Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/bf748d-c4ca-4fd1-a59d-4060f211f3c3/1/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.mft
File: tFOis_uD2Gx4BswGYNgpEZ2TdbQ.mft (raw, json)
Hash identifier: 0hvxaMulM6W6DMARA/JgCcrMSRLSrAxTMlyaNA6TTGQ=
Subject key identifier: A9:07:C3:49:E4:A8:64:14:3C:6C:F0:DF:8E:4C:71:B5:09:66:42:D0
Authority key identifier: B4:53:A2:B3:FB:83:D8:6C:78:06:CC:06:60:D8:29:11:9D:93:75:B4
Certificate issuer: /CN=b453a2b3fb83d86c7806cc0660d829119d9375b4
Certificate serial: 0197C801C7ED15960DB10EF6A66CAE3B5367
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/bf748d-c4ca-4fd1-a59d-4060f211f3c3/1/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.mft
Manifest number: 0695
Signing time: Tue 01 Jul 2025 22:00:49 +0000
Manifest this update: Tue 01 Jul 2025 22:00:49 +0000
Manifest next update: Wed 02 Jul 2025 22:00:49 +0000
Files and hashes: 1: G4FFwIyiIU29W95QZk9-MWiLljM.roa (hash: iDaSzS67wgh1om9NMNs4mTJZEfMH7AGf6ifeuTsPDRg=)
2: tFOis_uD2Gx4BswGYNgpEZ2TdbQ.crl (hash: QXZk8Nf2fKtvAENmgjr7UyZbJXaOKM0k4MzVVCR5TTU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/bf748d-c4ca-4fd1-a59d-4060f211f3c3/1/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/bf748d-c4ca-4fd1-a59d-4060f211f3c3/1/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 16:57:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c8:01:c7:ed:15:96:0d:b1:0e:f6:a6:6c:ae:3b:53:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b453a2b3fb83d86c7806cc0660d829119d9375b4
Validity
Not Before: Jul 1 22:00:49 2025 GMT
Not After : Jul 2 22:00:49 2025 GMT
Subject: CN=a907c349e4a864143c6cf0df8e4c71b5096642d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:77:f3:8a:d6:38:c0:5a:68:41:0f:d6:0e:c7:
3e:d5:3f:5b:ea:78:58:b6:7f:f6:a4:ec:b4:8e:02:
14:b1:da:7f:dd:f0:3e:ce:35:a2:7a:d9:f5:7d:34:
0f:d8:91:1f:0d:00:ac:64:c9:08:5b:47:c4:5d:d0:
b1:dd:6a:ea:45:71:ec:fc:15:c2:98:6a:86:8e:a7:
ba:9d:dc:78:eb:23:b4:8e:cb:b1:0f:49:f5:74:09:
d5:e7:6e:b1:2b:04:d6:c8:8c:48:bc:b1:4d:14:52:
1c:de:2f:23:75:18:af:c0:65:d1:94:89:f3:2c:8d:
07:23:c7:84:73:12:0d:4f:76:4b:aa:68:c4:c1:53:
d6:19:20:50:59:fd:5a:92:54:59:f5:78:89:59:ce:
e1:dc:5f:91:59:60:e8:50:e6:2c:b9:82:94:b0:bd:
2d:23:b7:2e:9b:26:1e:20:c1:da:6e:a7:53:c4:48:
8d:db:30:f0:b0:17:92:00:b5:b6:bb:cb:d1:2a:3b:
7c:3e:e4:08:9e:38:4a:88:04:43:e0:2d:35:5e:d4:
6c:9b:1f:19:6b:90:0b:ba:c0:d8:f7:e8:3b:0e:b4:
fc:bb:5c:1f:fb:39:fe:08:11:47:dd:2b:33:f7:51:
be:19:45:4c:8c:0f:eb:d2:9c:50:a0:d2:82:ac:d3:
e2:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:07:C3:49:E4:A8:64:14:3C:6C:F0:DF:8E:4C:71:B5:09:66:42:D0
X509v3 Authority Key Identifier:
keyid:B4:53:A2:B3:FB:83:D8:6C:78:06:CC:06:60:D8:29:11:9D:93:75:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/bf748d-c4ca-4fd1-a59d-4060f211f3c3/1/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/bf748d-c4ca-4fd1-a59d-4060f211f3c3/1/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:e3:2f:ec:de:86:6f:1e:b4:56:f8:0a:7f:96:89:57:e3:7c:
d7:2f:00:09:f2:af:a5:8f:fc:cb:94:f2:d9:7e:3e:1c:ae:b5:
19:5e:a4:7f:73:e5:0e:e4:28:19:a4:e8:a9:87:36:17:84:d2:
4b:28:29:72:3f:a8:dd:43:09:08:24:6c:64:dd:d8:a8:4c:a3:
7e:6b:b4:0b:39:66:f5:44:49:5e:93:55:67:e8:54:70:fd:39:
45:48:24:a3:2a:ad:5e:bf:08:a1:a7:3b:b4:f6:1a:2a:83:ec:
7c:01:67:a1:a1:52:66:77:3e:35:03:14:36:9b:c6:3a:5e:f8:
55:b3:c0:4d:05:5d:87:35:14:8c:29:c6:6d:6d:7f:3d:ed:b4:
2c:8f:52:1c:d9:4d:37:af:f0:e3:82:10:1d:a7:7b:ac:aa:a9:
fd:d0:23:2e:7b:19:d0:6d:54:6c:e9:b4:e2:fd:e7:dc:f1:26:
e5:b2:23:22:3a:ee:de:5d:af:81:24:a6:d1:dd:31:90:dc:b7:
8b:34:b8:f2:cd:1f:f5:2f:53:af:db:ef:4e:29:a5:53:ee:1a:
42:cf:a0:65:d8:ac:41:3a:2c:09:e8:a0:9d:8b:48:17:f9:cc:
ea:f4:8e:fe:ca:0e:4b:a2:18:26:08:af:dc:ac:0d:dd:64:12:
08:73:4f:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 00:18:47 2025 by rpki-client