Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/86ba02-f970-4869-be27-e8ede5a2f875/1/tMBDnHlVURAtbx5M620cUvvF6j8.mft
File: tMBDnHlVURAtbx5M620cUvvF6j8.mft (raw, json)
Hash identifier: c9lPFhJ08dyEJYxrFSXpoCfnOrJ1btnz/LLqzTujYfQ=
Subject key identifier: DA:BF:DA:0A:B7:EF:A0:50:BB:9E:42:31:0E:76:F4:BB:0A:40:DD:B1
Authority key identifier: B4:C0:43:9C:79:55:51:10:2D:6F:1E:4C:EB:6D:1C:52:FB:C5:EA:3F
Certificate issuer: /CN=b4c0439c795551102d6f1e4ceb6d1c52fbc5ea3f
Certificate serial: 0197CA5E8918F34FBD922DCC20117B4C98B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tMBDnHlVURAtbx5M620cUvvF6j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/86ba02-f970-4869-be27-e8ede5a2f875/1/tMBDnHlVURAtbx5M620cUvvF6j8.mft
Manifest number: 15C1
Signing time: Wed 02 Jul 2025 09:01:22 +0000
Manifest this update: Wed 02 Jul 2025 09:01:22 +0000
Manifest next update: Thu 03 Jul 2025 09:01:22 +0000
Files and hashes: 1: n5jiYoIoGZQqwQOVrCfprt-PApk.roa (hash: MrCF/3iJ71+/LWf1gBDblDTWmF567DIjZvwBvhh1aT0=)
2: tMBDnHlVURAtbx5M620cUvvF6j8.crl (hash: XHMG8e831V08/xdlbrUxAo+bscn7DpGD8VZKZaeVySk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/86ba02-f970-4869-be27-e8ede5a2f875/1/tMBDnHlVURAtbx5M620cUvvF6j8.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/86ba02-f970-4869-be27-e8ede5a2f875/1/tMBDnHlVURAtbx5M620cUvvF6j8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tMBDnHlVURAtbx5M620cUvvF6j8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 09:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ca:5e:89:18:f3:4f:bd:92:2d:cc:20:11:7b:4c:98:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4c0439c795551102d6f1e4ceb6d1c52fbc5ea3f
Validity
Not Before: Jul 2 09:01:22 2025 GMT
Not After : Jul 3 09:01:22 2025 GMT
Subject: CN=dabfda0ab7efa050bb9e42310e76f4bb0a40ddb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:00:82:4a:40:31:5e:56:26:70:03:89:a3:46:
a9:35:97:9c:ce:76:d0:6d:5c:ba:92:8b:db:ef:b1:
80:50:0b:42:02:f2:4a:7e:8f:87:a3:17:6f:4e:69:
1a:bd:1e:a0:d2:a3:f7:db:d4:d9:58:0d:de:f7:05:
2e:e4:05:dd:55:f6:5d:77:32:40:06:a4:12:25:3b:
cb:54:38:55:8c:86:a7:2a:2a:00:55:7d:09:e4:13:
f6:d5:ac:46:b6:cc:98:6a:08:7b:c6:fc:9e:c9:2d:
de:fe:9c:65:6b:76:ea:82:20:42:97:8d:31:bd:9b:
3b:e1:7b:5a:78:74:72:34:1b:92:33:5c:1d:bf:e1:
b6:cc:7f:46:9e:f2:c4:52:ce:8c:f5:2f:1c:99:38:
c1:eb:5b:68:64:a4:3d:2a:b6:8a:e9:4b:81:c7:25:
15:50:07:a7:dc:7a:7a:c5:c6:3b:15:2d:af:dc:11:
ee:35:06:c3:ea:85:35:11:b6:41:51:59:8a:78:54:
fa:f9:e7:b1:ec:1c:08:b8:14:80:e6:02:c4:d8:4c:
56:c5:02:4d:7f:ab:6c:f6:43:8b:af:5e:5b:d9:6d:
c9:c9:4f:3f:cb:d5:ac:02:dd:f6:0e:0a:fc:e0:f2:
e5:c8:31:b9:c4:a4:ed:6c:0f:6d:8a:50:ef:91:4e:
0b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:BF:DA:0A:B7:EF:A0:50:BB:9E:42:31:0E:76:F4:BB:0A:40:DD:B1
X509v3 Authority Key Identifier:
keyid:B4:C0:43:9C:79:55:51:10:2D:6F:1E:4C:EB:6D:1C:52:FB:C5:EA:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tMBDnHlVURAtbx5M620cUvvF6j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/86ba02-f970-4869-be27-e8ede5a2f875/1/tMBDnHlVURAtbx5M620cUvvF6j8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/86ba02-f970-4869-be27-e8ede5a2f875/1/tMBDnHlVURAtbx5M620cUvvF6j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:98:41:d7:2b:79:b4:54:20:fc:d0:d9:cf:af:1e:c5:51:c8:
bd:44:5c:4a:28:f7:de:8c:ae:dd:9a:c2:7a:b4:03:c9:55:97:
88:81:f7:ad:7b:ac:0c:3b:9a:b0:22:f2:2c:cb:98:2f:bb:6f:
f9:d4:7e:a8:01:62:e9:47:1a:b3:0f:3f:75:da:e9:00:9a:0d:
5a:42:27:4a:22:d1:e2:3d:b3:d7:0b:e4:d2:1a:3d:3f:34:7f:
a8:25:06:15:71:72:09:60:de:52:d3:2e:43:92:cf:c9:99:66:
a4:2e:4b:05:de:3b:6c:fa:f8:ba:d4:b6:1a:9b:76:bd:b0:ad:
6c:8f:fa:67:63:14:05:8c:15:f6:75:fd:2d:a5:65:d9:ad:d7:
b0:ec:20:e4:69:a7:5a:67:d7:29:13:0a:14:2c:b9:93:38:7d:
47:f7:21:4f:69:66:68:fa:04:c7:80:e9:38:ca:d9:95:21:24:
45:fc:5b:10:43:b9:34:c2:7d:95:25:5e:b3:71:0a:00:2d:bd:
18:27:75:8d:96:c4:e2:f7:c5:99:1c:a4:24:e0:42:4f:bc:5b:
08:4d:d2:26:e1:71:04:53:18:3a:66:9b:91:f7:a9:99:db:ca:
ba:9c:8c:14:12:7a:61:5f:a8:1d:17:2f:2b:80:d9:03:24:79:
b2:0e:fb:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 14:53:02 2025 by rpki-client