8:70:
a2:97:ef:16:85:99:35:6e:47:20:50:09:13:ca:5f:
a9:fb:7a:22:02:61:f0:fc:25:5e:52:55:89:29:31:
66:2e:5d:ae:9f:f3:08:28:99:b5:f9:9a:17:cc:65:
a7:70:f1:14:54:24:54:ae:4e:7b:aa:74:62:ad:15:
16:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:71:F4:6F:DA:62:47:0A:89:D4:A4:FE:DD:7A:88:C0:3B:8B:7D:15
X509v3 Authority Key Identifier:
keyid:B5:3D:9F:1B:C3:F0:D9:0B:6D:CD:1E:9F:6F:D1:E5:06:18:8E:A7:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tT2fG8Pw2QttzR6fb9HlBhiOp8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/0e3d64-f290-4893-9a40-c9e141333d58/1/tT2fG8Pw2QttzR6fb9HlBhiOp8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/0e3d64-f290-4893-9a40-c9e141333d58/1/tT2fG8Pw2QttzR6fb9HlBhiOp8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:b7:d7:37:30:38:9f:73:6f:62:09:de:2e:79:5e:7b:7a:9d:
69:ab:df:7d:0d:e1:56:55:fa:41:47:c3:91:e9:e7:57:85:d7:
f8:3d:b0:8d:21:6f:2e:c0:26:ff:4b:64:70:48:53:7c:e9:dc:
3a:78:da:50:af:3a:5d:e1:b6:d7:4d:92:f8:1e:21:ae:45:39:
de:43:ae:67:ac:d4:41:7d:c5:f3:de:04:8b:8d:01:13:96:1a:
33:9d:a4:8e:4f:58:f9:5a:ab:3e:e3:45:09:a6:91:b1:e4:68:
13:31:6d:66:85:94:c1:94:91:63:68:00:5a:eb:f6:d2:c2:0f:
7f:5a:79:74:d0:ca:58:30:95:c1:5a:11:2c:dd:fa:b4:7c:05:
1e:8e:bd:84:16:2c:f9:c0:fd:08:36:09:1f:5a:db:f9:01:d7:
d4:09:02:cc:1e:8d:39:18:61:71:d2:b7:e5:49:23:10:f6:09:
4c:26:11:a7:d9:f9:58:69:6c:77:15:25:ce:f1:82:19:ca:30:
bd:e0:70:f2:b3:6d:58:c4:29:30:fc:84:74:ee:53:c4:29:77:
29:0a:ff:3e:6b:d7:e3:69:27:60:20:99:0a:19:1a:56:b6:41:
8e:e4:12:c9:b7:ac:d9:90:65:0d:f9:10:78:7a:5b:76:74:b3:
28:79:37:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:58:04 2025 by rpki-client