Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/645f6a-2653-4d31-bb4e-1f87976137a0/1/tAifhEgwV6w2RkfIChsjyXa5MBY.mft
File: tAifhEgwV6w2RkfIChsjyXa5MBY.mft (raw, json)
Hash identifier: FEPgIekpnR2ztCtckJ0xBA+DjmlwxIQVlI9lUjqu8Vc=
Subject key identifier: 36:7F:E1:B3:45:EA:5B:1F:73:C1:C9:C4:E0:AE:E9:14:29:85:6D:E6
Authority key identifier: B4:08:9F:84:48:30:57:AC:36:46:47:C8:0A:1B:23:C9:76:B9:30:16
Certificate issuer: /CN=b4089f84483057ac364647c80a1b23c976b93016
Certificate serial: 0197CBDFE7D2566787293FCED8CDA24402BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tAifhEgwV6w2RkfIChsjyXa5MBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/645f6a-2653-4d31-bb4e-1f87976137a0/1/tAifhEgwV6w2RkfIChsjyXa5MBY.mft
Manifest number: 15C0
Signing time: Wed 02 Jul 2025 16:02:18 +0000
Manifest this update: Wed 02 Jul 2025 16:02:18 +0000
Manifest next update: Thu 03 Jul 2025 16:02:18 +0000
Files and hashes: 1: ZZlyR1qePInNwWMshU_T-zKOIRs.roa (hash: 1/uH+W7Kksp46/1+HMCQDG/zqQ+/+VqifvgRn9tMf2U=)
2: tAifhEgwV6w2RkfIChsjyXa5MBY.crl (hash: KnStDjTQ4y1iaFif3+Szh6WutpVL2ip3/bYwxGkj/Ag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/645f6a-2653-4d31-bb4e-1f87976137a0/1/tAifhEgwV6w2RkfIChsjyXa5MBY.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/645f6a-2653-4d31-bb4e-1f87976137a0/1/tAifhEgwV6w2RkfIChsjyXa5MBY.mft
rsync://rpki.ripe.net/repository/DEFAULT/tAifhEgwV6w2RkfIChsjyXa5MBY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 16:02:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cb:df:e7:d2:56:67:87:29:3f:ce:d8:cd:a2:44:02:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4089f84483057ac364647c80a1b23c976b93016
Validity
Not Before: Jul 2 16:02:18 2025 GMT
Not After : Jul 3 16:02:18 2025 GMT
Subject: CN=367fe1b345ea5b1f73c1c9c4e0aee91429856de6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b4:b3:d4:6a:f0:e7:3a:07:4c:32:95:ae:7e:
3a:f3:4e:0c:b9:45:c5:d4:89:59:4f:cf:e2:f0:e5:
c3:8c:57:93:c8:91:fa:93:ca:e8:36:5d:5d:8d:b6:
63:5b:3c:e0:ca:a0:6e:50:43:37:50:ee:59:d0:a4:
e5:2d:f3:93:0d:13:05:73:27:71:69:09:1e:bd:b1:
ba:ef:af:bb:00:92:19:a0:67:e9:bd:13:a5:ed:d7:
7d:72:af:40:6c:5b:38:8e:7e:06:b1:18:7e:64:f2:
cb:16:bf:a4:70:72:3f:60:6d:16:79:63:f2:f7:93:
49:62:2d:a6:52:f2:66:5a:a9:0c:88:bd:82:bb:2e:
f5:4a:42:34:c2:e7:d0:ca:a9:cd:b6:44:a2:ac:b8:
29:52:40:56:74:82:15:6f:be:82:b4:e9:28:dc:f2:
aa:1c:5e:3c:68:39:f4:60:93:c6:87:7f:48:46:60:
72:66:52:12:70:d0:c5:aa:5f:a0:d0:2b:e1:85:ce:
59:67:96:48:3b:0d:c0:61:f3:93:36:72:dd:64:8a:
4c:1e:af:60:21:b4:cd:36:8c:bc:a1:2d:1f:21:13:
9b:12:1c:ce:d0:e6:aa:41:ee:d8:be:93:65:90:0c:
c3:c8:a7:a6:78:a3:1c:c2:a0:a1:bd:d5:23:38:66:
47:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:7F:E1:B3:45:EA:5B:1F:73:C1:C9:C4:E0:AE:E9:14:29:85:6D:E6
X509v3 Authority Key Identifier:
keyid:B4:08:9F:84:48:30:57:AC:36:46:47:C8:0A:1B:23:C9:76:B9:30:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tAifhEgwV6w2RkfIChsjyXa5MBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/645f6a-2653-4d31-bb4e-1f87976137a0/1/tAifhEgwV6w2RkfIChsjyXa5MBY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/645f6a-2653-4d31-bb4e-1f87976137a0/1/tAifhEgwV6w2RkfIChsjyXa5MBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:dc:c0:fc:ff:6e:6d:b2:7f:bf:5e:1b:b9:ee:aa:3b:6f:c4:
60:16:71:a1:c9:82:e5:23:a7:85:5f:ff:d6:67:fa:2f:ff:37:
9b:81:69:56:0c:8f:06:44:91:8e:19:d4:a9:4c:9a:c2:4e:18:
ae:00:9e:81:54:27:10:00:80:ce:2b:80:e2:f8:95:48:2b:8d:
22:93:72:1c:21:21:25:75:80:b5:65:86:35:3b:2c:cf:cf:57:
4a:3a:f0:42:3d:a7:0a:75:de:12:a0:42:65:92:19:79:76:c2:
b8:0d:55:4b:62:d0:74:37:db:c7:66:2f:ce:bb:da:da:47:9c:
09:a7:b8:83:e8:4a:09:52:a7:54:c3:05:54:49:f3:43:74:b0:
e0:63:f7:d0:9f:c1:c4:2d:5c:7e:e2:45:ae:a3:63:cc:e7:18:
8a:6b:6a:ac:b2:08:1d:9b:9c:61:0e:d3:5e:6b:7f:7f:07:71:
1d:ef:0f:41:49:6d:63:4b:f7:f8:9d:2c:2b:0f:ae:ad:c8:ac:
20:b1:da:25:e1:9f:c5:96:d0:eb:b9:85:dd:62:8d:4f:f6:d1:
77:cf:b4:0a:0a:0a:ad:c0:45:89:ce:40:4b:91:bd:bc:50:c0:
3f:fe:a9:26:b4:f1:f1:31:9f:bb:45:21:da:94:3b:c9:9c:ec:
73:30:9e:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 23:34:37 2025 by rpki-client