Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/20e95b-af0c-4796-abe2-e7cc87023961/1/T0n-B0Y1HIfDQYrNOYbnYoxFh2c.mft
File: T0n-B0Y1HIfDQYrNOYbnYoxFh2c.mft (raw, json)
Hash identifier: xVO2c5V5KMuSuGXYPwb8jAFvh1LDVKWViTXph1k0VzY=
Subject key identifier: 07:0C:92:2B:D8:63:F2:68:C3:56:61:BE:61:65:FF:05:EF:B6:EC:71
Authority key identifier: 4F:49:FE:07:46:35:1C:87:C3:41:8A:CD:39:86:E7:62:8C:45:87:67
Certificate issuer: /CN=4f49fe0746351c87c3418acd3986e7628c458767
Certificate serial: 0197B7453C8C5B467B2E622A7D1D3B301244
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T0n-B0Y1HIfDQYrNOYbnYoxFh2c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/20e95b-af0c-4796-abe2-e7cc87023961/1/T0n-B0Y1HIfDQYrNOYbnYoxFh2c.mft
Manifest number: 32
Signing time: Sat 28 Jun 2025 16:00:57 +0000
Manifest this update: Sat 28 Jun 2025 16:00:57 +0000
Manifest next update: Sun 29 Jun 2025 16:00:57 +0000
Files and hashes: 1: T0n-B0Y1HIfDQYrNOYbnYoxFh2c.crl (hash: gE+AYz7X3NK0gG0VZjhduqSfvTIiMz8cnB8K0vdNZ/4=)
2: d4w4xxcWDAqyLqbgWT3EJnLoy6o.roa (hash: brOB9FNZkSJh8TLBEcKXXcmOw1w3mH+eTmmqITITff0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/20e95b-af0c-4796-abe2-e7cc87023961/1/T0n-B0Y1HIfDQYrNOYbnYoxFh2c.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/20e95b-af0c-4796-abe2-e7cc87023961/1/T0n-B0Y1HIfDQYrNOYbnYoxFh2c.mft
rsync://rpki.ripe.net/repository/DEFAULT/T0n-B0Y1HIfDQYrNOYbnYoxFh2c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:3c:8c:5b:46:7b:2e:62:2a:7d:1d:3b:30:12:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f49fe0746351c87c3418acd3986e7628c458767
Validity
Not Before: Jun 28 16:00:57 2025 GMT
Not After : Jun 29 16:00:57 2025 GMT
Subject: CN=070c922bd863f268c35661be6165ff05efb6ec71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:bb:8a:fd:92:fa:25:ad:4d:3b:0c:dc:ed:f7:
12:b1:a2:fd:3e:d4:12:e2:84:23:6f:60:1b:c5:63:
c0:69:9f:6b:73:d5:ad:86:35:22:bc:2c:a1:f2:58:
d8:a4:41:66:cb:7d:1e:e3:cb:da:c3:a0:23:dc:f2:
38:32:5f:41:9d:7f:3a:31:39:1c:51:0a:eb:09:45:
ba:be:84:9c:1f:4f:a8:56:47:21:a4:dc:9a:d0:a8:
4a:87:84:ca:7b:b5:e4:a1:23:c0:12:fe:a6:83:b7:
90:1c:68:31:c1:0b:cc:c7:cc:d8:86:a3:14:2e:1b:
a8:c2:03:a4:70:e3:25:93:91:f0:68:aa:ce:f3:ef:
f9:7b:8f:c4:18:04:99:21:27:50:15:3d:16:b0:58:
e4:ff:75:db:d1:5d:ba:c3:58:7d:33:fc:69:7b:99:
0a:78:36:9f:88:8e:2f:bc:6a:59:d7:19:d7:33:af:
5a:25:43:f1:53:56:5c:0b:51:03:fa:a8:a8:03:0b:
84:0d:af:c2:84:c7:92:8b:33:a4:f9:d7:da:57:6b:
0d:96:9d:17:83:cf:25:6e:bc:d2:ea:61:0c:b7:13:
09:75:f6:79:7b:9b:43:30:a2:e2:f8:53:b7:ad:be:
8e:18:84:fd:bf:30:64:4b:53:bc:de:55:7e:06:8b:
3b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:0C:92:2B:D8:63:F2:68:C3:56:61:BE:61:65:FF:05:EF:B6:EC:71
X509v3 Authority Key Identifier:
keyid:4F:49:FE:07:46:35:1C:87:C3:41:8A:CD:39:86:E7:62:8C:45:87:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T0n-B0Y1HIfDQYrNOYbnYoxFh2c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/20e95b-af0c-4796-abe2-e7cc87023961/1/T0n-B0Y1HIfDQYrNOYbnYoxFh2c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/20e95b-af0c-4796-abe2-e7cc87023961/1/T0n-B0Y1HIfDQYrNOYbnYoxFh2c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:3d:9b:13:ca:3c:06:55:01:10:ef:3f:af:ea:78:8a:79:99:
b4:cc:c2:dd:68:c1:e4:a5:8b:09:50:5b:c7:26:87:db:22:af:
53:ac:b5:be:4c:8d:2d:55:08:86:67:ff:3d:e1:6a:39:df:57:
9e:40:0a:36:d7:62:07:c0:1c:9e:3e:39:a4:52:0f:f4:88:5c:
e1:9f:4f:12:c9:c2:00:cb:a4:21:dc:09:60:36:0e:e6:ef:c3:
e0:09:8c:62:f3:62:83:0d:91:60:6a:97:63:07:af:1c:d9:1f:
6f:00:20:ef:73:73:32:59:4a:5a:7e:30:cd:fb:c1:4a:28:be:
0e:4d:ee:f3:dc:44:ea:bc:0c:45:f1:89:98:d3:d6:e9:2f:ee:
c9:ae:29:8c:e8:df:3a:db:96:aa:4f:7f:63:af:c3:06:40:78:
52:c2:f9:2b:65:d5:6d:b3:b9:2b:c2:65:5f:b2:be:f1:4b:71:
e6:6e:9b:a8:ab:b1:b0:de:17:e2:ae:f5:70:74:dc:c4:6a:72:
ae:2d:55:20:b3:5d:fb:1d:02:ce:21:b9:3c:82:2f:bc:b7:62:
aa:73:dc:ef:b0:24:29:b6:9d:a5:98:c5:6b:54:a9:7e:5c:0f:
f9:b7:af:32:8b:36:da:9f:ce:fd:56:a0:82:fb:16:de:81:58:
66:58:9e:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:43:11 2025 by rpki-client