Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/b17ca4-2e2e-415a-adde-77257e04765f/1/TuBDL1Qp2GHXdDv8MdetAZYopes.mft
File: TuBDL1Qp2GHXdDv8MdetAZYopes.mft (raw, json)
Hash identifier: 2DTnz58BuBs6sWVzsbT4wLL/2rvTTtv4KItcpLJIHUw=
Subject key identifier: 1D:75:0A:B4:10:6E:A4:60:2F:D8:EA:5B:7C:C6:C7:3F:6C:90:B2:8D
Authority key identifier: 4E:E0:43:2F:54:29:D8:61:D7:74:3B:FC:31:D7:AD:01:96:28:A5:EB
Certificate issuer: /CN=4ee0432f5429d861d7743bfc31d7ad019628a5eb
Certificate serial: 0197B77C2AB819A5EC8A03FB53EE2C715F39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TuBDL1Qp2GHXdDv8MdetAZYopes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/b17ca4-2e2e-415a-adde-77257e04765f/1/TuBDL1Qp2GHXdDv8MdetAZYopes.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 17:00:57 +0000
Manifest this update: Sat 28 Jun 2025 17:00:57 +0000
Manifest next update: Sun 29 Jun 2025 17:00:57 +0000
Files and hashes: 1: TuBDL1Qp2GHXdDv8MdetAZYopes.crl (hash: P5Kig2A0xkY2FLtEU3FckiPRxVNKJKqyxlKvpk1Hf6w=)
2: V-oDOUzOLBq0RjtBmicPhW9GyFQ.roa (hash: iuJ5R7a61uv63vftS3TPCits4UE3OCvlD1Io0BilMuI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/b17ca4-2e2e-415a-adde-77257e04765f/1/TuBDL1Qp2GHXdDv8MdetAZYopes.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/b17ca4-2e2e-415a-adde-77257e04765f/1/TuBDL1Qp2GHXdDv8MdetAZYopes.mft
rsync://rpki.ripe.net/repository/DEFAULT/TuBDL1Qp2GHXdDv8MdetAZYopes.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:2a:b8:19:a5:ec:8a:03:fb:53:ee:2c:71:5f:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ee0432f5429d861d7743bfc31d7ad019628a5eb
Validity
Not Before: Jun 28 17:00:57 2025 GMT
Not After : Jun 29 17:00:57 2025 GMT
Subject: CN=1d750ab4106ea4602fd8ea5b7cc6c73f6c90b28d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:5c:04:f5:d0:bd:18:05:5b:f0:19:0b:16:49:
62:07:cb:5a:11:cc:f7:1d:86:c5:af:1e:af:41:b2:
5a:29:d1:c9:5b:57:f7:1d:2f:60:87:f5:ae:7d:c3:
62:19:79:c2:1b:d8:0a:72:59:95:21:18:6c:97:00:
30:5c:8d:85:5d:a0:c7:51:51:6d:05:37:c3:22:9d:
f0:45:21:1a:15:8c:0f:7f:b2:84:a2:c3:9f:14:d6:
df:1e:8f:a8:2a:e0:b3:79:19:67:89:02:d6:e8:1f:
df:36:b0:cc:39:ef:bc:ae:9c:ae:db:0c:a6:c6:55:
bb:ca:26:69:31:7d:0e:75:7d:2d:3d:14:73:f6:10:
af:c6:07:2e:78:bc:8b:e8:2a:1a:be:cc:75:9b:b9:
85:17:38:66:14:bb:ab:e8:80:0b:48:cd:93:19:85:
1a:a1:b8:3f:27:89:43:f3:15:b2:6a:67:f4:4d:ac:
79:85:46:a8:0f:d6:1c:09:fe:7b:8d:b2:cc:b8:c9:
48:e4:52:60:e3:b7:b9:31:54:84:d6:24:8f:88:b6:
95:cf:17:9a:f4:cf:4d:7b:bc:74:06:29:32:f5:ed:
91:c6:98:ec:09:16:c8:5c:e2:59:32:5b:de:a2:a6:
40:69:cd:41:b6:7f:58:57:f3:07:e9:21:86:93:f1:
81:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:75:0A:B4:10:6E:A4:60:2F:D8:EA:5B:7C:C6:C7:3F:6C:90:B2:8D
X509v3 Authority Key Identifier:
keyid:4E:E0:43:2F:54:29:D8:61:D7:74:3B:FC:31:D7:AD:01:96:28:A5:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuBDL1Qp2GHXdDv8MdetAZYopes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b17ca4-2e2e-415a-adde-77257e04765f/1/TuBDL1Qp2GHXdDv8MdetAZYopes.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b17ca4-2e2e-415a-adde-77257e04765f/1/TuBDL1Qp2GHXdDv8MdetAZYopes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:f5:68:ea:eb:7e:2f:0d:02:d7:52:19:6c:b7:3a:5d:59:ce:
77:3c:e4:87:df:4a:5e:6d:61:31:90:cc:ba:a7:88:0e:82:43:
33:df:45:3f:b3:d5:ba:ac:87:22:94:e9:cc:cc:05:1e:31:6b:
2c:84:07:63:40:b6:2e:a4:89:93:b9:6d:27:d9:9e:ca:13:0f:
b9:b2:88:c0:40:5d:46:ff:7a:85:ec:bf:6f:81:62:7d:24:31:
92:89:e2:da:95:12:98:1a:ee:ba:88:e5:13:92:2a:cd:a3:fa:
cb:47:e6:46:05:c0:9f:7d:2d:bd:74:f1:30:06:47:cc:d4:61:
b6:38:ce:26:5a:01:0b:46:b0:25:82:2b:61:0d:93:a0:4b:ee:
90:c2:fc:68:0c:2f:97:d5:8c:d2:4f:4a:2d:a0:04:bc:4b:39:
c8:5f:e1:43:e5:88:cd:be:c6:4e:8f:2b:a8:10:9a:43:86:f9:
9d:c6:7b:bd:b2:35:c2:51:c3:5c:13:cd:57:5d:61:08:1c:a2:
18:45:b6:1f:2f:6f:d1:f8:0f:f4:cb:1a:76:9d:7b:68:75:ef:
80:84:03:1c:e3:e6:90:f1:af:b9:aa:f6:fd:2f:43:0f:d3:ea:
0e:74:aa:3a:d7:d9:f7:96:75:e4:f5:81:04:3b:7b:d8:a3:3b:
42:29:2e:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:26:19 2025 by rpki-client