Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/48c9f6-5b5f-41d4-8e56-08e4b79387c0/1/TuFxPha0_Y8zAYh95qERmARJsp4.mft
File: TuFxPha0_Y8zAYh95qERmARJsp4.mft (raw, json)
Hash identifier: JfSzwaDB1IqsZtVao3EIV4tZ1lTYNrcZ0g2BMsP4fto=
Subject key identifier: F5:82:5D:0C:BD:ED:8B:06:99:74:CE:C8:3A:18:67:84:27:10:44:30
Authority key identifier: 4E:E1:71:3E:16:B4:FD:8F:33:01:88:7D:E6:A1:11:98:04:49:B2:9E
Certificate issuer: /CN=4ee1713e16b4fd8f3301887de6a111980449b29e
Certificate serial: 0197B5FC366104AD0FA973C2799897964A1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TuFxPha0_Y8zAYh95qERmARJsp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/48c9f6-5b5f-41d4-8e56-08e4b79387c0/1/TuFxPha0_Y8zAYh95qERmARJsp4.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 10:01:34 +0000
Manifest this update: Sat 28 Jun 2025 10:01:34 +0000
Manifest next update: Sun 29 Jun 2025 10:01:34 +0000
Files and hashes: 1: IJqJkkG32juZ9JC_-n807ugagLE.roa (hash: a5ckR7gAH5+zi6QRTimZRXE/Wgs09xk/gP8A83O6nQM=)
2: TuFxPha0_Y8zAYh95qERmARJsp4.crl (hash: 0EVvTobcnHp9HIFjJ13sXZlNRpk5dzoqaudij+CWZlg=)
3: yXKulFLipTbjSUmowLRqtzSALEA.roa (hash: LNf43mdJtw9mAKFqBqZr/MgvJNf0ToK4qGWZ05MJPz4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/48c9f6-5b5f-41d4-8e56-08e4b79387c0/1/TuFxPha0_Y8zAYh95qERmARJsp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/48c9f6-5b5f-41d4-8e56-08e4b79387c0/1/TuFxPha0_Y8zAYh95qERmARJsp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TuFxPha0_Y8zAYh95qERmARJsp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fc:36:61:04:ad:0f:a9:73:c2:79:98:97:96:4a:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ee1713e16b4fd8f3301887de6a111980449b29e
Validity
Not Before: Jun 28 10:01:34 2025 GMT
Not After : Jun 29 10:01:34 2025 GMT
Subject: CN=f5825d0cbded8b069974cec83a18678427104430
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:04:6e:a9:b1:9c:2d:51:90:7c:00:17:57:33:
b1:ed:c8:c1:ab:3e:5b:dd:4e:e3:2d:fb:4c:06:67:
33:6f:7e:3b:10:cd:ab:eb:17:8d:2a:8c:db:6b:5e:
33:f6:8f:93:44:d6:03:fe:88:bf:cd:96:95:95:05:
fa:b7:e3:b8:af:bc:60:40:45:ea:c4:32:3d:72:74:
6a:92:c9:f8:24:a6:68:8f:0f:fa:ea:26:b9:a2:b2:
1f:74:86:92:b1:b3:47:64:51:05:56:b7:17:e8:9e:
fc:40:98:21:02:79:1a:60:51:9f:f6:ce:a1:e8:fd:
91:d0:36:7e:53:26:03:60:ae:b0:4b:7d:8c:c9:77:
55:84:a9:78:1c:19:81:65:e1:59:6f:75:fa:bb:ca:
10:7d:73:70:ef:0d:09:70:59:33:5c:e2:73:b6:14:
cc:57:d8:46:43:b7:80:7b:83:85:81:d9:67:59:77:
23:a0:8e:73:86:14:91:1e:7c:0f:42:de:04:38:0a:
b4:a4:91:0f:40:81:7e:3c:bc:04:d4:24:6b:59:2d:
28:74:ff:18:02:3b:51:e1:6e:f6:46:72:6a:a1:ae:
81:7e:2d:82:f5:e6:c3:a9:9e:9b:b8:56:e2:21:1b:
54:bb:b7:b9:8a:0f:49:07:71:6e:86:8c:61:9f:72:
1a:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:82:5D:0C:BD:ED:8B:06:99:74:CE:C8:3A:18:67:84:27:10:44:30
X509v3 Authority Key Identifier:
keyid:4E:E1:71:3E:16:B4:FD:8F:33:01:88:7D:E6:A1:11:98:04:49:B2:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuFxPha0_Y8zAYh95qERmARJsp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/48c9f6-5b5f-41d4-8e56-08e4b79387c0/1/TuFxPha0_Y8zAYh95qERmARJsp4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/48c9f6-5b5f-41d4-8e56-08e4b79387c0/1/TuFxPha0_Y8zAYh95qERmARJsp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:90:ae:fd:94:30:0a:f5:63:b6:e8:be:85:76:5f:4e:ea:25:
c1:b5:dc:bd:3b:39:72:b4:fa:2a:00:ce:68:9c:c2:10:0c:e4:
33:69:6f:64:6d:cd:1a:e8:d0:85:1b:6d:04:e5:d0:46:0a:ac:
a8:60:a7:3a:97:53:99:82:35:fe:d9:bb:94:29:16:18:b0:1e:
72:10:67:d6:f2:4b:14:24:7b:08:f6:8b:03:5b:ed:8d:df:06:
5c:5e:47:e6:61:d9:f4:61:e4:85:fa:9c:f3:cd:51:d1:dc:9e:
4a:cc:29:16:41:09:17:05:4b:fd:ba:a2:98:d2:39:70:b1:f6:
50:b0:91:aa:83:4c:b3:a4:c3:1d:55:44:e3:52:21:0b:9b:fb:
e2:52:c2:ff:57:47:b7:5d:ac:72:89:78:e1:b9:b8:f4:58:e4:
6e:b1:22:88:94:e1:87:3f:d3:68:d1:77:51:9b:54:ae:e7:4d:
5b:3a:5a:98:bf:da:61:68:53:ef:dd:4c:dd:5f:57:ea:8f:40:
85:93:f2:5a:8f:c0:7e:f9:da:d5:ed:53:87:b7:0f:07:e3:dd:
36:58:62:b7:bf:f2:78:80:70:ff:77:4c:2f:bc:4d:8d:d2:f9:
af:8c:d6:18:48:e2:db:cc:f8:2c:96:55:de:14:fa:ca:7d:fb:
2a:91:49:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:38:51 2025 by rpki-client