Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/800eb6-868b-4a30-b402-4bce424723d9/1/tBSwm-6rkF_0HmgTJWBUsYIpQpc.mft
File: tBSwm-6rkF_0HmgTJWBUsYIpQpc.mft (raw, json)
Hash identifier: VMyQuAhTPGIc/2n1dQFnNLoucbAyAkPEISmR6O1nqKQ=
Subject key identifier: 22:BF:01:8C:A0:30:19:89:B2:55:29:68:71:B1:EC:8B:23:64:55:29
Authority key identifier: B4:14:B0:9B:EE:AB:90:5F:F4:1E:68:13:25:60:54:B1:82:29:42:97
Certificate issuer: /CN=b414b09beeab905ff41e6813256054b182294297
Certificate serial: 0197B6A04646470E381EF69F41F5EE53BBE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tBSwm-6rkF_0HmgTJWBUsYIpQpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/800eb6-868b-4a30-b402-4bce424723d9/1/tBSwm-6rkF_0HmgTJWBUsYIpQpc.mft
Manifest number: 0B16
Signing time: Sat 28 Jun 2025 13:00:46 +0000
Manifest this update: Sat 28 Jun 2025 13:00:46 +0000
Manifest next update: Sun 29 Jun 2025 13:00:46 +0000
Files and hashes: 1: 9ie56jozGctsQMPeP2PnRQlQSUc.roa (hash: 5kDUdIA6jw7l4e4ssTIC7py/rMtiw/D++uBoc2CI0Qo=)
2: mT-8_dVnmXbsJKgoN35LXNaAywM.roa (hash: o5cN5KMUIwn/VQVHMV9OAvcCU4Z7KPV9dR9Yvh1kUlg=)
3: tBSwm-6rkF_0HmgTJWBUsYIpQpc.crl (hash: 6jA0ndX7VvlZi6YyDHSV62e1ft1wARIG1yiMHa9n1no=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/800eb6-868b-4a30-b402-4bce424723d9/1/tBSwm-6rkF_0HmgTJWBUsYIpQpc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/800eb6-868b-4a30-b402-4bce424723d9/1/tBSwm-6rkF_0HmgTJWBUsYIpQpc.mft
rsync://rpki.ripe.net/repository/DEFAULT/tBSwm-6rkF_0HmgTJWBUsYIpQpc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:46:46:47:0e:38:1e:f6:9f:41:f5:ee:53:bb:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b414b09beeab905ff41e6813256054b182294297
Validity
Not Before: Jun 28 13:00:46 2025 GMT
Not After : Jun 29 13:00:46 2025 GMT
Subject: CN=22bf018ca0301989b255296871b1ec8b23645529
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ab:1a:93:1f:28:da:a6:25:e2:5a:e8:4d:cd:
ec:ca:66:f2:4b:91:9f:79:86:67:ab:e6:fb:bc:2c:
33:34:6f:d4:63:02:ed:a4:27:07:d2:43:d3:67:66:
b5:f2:49:5f:55:c8:19:5d:25:7a:ca:94:98:f5:b5:
f2:f1:28:bc:27:62:ee:1c:43:20:4f:0d:03:a8:c4:
a6:75:1a:75:dd:13:6b:a2:01:1d:74:af:82:fd:4c:
57:31:b4:d6:f3:b7:7d:a3:0b:5e:da:32:88:98:5d:
8d:b4:c0:a3:a0:0b:e9:cb:9e:49:4f:78:c7:69:fc:
a8:71:2a:5e:20:6a:78:c0:46:33:fd:f5:3e:3b:15:
99:63:72:1b:f8:1b:1d:36:12:f7:97:18:18:b9:51:
00:bf:ec:ee:01:52:23:89:f9:67:d0:62:be:20:56:
ca:76:99:6d:d4:bf:28:ee:10:6a:35:cf:9c:a9:7a:
89:dc:60:34:a0:b9:6b:dd:9c:85:59:85:b4:43:b8:
54:ab:92:d2:12:3f:0a:06:79:95:43:f2:e2:d3:c7:
1d:fd:2c:62:65:3c:d8:37:9e:ec:12:3f:90:4e:5d:
bb:83:e0:c6:9e:8c:82:fd:43:65:7b:14:6b:65:c3:
0d:4d:1e:74:89:a0:0b:90:37:93:f3:b2:a0:7e:47:
90:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:BF:01:8C:A0:30:19:89:B2:55:29:68:71:B1:EC:8B:23:64:55:29
X509v3 Authority Key Identifier:
keyid:B4:14:B0:9B:EE:AB:90:5F:F4:1E:68:13:25:60:54:B1:82:29:42:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tBSwm-6rkF_0HmgTJWBUsYIpQpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/800eb6-868b-4a30-b402-4bce424723d9/1/tBSwm-6rkF_0HmgTJWBUsYIpQpc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/800eb6-868b-4a30-b402-4bce424723d9/1/tBSwm-6rkF_0HmgTJWBUsYIpQpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:e4:6c:41:1d:67:84:36:aa:58:c7:45:3c:eb:95:db:56:ce:
f6:45:97:51:4b:bd:fb:25:3d:06:78:95:de:26:c8:2e:4e:0e:
c9:8e:a9:ad:c9:af:4b:dc:45:1a:62:a9:8b:f4:a2:5c:dc:6b:
cc:6f:84:57:4b:d3:c6:6e:10:4d:5c:7c:ef:d7:b5:21:ea:93:
cb:6f:84:30:34:50:1a:4a:41:65:7d:1f:f9:55:19:60:08:26:
a8:82:f5:8d:5c:5a:e0:86:0d:82:a1:76:63:54:24:e7:83:02:
d7:b4:43:ff:89:d8:1e:48:c2:32:e6:7e:43:df:27:62:45:43:
97:a3:08:11:c3:d8:18:02:c3:ac:9c:e2:06:ca:ae:64:48:c9:
31:70:30:bb:ef:dc:a5:6c:72:fa:5e:09:14:22:e8:67:85:b6:
dd:4e:ff:da:c1:c2:b2:12:9f:9b:2c:50:9b:ec:c5:43:68:c6:
87:be:10:29:1d:73:fd:43:88:ae:a4:55:4d:cf:62:64:11:dc:
c8:23:af:d2:80:c6:17:c3:c0:8e:80:94:1a:ff:a3:78:4a:ab:
b3:60:c1:5f:2b:73:98:53:a7:6b:02:b4:ee:19:75:59:89:c2:
8d:fc:2e:f7:0a:85:a1:f0:58:ab:a6:c4:2e:62:d8:1a:79:25:
c8:d9:25:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:41:45 2025 by rpki-client