Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/6c0b54-b06e-4d44-8120-370b8688feaf/1/tUSbCOpqJn33NmpolcfJJMLxkm0.mft
File: tUSbCOpqJn33NmpolcfJJMLxkm0.mft (raw, json)
Hash identifier: 7ZVgJAa6QFTmgR8IXCPaHGvVQ0cOWfH/1o40xA59/aE=
Subject key identifier: 6A:81:82:62:83:4E:BB:51:B4:AE:5B:F7:48:BB:57:9A:13:9E:DA:5D
Authority key identifier: B5:44:9B:08:EA:6A:26:7D:F7:36:6A:68:95:C7:C9:24:C2:F1:92:6D
Certificate issuer: /CN=b5449b08ea6a267df7366a6895c7c924c2f1926d
Certificate serial: 0198D472767DF5AE56366A6FF65D818C8ABD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tUSbCOpqJn33NmpolcfJJMLxkm0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/6c0b54-b06e-4d44-8120-370b8688feaf/1/tUSbCOpqJn33NmpolcfJJMLxkm0.mft
Manifest number: 01E9
Signing time: Sat 23 Aug 2025 01:02:07 +0000
Manifest this update: Sat 23 Aug 2025 01:02:07 +0000
Manifest next update: Sun 24 Aug 2025 01:02:07 +0000
Files and hashes: 1: 12VZdcmHAZ40OHT9mrIrMjn0594.roa (hash: ET8sgbp54z2ReDcdD/bnaoyAnFdtN16gcR5nsUzXKcM=)
2: tUSbCOpqJn33NmpolcfJJMLxkm0.crl (hash: 1c2qicjlgb27Kl1ww/L3b8yw12CBk+a/R0NKSecgTro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/6c0b54-b06e-4d44-8120-370b8688feaf/1/tUSbCOpqJn33NmpolcfJJMLxkm0.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/6c0b54-b06e-4d44-8120-370b8688feaf/1/tUSbCOpqJn33NmpolcfJJMLxkm0.mft
rsync://rpki.ripe.net/repository/DEFAULT/tUSbCOpqJn33NmpolcfJJMLxkm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:76:7d:f5:ae:56:36:6a:6f:f6:5d:81:8c:8a:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5449b08ea6a267df7366a6895c7c924c2f1926d
Validity
Not Before: Aug 23 01:02:07 2025 GMT
Not After : Aug 24 01:02:07 2025 GMT
Subject: CN=6a818262834ebb51b4ae5bf748bb579a139eda5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:13:c7:8e:28:cf:a9:45:fc:4c:58:95:89:1c:
d1:56:94:ae:c6:d5:ef:bb:9f:4e:f5:4d:6e:d0:b9:
5f:ab:dc:09:6e:1d:1e:41:cc:ad:1b:d6:33:bb:9e:
5e:6a:38:2a:0a:83:19:dd:26:75:06:2a:9c:bb:f0:
f6:04:70:de:1e:80:b0:de:b5:c2:aa:a0:36:bc:a9:
81:8d:09:36:3d:bb:97:65:c3:63:fc:b4:7d:b6:e8:
4e:58:45:61:bf:d0:9b:b7:92:47:39:13:1d:3a:9e:
05:01:af:f7:87:54:cc:a2:36:12:06:83:39:ac:b9:
c2:c1:b3:99:1e:db:68:b3:23:44:26:de:2a:f6:20:
25:d6:f3:9d:18:6b:ea:d0:7d:fc:19:c3:0a:12:bc:
e8:20:38:45:76:e5:b5:97:df:78:74:65:ab:dc:dd:
74:28:d3:2d:f1:70:78:ae:00:91:be:8e:69:1e:f5:
a6:af:c7:e6:2b:1f:99:93:12:34:59:0e:86:46:67:
ac:e2:2b:91:7c:ce:3e:fd:b7:e4:ac:2a:c7:54:64:
7e:1c:85:b0:54:f5:8d:c0:81:4c:32:07:15:10:aa:
41:2c:46:19:b6:74:8b:ff:bd:35:88:29:11:6e:26:
70:e7:68:47:0a:7b:b5:c9:7c:74:c7:5c:1f:33:f6:
8e:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:81:82:62:83:4E:BB:51:B4:AE:5B:F7:48:BB:57:9A:13:9E:DA:5D
X509v3 Authority Key Identifier:
keyid:B5:44:9B:08:EA:6A:26:7D:F7:36:6A:68:95:C7:C9:24:C2:F1:92:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tUSbCOpqJn33NmpolcfJJMLxkm0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6c0b54-b06e-4d44-8120-370b8688feaf/1/tUSbCOpqJn33NmpolcfJJMLxkm0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6c0b54-b06e-4d44-8120-370b8688feaf/1/tUSbCOpqJn33NmpolcfJJMLxkm0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:3f:c3:76:5b:ef:5d:ae:a9:ff:fd:20:97:9c:8f:4e:0a:67:
7f:dc:88:62:f8:42:d6:c7:86:b7:f6:64:e6:66:a7:02:d9:15:
ac:e0:7f:37:90:a6:f4:9c:4f:87:4a:05:2b:b6:ce:9e:0f:2e:
90:14:0a:20:00:1a:f7:56:ff:73:c3:73:e3:73:00:e5:64:fa:
11:25:b2:30:b4:22:d6:ce:ea:49:e5:e0:d7:9f:e4:32:16:2c:
31:41:00:df:50:c1:7b:52:ae:4a:f6:1a:26:2c:49:49:96:ce:
94:0b:3f:f3:c8:1a:87:38:15:e2:a6:c4:b0:89:77:c2:55:0a:
97:ba:ff:32:c7:1b:ca:24:47:95:a0:fd:52:86:b6:8c:99:5a:
1d:50:7c:aa:16:31:0c:06:aa:be:5b:6f:fe:bb:ed:4c:31:26:
68:4c:72:20:9f:51:9b:9f:a3:45:e3:67:18:4d:16:a7:91:c4:
49:1c:45:a3:3c:30:e2:65:a6:f7:17:d8:30:d6:0e:d5:8a:ef:
c8:52:97:1c:e1:2a:74:06:4c:af:0e:c2:1b:a9:aa:60:25:44:
33:10:fe:f6:e7:b6:33:e5:34:d6:4d:85:62:24:fc:05:d9:a8:
50:f8:ca:0c:e7:b6:8e:ac:43:21:ec:cc:cf:e5:47:89:6a:41:
81:2d:b8:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:11:08 2025 by rpki-client