Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/6c0b54-b06e-4d44-8120-370b8688feaf/1/tUSbCOpqJn33NmpolcfJJMLxkm0.mft
File: tUSbCOpqJn33NmpolcfJJMLxkm0.mft (raw, json)
Hash identifier: zb8qKD2RCFppGbLP9t8554JLb2IJJnFRQ4YcZnQ2y/4=
Subject key identifier: 8D:4A:06:07:93:2D:1A:D4:A7:FB:67:D1:50:7C:9A:23:58:39:12:4C
Authority key identifier: B5:44:9B:08:EA:6A:26:7D:F7:36:6A:68:95:C7:C9:24:C2:F1:92:6D
Certificate issuer: /CN=b5449b08ea6a267df7366a6895c7c924c2f1926d
Certificate serial: 0197C426350DA39BB0F2F82ABE7C6625F311
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tUSbCOpqJn33NmpolcfJJMLxkm0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/6c0b54-b06e-4d44-8120-370b8688feaf/1/tUSbCOpqJn33NmpolcfJJMLxkm0.mft
Manifest number: 015C
Signing time: Tue 01 Jul 2025 04:02:07 +0000
Manifest this update: Tue 01 Jul 2025 04:02:07 +0000
Manifest next update: Wed 02 Jul 2025 04:02:07 +0000
Files and hashes: 1: 12VZdcmHAZ40OHT9mrIrMjn0594.roa (hash: ET8sgbp54z2ReDcdD/bnaoyAnFdtN16gcR5nsUzXKcM=)
2: tUSbCOpqJn33NmpolcfJJMLxkm0.crl (hash: aF2xYbkFLsfcJsbPmmk78gMt2u+vZzQrE5ZeBr0cH28=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/6c0b54-b06e-4d44-8120-370b8688feaf/1/tUSbCOpqJn33NmpolcfJJMLxkm0.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/6c0b54-b06e-4d44-8120-370b8688feaf/1/tUSbCOpqJn33NmpolcfJJMLxkm0.mft
rsync://rpki.ripe.net/repository/DEFAULT/tUSbCOpqJn33NmpolcfJJMLxkm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c4:26:35:0d:a3:9b:b0:f2:f8:2a:be:7c:66:25:f3:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5449b08ea6a267df7366a6895c7c924c2f1926d
Validity
Not Before: Jul 1 04:02:07 2025 GMT
Not After : Jul 2 04:02:07 2025 GMT
Subject: CN=8d4a0607932d1ad4a7fb67d1507c9a235839124c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:da:be:80:49:96:45:86:74:5d:1b:12:ea:20:
eb:bb:40:39:19:fb:14:d8:99:e7:ef:39:a8:46:a7:
8c:f7:bd:3b:14:c5:ca:17:66:3c:a4:f6:61:69:7b:
88:d7:81:a0:d7:cf:60:30:1a:b4:cf:31:ad:a5:3c:
00:36:0c:71:25:e1:c8:50:13:cf:b6:9c:85:dd:d8:
74:cc:bd:69:d7:cf:18:22:35:24:a9:03:60:82:4f:
1b:f4:79:18:35:f3:9f:35:f1:81:0f:9b:28:a3:d0:
f5:e2:02:dc:dd:59:62:44:8a:35:f2:84:71:7c:b0:
24:35:ab:15:b6:11:38:10:30:a7:b7:4e:e8:cf:45:
b1:c9:2d:5c:8a:b9:59:c1:3c:7d:2e:02:a4:9e:74:
39:39:45:9a:6b:77:bf:46:3a:01:d7:68:67:c6:67:
b9:7c:72:18:f2:2f:02:91:9b:d4:e6:78:87:08:a1:
5b:29:76:2e:52:9e:ad:ad:0c:60:d7:10:18:29:28:
5b:ff:d6:ca:bc:ad:fc:b7:eb:14:ca:4d:74:c5:87:
b0:af:54:59:be:21:a5:5c:79:91:83:f4:57:42:27:
aa:13:b6:87:d2:87:be:38:f2:f8:7f:3b:b6:cd:55:
fb:2c:c9:b2:b3:da:ea:da:de:bd:1a:49:da:3a:ed:
b9:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:4A:06:07:93:2D:1A:D4:A7:FB:67:D1:50:7C:9A:23:58:39:12:4C
X509v3 Authority Key Identifier:
keyid:B5:44:9B:08:EA:6A:26:7D:F7:36:6A:68:95:C7:C9:24:C2:F1:92:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tUSbCOpqJn33NmpolcfJJMLxkm0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6c0b54-b06e-4d44-8120-370b8688feaf/1/tUSbCOpqJn33NmpolcfJJMLxkm0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6c0b54-b06e-4d44-8120-370b8688feaf/1/tUSbCOpqJn33NmpolcfJJMLxkm0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:ba:65:42:84:30:0a:76:b7:39:dc:78:15:b8:11:9c:d9:4d:
32:d7:16:e1:af:d1:7e:13:c8:f9:e5:c6:30:7e:4f:1b:89:94:
bf:ef:5a:43:d5:d7:a5:9b:32:09:1e:38:22:fe:66:15:7a:4d:
53:e4:58:09:9e:ec:ee:2e:41:ad:e6:c8:53:f5:21:59:94:cc:
d7:df:03:07:06:d0:f8:73:75:c4:aa:a5:b1:65:c7:44:35:68:
00:c8:c5:3f:51:66:94:3a:fd:f2:c5:1b:b7:6c:da:05:72:d7:
ee:a2:4e:4e:2d:8f:47:2b:83:c9:19:89:51:ee:b1:f5:51:46:
35:60:69:8c:19:5b:a7:8c:b0:17:95:8e:7d:09:7d:25:12:63:
26:01:4c:9b:93:46:95:34:9c:fd:54:14:94:bc:29:bb:7b:ff:
7a:87:29:91:2c:48:f9:01:c4:4e:ee:4f:bb:dc:1b:a5:b2:34:
ae:85:b6:cb:71:8c:14:32:d8:d6:b6:f2:27:86:67:50:e2:6c:
ce:ac:0c:e7:af:90:0c:3b:61:ba:f1:82:ef:ef:0c:3b:1c:c2:
19:9c:fa:57:b9:48:d6:c4:48:8b:f5:70:a4:e7:fe:6c:13:71:
c3:f2:5f:90:e1:de:26:b9:42:00:6b:df:ab:22:3a:f1:a0:07:
77:a7:62:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 07:00:03 2025 by rpki-client