Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/5036be-138b-442e-963f-57cd72957b89/1/t6hswzTG4Oq4PyUr2D7ulWklykA.mft
File: t6hswzTG4Oq4PyUr2D7ulWklykA.mft (raw, json)
Hash identifier: N7+5FRZpCiTydh6oQ+KrmK6DNRH/0xSxSk4exPSU9T8=
Subject key identifier: 52:94:8D:8A:AF:8E:BB:79:A8:EE:59:D7:A6:6C:7B:4C:59:41:6C:C3
Authority key identifier: B7:A8:6C:C3:34:C6:E0:EA:B8:3F:25:2B:D8:3E:EE:95:69:25:CA:40
Certificate issuer: /CN=b7a86cc334c6e0eab83f252bd83eee956925ca40
Certificate serial: 0197B70EF6384D9B577675322FA37AAFB916
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t6hswzTG4Oq4PyUr2D7ulWklykA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/5036be-138b-442e-963f-57cd72957b89/1/t6hswzTG4Oq4PyUr2D7ulWklykA.mft
Manifest number: 15B3
Signing time: Sat 28 Jun 2025 15:01:40 +0000
Manifest this update: Sat 28 Jun 2025 15:01:40 +0000
Manifest next update: Sun 29 Jun 2025 15:01:40 +0000
Files and hashes: 1: YDZQqJLg6f9-JdbHT4bYmgUJjh0.roa (hash: cInsk0zvLYwt9OlQZPLFwtQxycESn1Vx2ttrJFC0hi8=)
2: t6hswzTG4Oq4PyUr2D7ulWklykA.crl (hash: lebtRSgOWv8CBH+FX2m0Isk9344rZHp7de2rnsAMlag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/5036be-138b-442e-963f-57cd72957b89/1/t6hswzTG4Oq4PyUr2D7ulWklykA.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/5036be-138b-442e-963f-57cd72957b89/1/t6hswzTG4Oq4PyUr2D7ulWklykA.mft
rsync://rpki.ripe.net/repository/DEFAULT/t6hswzTG4Oq4PyUr2D7ulWklykA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:f6:38:4d:9b:57:76:75:32:2f:a3:7a:af:b9:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7a86cc334c6e0eab83f252bd83eee956925ca40
Validity
Not Before: Jun 28 15:01:40 2025 GMT
Not After : Jun 29 15:01:40 2025 GMT
Subject: CN=52948d8aaf8ebb79a8ee59d7a66c7b4c59416cc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:e4:6d:36:40:2f:38:1d:74:8f:df:36:66:59:
82:7f:58:48:82:58:87:af:5d:bd:b3:85:50:7e:b4:
0d:d6:3a:87:ce:79:77:ef:1f:41:cb:f9:86:71:9d:
5e:5a:bf:c8:9f:d4:a7:ea:50:ae:76:fb:8e:eb:fa:
4e:78:f5:cf:f1:96:79:b5:00:8f:2a:f7:d6:7b:02:
09:8c:a7:da:2e:a1:54:f0:a0:8f:bb:f1:98:88:4d:
9b:0f:f9:cf:45:e3:23:d5:4d:ba:21:70:70:c8:70:
46:b1:5e:30:1f:1b:84:75:a8:7b:b2:72:8d:2c:1f:
d4:ba:a0:f5:d5:96:ba:57:6e:93:90:da:61:6f:1f:
8e:42:b8:94:5b:28:07:f2:6b:d6:8c:e8:9c:65:1c:
af:b1:5e:41:46:c4:ef:a2:18:6b:94:11:f7:54:48:
14:11:97:04:4e:9f:4b:9d:eb:43:89:85:4f:8f:b5:
1f:e5:87:30:68:38:70:c9:33:51:83:da:97:e2:0b:
4d:c4:c7:0f:cb:ab:f7:13:c6:96:cd:89:bb:2a:f3:
b1:a1:4e:df:9e:a9:c9:85:de:7f:56:65:f6:2b:56:
69:32:19:63:61:78:f6:39:cc:92:62:f7:cb:5a:3c:
3f:64:9f:d5:87:47:24:de:39:c2:fb:16:4d:48:3c:
6a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:94:8D:8A:AF:8E:BB:79:A8:EE:59:D7:A6:6C:7B:4C:59:41:6C:C3
X509v3 Authority Key Identifier:
keyid:B7:A8:6C:C3:34:C6:E0:EA:B8:3F:25:2B:D8:3E:EE:95:69:25:CA:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t6hswzTG4Oq4PyUr2D7ulWklykA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/5036be-138b-442e-963f-57cd72957b89/1/t6hswzTG4Oq4PyUr2D7ulWklykA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/5036be-138b-442e-963f-57cd72957b89/1/t6hswzTG4Oq4PyUr2D7ulWklykA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:e7:d6:96:1c:b3:cd:3b:26:ae:b4:44:26:0a:3e:89:14:3d:
ed:a3:9e:82:68:bb:ab:e1:7c:73:de:31:46:fc:7e:39:64:e8:
1a:9e:2a:ba:af:c2:ef:e5:56:a9:07:d6:f2:6c:b8:da:65:80:
03:ec:fc:55:1d:63:e5:2f:15:a0:13:df:92:72:d6:e6:68:31:
78:88:ba:10:f1:24:23:7e:64:05:11:71:a1:66:e2:5b:a4:3a:
fa:29:d1:45:bf:cb:ad:84:a3:4f:0a:54:0a:7f:e5:d2:49:0b:
cc:1c:c2:0f:af:d7:40:e4:dd:d3:f6:02:b5:c6:6b:e0:42:0f:
bd:84:77:be:06:da:02:65:3e:2a:89:7f:d0:88:87:23:ea:1b:
c0:22:91:aa:d9:06:89:b5:ae:03:4d:04:99:ab:12:12:9c:2e:
18:c2:42:4e:d6:78:fa:ef:5a:f9:60:c8:0d:3b:ec:b3:07:e9:
17:d0:2d:26:2d:2b:90:cc:ae:9e:2d:e9:53:89:8a:c5:79:4a:
ac:fe:7a:99:67:fd:62:cf:45:85:c4:a1:53:22:ea:95:5e:92:
c4:5b:35:a9:8c:f8:a6:3e:67:9f:a7:82:57:39:42:d4:64:a7:
de:43:5d:08:69:cd:9f:09:bc:92:a4:43:64:5d:7f:c7:01:06:
5f:3d:da:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:43:28 2025 by rpki-client