Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/18c8d5-089a-470e-906d-dc4e7988a28a/1/tBuxzdW4a-d4BoidLhsgKswnsiU.mft
File: tBuxzdW4a-d4BoidLhsgKswnsiU.mft (raw, json)
Hash identifier: CaT+LM1AQZsbFzV3E+pTWA+lg1/idiH+PUf/u60YYYo=
Subject key identifier: B0:93:F2:EF:06:2A:A9:DD:E0:EE:C4:BA:32:FF:37:BC:BA:76:B6:BB
Authority key identifier: B4:1B:B1:CD:D5:B8:6B:E7:78:06:88:9D:2E:1B:20:2A:CC:27:B2:25
Certificate issuer: /CN=b41bb1cdd5b86be77806889d2e1b202acc27b225
Certificate serial: 0197C07FA0887D5C2B93B094254144EE493D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tBuxzdW4a-d4BoidLhsgKswnsiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/18c8d5-089a-470e-906d-dc4e7988a28a/1/tBuxzdW4a-d4BoidLhsgKswnsiU.mft
Manifest number: 0288
Signing time: Mon 30 Jun 2025 11:01:19 +0000
Manifest this update: Mon 30 Jun 2025 11:01:19 +0000
Manifest next update: Tue 01 Jul 2025 11:01:19 +0000
Files and hashes: 1: 7E7gyymF8j2toEenFO04AQuZbVQ.roa (hash: HKny0hIiEORMsHrCnF3pLBTGlpUFzpGxVsMxMmuOnho=)
2: tBuxzdW4a-d4BoidLhsgKswnsiU.crl (hash: Ls+7Li3rjlMBaeonIoN6jIYA1NPQvhd3SFMUgz3qk84=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/18c8d5-089a-470e-906d-dc4e7988a28a/1/tBuxzdW4a-d4BoidLhsgKswnsiU.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/18c8d5-089a-470e-906d-dc4e7988a28a/1/tBuxzdW4a-d4BoidLhsgKswnsiU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tBuxzdW4a-d4BoidLhsgKswnsiU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 11:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c0:7f:a0:88:7d:5c:2b:93:b0:94:25:41:44:ee:49:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b41bb1cdd5b86be77806889d2e1b202acc27b225
Validity
Not Before: Jun 30 11:01:19 2025 GMT
Not After : Jul 1 11:01:19 2025 GMT
Subject: CN=b093f2ef062aa9dde0eec4ba32ff37bcba76b6bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:43:b5:93:29:ad:26:0f:53:95:dd:7b:0a:de:
e0:5d:5a:7e:79:88:c2:06:01:8c:a6:14:cd:04:c7:
65:73:d9:00:f8:16:5d:bf:c1:b9:50:ba:19:63:ad:
f5:6b:77:ca:b0:7f:83:7f:2d:18:a0:ee:a4:35:85:
b3:88:9d:7d:bb:12:a9:72:3a:0d:31:48:6d:fc:29:
ae:e7:ca:bd:66:62:96:6f:d1:63:21:19:fa:71:65:
4f:84:bd:93:5f:70:46:72:5b:c0:0f:6c:43:95:ee:
50:35:a4:20:dd:60:e7:ba:35:be:86:7d:db:54:2f:
b3:03:4c:22:10:f0:40:8b:f3:ac:52:ed:6a:3a:d2:
42:d9:a3:2e:4b:25:36:76:c8:ff:38:3a:14:a4:3f:
3e:b7:7d:a0:4c:bd:ec:ab:12:f6:c9:3f:3b:ae:f5:
3f:21:ff:0a:c8:8b:ad:35:69:28:f5:6a:3c:d0:61:
0d:7d:2b:52:4e:67:a2:70:07:bf:2e:33:d3:e5:47:
6a:fe:5d:63:72:37:33:f3:d7:7c:dc:09:13:17:9d:
44:3b:74:2a:06:41:7c:85:d4:72:46:60:fb:02:04:
3c:8a:77:4d:79:ab:20:5b:19:60:dd:f5:2c:a3:bf:
14:52:13:a6:d0:15:ac:e1:04:74:fd:26:b5:97:73:
77:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:93:F2:EF:06:2A:A9:DD:E0:EE:C4:BA:32:FF:37:BC:BA:76:B6:BB
X509v3 Authority Key Identifier:
keyid:B4:1B:B1:CD:D5:B8:6B:E7:78:06:88:9D:2E:1B:20:2A:CC:27:B2:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tBuxzdW4a-d4BoidLhsgKswnsiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/18c8d5-089a-470e-906d-dc4e7988a28a/1/tBuxzdW4a-d4BoidLhsgKswnsiU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/18c8d5-089a-470e-906d-dc4e7988a28a/1/tBuxzdW4a-d4BoidLhsgKswnsiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:9d:c7:3e:d5:48:fd:5a:c9:a6:96:ba:f8:9b:e6:1d:77:c8:
e9:50:2c:32:6c:8c:29:b5:47:79:68:fe:e2:c9:96:55:f4:7d:
19:c4:bc:f7:07:f2:c7:0e:21:2b:6d:22:e3:d9:21:68:ff:3a:
79:e9:ce:7f:0f:69:91:d6:b1:0d:f7:08:90:2a:0c:ae:61:8c:
c2:a7:c0:07:a3:de:66:1e:5d:8c:99:51:aa:3f:c3:88:d2:91:
c7:85:e1:41:bc:23:2c:c7:41:4c:da:9d:4e:1f:10:19:82:88:
38:9d:33:fd:44:df:a5:39:a4:4c:6e:2e:4a:b5:69:ea:d0:a1:
a2:b4:17:ef:7b:c7:ea:98:45:f4:cd:b7:fc:e5:1c:65:95:27:
2f:f1:a7:8f:a8:2c:4a:d1:7e:59:c8:7e:85:a8:74:81:e2:8c:
63:77:f0:db:97:cf:6b:83:2f:1f:be:4f:65:23:48:bc:8d:4e:
ab:32:e7:41:49:53:10:ed:5c:99:16:07:90:0a:87:ff:57:27:
69:86:aa:66:7c:5f:64:d3:49:0c:dc:1d:fa:98:14:8d:69:ea:
7d:95:73:d6:5e:43:ed:b9:d9:51:d0:29:86:36:29:5b:80:04:
b7:ae:be:da:f8:c7:94:03:ea:38:14:eb:a1:ec:29:e4:ce:8d:
e8:12:8c:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 17:25:05 2025 by rpki-client