Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/daf212-f009-4bd4-874d-624c3e788cdf/1/tmDXgyCGDV7-cp4gi160sqvr4Hg.mft
File: tmDXgyCGDV7-cp4gi160sqvr4Hg.mft (raw, json)
Hash identifier: 0bva5Us7HuXgeR0b6R141YBoj4vpOPGeIUDzwF8e2b4=
Subject key identifier: BE:70:45:6D:81:E3:1E:12:CD:35:D7:D4:CD:80:83:6A:90:5D:BB:E4
Authority key identifier: B6:60:D7:83:20:86:0D:5E:FE:72:9E:20:8B:5E:B4:B2:AB:EB:E0:78
Certificate issuer: /CN=b660d78320860d5efe729e208b5eb4b2abebe078
Certificate serial: 0197B7B38D51A044999DD44921DAB8A159FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tmDXgyCGDV7-cp4gi160sqvr4Hg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/daf212-f009-4bd4-874d-624c3e788cdf/1/tmDXgyCGDV7-cp4gi160sqvr4Hg.mft
Manifest number: 0B68
Signing time: Sat 28 Jun 2025 18:01:27 +0000
Manifest this update: Sat 28 Jun 2025 18:01:27 +0000
Manifest next update: Sun 29 Jun 2025 18:01:27 +0000
Files and hashes: 1: H_s46FVu3VtqmBdzQOsgFtOpwm4.roa (hash: xXfRZ05adaRJT3b+JBMiwuYhoS+v9eiqRiPqJaWYY3s=)
2: tmDXgyCGDV7-cp4gi160sqvr4Hg.crl (hash: XI47c4fpJ72FvcMlm8FrlXuE+4qMBAm+ApWVyoDFyJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/daf212-f009-4bd4-874d-624c3e788cdf/1/tmDXgyCGDV7-cp4gi160sqvr4Hg.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/daf212-f009-4bd4-874d-624c3e788cdf/1/tmDXgyCGDV7-cp4gi160sqvr4Hg.mft
rsync://rpki.ripe.net/repository/DEFAULT/tmDXgyCGDV7-cp4gi160sqvr4Hg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:8d:51:a0:44:99:9d:d4:49:21:da:b8:a1:59:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b660d78320860d5efe729e208b5eb4b2abebe078
Validity
Not Before: Jun 28 18:01:27 2025 GMT
Not After : Jun 29 18:01:27 2025 GMT
Subject: CN=be70456d81e31e12cd35d7d4cd80836a905dbbe4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f4:3a:cb:a6:b3:e0:23:77:b3:4f:ba:04:95:
d3:74:78:f1:5e:af:91:0d:fc:28:ad:a7:91:38:23:
54:62:c8:7f:19:90:82:ac:ec:a8:b0:af:25:74:49:
9a:81:5a:2c:47:f5:0a:fe:1d:be:a0:54:43:fc:bd:
f4:18:6c:a5:59:97:89:1c:d4:23:77:09:ca:1d:97:
e3:e5:f5:e2:95:7b:8e:70:37:a5:f0:da:ae:65:25:
ec:ee:c8:60:db:00:5e:bc:c7:bd:a6:0b:a2:fe:c9:
40:90:b6:0e:ec:1b:d9:c1:0b:2b:0f:7b:7d:5f:ec:
b4:4b:41:a1:81:4b:fa:e1:ab:df:f7:d4:d5:6b:89:
ae:9e:81:1c:c5:0b:51:47:90:05:62:eb:da:c0:86:
33:cc:fe:5d:6c:f5:0c:f6:c9:d5:a8:fc:52:b6:2d:
63:ab:9e:c7:2f:bf:aa:5e:0a:ae:f7:2c:2d:22:02:
b2:d2:4a:95:d9:53:e4:e0:af:45:40:3b:00:7a:37:
59:5d:b6:cd:2d:06:52:3e:cc:12:e7:18:2e:65:08:
1e:c9:1c:e5:70:6f:11:b7:db:b7:ff:a0:f8:ca:4f:
8d:38:42:c8:41:77:53:c5:ba:ac:49:3b:8a:95:67:
35:40:79:8c:60:27:f8:b4:6d:8b:1b:bd:e1:06:2c:
8a:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:70:45:6D:81:E3:1E:12:CD:35:D7:D4:CD:80:83:6A:90:5D:BB:E4
X509v3 Authority Key Identifier:
keyid:B6:60:D7:83:20:86:0D:5E:FE:72:9E:20:8B:5E:B4:B2:AB:EB:E0:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tmDXgyCGDV7-cp4gi160sqvr4Hg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/daf212-f009-4bd4-874d-624c3e788cdf/1/tmDXgyCGDV7-cp4gi160sqvr4Hg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/daf212-f009-4bd4-874d-624c3e788cdf/1/tmDXgyCGDV7-cp4gi160sqvr4Hg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:01:70:52:5f:ed:22:83:25:66:77:ab:ad:a0:fb:6d:be:c7:
63:2d:16:cc:64:fc:5f:b6:ad:b8:76:91:75:16:bc:1e:d7:d6:
f3:d3:aa:b7:d6:a2:39:5f:c9:e5:96:73:8f:69:b4:05:7d:dc:
ba:60:19:8a:15:f7:93:ba:6a:48:a8:83:63:a1:ae:3a:ea:74:
db:4c:bc:32:04:86:6f:35:e5:82:18:c8:92:bf:a4:a4:31:8e:
a1:ee:f9:87:b5:11:a6:21:92:57:5a:f2:34:1b:a7:4b:b5:66:
ad:dd:03:9d:18:1b:10:2c:2d:35:d6:7b:5b:b6:fc:c3:11:b1:
93:d4:bb:09:cf:aa:76:60:53:08:99:6c:a4:3d:25:cf:2a:79:
70:47:53:a2:bf:4a:1a:d7:f4:72:52:5c:38:04:66:c7:1a:5b:
aa:52:44:2c:5d:26:e4:2e:c5:82:40:c3:28:37:fb:b9:6a:77:
43:a1:14:0e:0f:97:da:d8:f8:6a:68:16:3f:83:8f:89:a8:0f:
5f:95:92:33:92:7a:0c:e5:cf:90:14:3e:a7:5f:b1:68:18:54:
ee:71:64:57:0f:5a:ea:7e:8d:2e:73:d9:fd:c4:cf:c8:8a:ad:
9f:d5:29:fc:e4:42:a3:5e:38:83:de:5f:d4:4f:d9:f7:92:8d:
4f:24:a5:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:36:06 2025 by rpki-client