Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/ad9e9c-aca2-480c-82e8-06faf1496693/1/_Tq5WEdps0xpXg7zvkAN5chwX1g.mft
File: _Tq5WEdps0xpXg7zvkAN5chwX1g.mft (raw, json)
Hash identifier: PaXElCtBhMDqC2m2EzfTYVKzwERfv97yyxTNSZbOdz0=
Subject key identifier: 3E:1B:6E:F3:34:21:55:E1:C0:EE:84:B0:4B:21:B6:BD:17:41:C5:FA
Authority key identifier: FD:3A:B9:58:47:69:B3:4C:69:5E:0E:F3:BE:40:0D:E5:C8:70:5F:58
Certificate issuer: /CN=fd3ab9584769b34c695e0ef3be400de5c8705f58
Certificate serial: 0197B74588BD28EF83706F2D457EA80FBE5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Tq5WEdps0xpXg7zvkAN5chwX1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/ad9e9c-aca2-480c-82e8-06faf1496693/1/_Tq5WEdps0xpXg7zvkAN5chwX1g.mft
Manifest number: 01BD
Signing time: Sat 28 Jun 2025 16:01:16 +0000
Manifest this update: Sat 28 Jun 2025 16:01:16 +0000
Manifest next update: Sun 29 Jun 2025 16:01:16 +0000
Files and hashes: 1: _Tq5WEdps0xpXg7zvkAN5chwX1g.crl (hash: 1CqEgXIi9ObhBVP0g3BxoR1v+BMRUx+se231hr/mAwM=)
2: mm8C4Ou63If70LPWFRCmCNEI28c.roa (hash: g2mAP9bfs0Z2vFldLFVJmnHsqx5+Iksx21QgfS4cMys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/ad9e9c-aca2-480c-82e8-06faf1496693/1/_Tq5WEdps0xpXg7zvkAN5chwX1g.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/ad9e9c-aca2-480c-82e8-06faf1496693/1/_Tq5WEdps0xpXg7zvkAN5chwX1g.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Tq5WEdps0xpXg7zvkAN5chwX1g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:88:bd:28:ef:83:70:6f:2d:45:7e:a8:0f:be:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd3ab9584769b34c695e0ef3be400de5c8705f58
Validity
Not Before: Jun 28 16:01:16 2025 GMT
Not After : Jun 29 16:01:16 2025 GMT
Subject: CN=3e1b6ef3342155e1c0ee84b04b21b6bd1741c5fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5f:5f:bd:f7:9c:a0:06:82:ba:c3:22:5c:fd:
88:b3:9e:01:3c:be:af:62:9e:bc:04:db:e5:23:a0:
f4:03:0a:6e:a4:0f:4c:cd:b2:c5:90:8f:89:6a:c4:
97:dd:64:fa:3e:a1:06:dc:77:7c:83:d7:89:e5:5c:
49:72:3e:6f:13:60:d4:ab:a2:98:99:d7:49:a4:21:
ea:3b:cc:f2:e3:28:59:05:cc:04:fa:00:16:ef:b4:
3c:36:db:bb:da:50:c1:f9:e9:12:43:99:c1:d3:ef:
db:e8:65:ee:13:3f:e8:8e:78:e7:36:13:b2:7e:7d:
2a:b3:94:92:1f:24:68:a9:eb:7b:2c:6b:7d:87:48:
33:d5:fc:05:67:8b:17:e1:c2:dd:1f:5f:54:27:39:
e2:52:06:c6:42:9c:7e:b1:27:b3:10:c8:a6:5a:1c:
95:24:de:a3:31:0a:73:4a:be:50:a5:32:dd:0e:90:
83:53:63:94:c9:95:0c:37:5f:b1:74:2d:b0:65:b2:
0d:8e:6a:d9:db:cc:89:ed:c7:06:86:cb:89:71:68:
e1:03:9c:22:e6:21:af:95:ff:f9:08:e4:f2:ff:9f:
ef:3d:ed:4c:f1:c6:da:0c:4c:02:f2:44:f0:29:98:
44:e2:54:ed:ae:cb:7e:ab:e5:2a:54:5e:81:b4:5e:
ac:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:1B:6E:F3:34:21:55:E1:C0:EE:84:B0:4B:21:B6:BD:17:41:C5:FA
X509v3 Authority Key Identifier:
keyid:FD:3A:B9:58:47:69:B3:4C:69:5E:0E:F3:BE:40:0D:E5:C8:70:5F:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Tq5WEdps0xpXg7zvkAN5chwX1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/ad9e9c-aca2-480c-82e8-06faf1496693/1/_Tq5WEdps0xpXg7zvkAN5chwX1g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/ad9e9c-aca2-480c-82e8-06faf1496693/1/_Tq5WEdps0xpXg7zvkAN5chwX1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:d5:d5:a5:fc:05:c2:6b:eb:72:6c:72:1e:36:14:a6:c5:9c:
76:8c:84:e1:58:df:a4:04:fe:0b:57:3a:2c:4f:dd:43:41:fa:
8d:c8:d3:9c:aa:cd:bd:ad:d6:3b:6f:5f:ab:e2:61:8b:b5:4c:
9f:13:95:84:8f:91:18:d5:84:c4:24:27:9f:79:61:03:47:d9:
2d:12:24:7f:67:43:f7:e4:74:c2:9e:1b:69:f8:05:12:60:7a:
57:d4:16:ab:18:c1:69:2d:e6:cf:e1:9a:2d:c3:59:e0:57:7a:
17:ff:6b:96:bc:19:be:fe:2e:80:74:39:b9:91:da:b1:f1:cb:
f4:a6:fc:ec:af:a5:9d:5b:6e:9d:34:7b:5a:d8:2a:c1:77:d8:
5e:18:95:a4:ab:01:79:27:4c:c7:ba:cd:9d:fc:6b:af:66:34:
dc:d7:8d:35:23:96:23:69:d8:d8:6e:25:70:46:58:d8:54:d2:
e0:25:cf:4c:7e:af:e1:80:dc:61:60:da:77:d2:69:ba:5c:cc:
b4:43:23:4e:00:9f:45:80:90:d6:e3:05:a0:92:93:bc:a1:0b:
82:b1:3c:29:0b:db:44:9e:75:94:8a:70:6e:63:66:86:c4:2a:
f7:6e:e6:e0:dd:6d:c5:d4:28:e1:95:a9:cd:c7:f4:dd:75:eb:
03:3c:13:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:06:06 2025 by rpki-client