Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/tOiC9xca9tzczJzXn5jexnV_4Yk.mft
File: tOiC9xca9tzczJzXn5jexnV_4Yk.mft (raw, json)
Hash identifier: x89VmzyliHPzEMdC2AMV9Me/gCKA4617hV6H40D6Thc=
Subject key identifier: DD:16:D2:1C:CB:74:CD:95:CE:BF:FD:80:6E:7E:DF:84:B4:9C:27:CF
Authority key identifier: B4:E8:82:F7:17:1A:F6:DC:DC:CC:9C:D7:9F:98:DE:C6:75:7F:E1:89
Certificate issuer: /CN=b4e882f7171af6dcdccc9cd79f98dec6757fe189
Certificate serial: 0197DDE51A9EC0E30B0A282CF4FDDDB4EAB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tOiC9xca9tzczJzXn5jexnV_4Yk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/tOiC9xca9tzczJzXn5jexnV_4Yk.mft
Manifest number: 15C7
Signing time: Sun 06 Jul 2025 04:01:08 +0000
Manifest this update: Sun 06 Jul 2025 04:01:08 +0000
Manifest next update: Mon 07 Jul 2025 04:01:08 +0000
Files and hashes: 1: WmxX7pBfpD5c2m2kHOUO4M_bBgA.roa (hash: q0DpW8XtR4IxHRwLJz0IGFkpb8cJ4HYo8d4HsEmNl8o=)
2: tOiC9xca9tzczJzXn5jexnV_4Yk.crl (hash: cv+vMPtMBUKUziDmbUXhxG+3rSLCwkx3BGKte6BnPfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/tOiC9xca9tzczJzXn5jexnV_4Yk.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/tOiC9xca9tzczJzXn5jexnV_4Yk.mft
rsync://rpki.ripe.net/repository/DEFAULT/tOiC9xca9tzczJzXn5jexnV_4Yk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Jul 2025 01:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:dd:e5:1a:9e:c0:e3:0b:0a:28:2c:f4:fd:dd:b4:ea:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4e882f7171af6dcdccc9cd79f98dec6757fe189
Validity
Not Before: Jul 6 04:01:08 2025 GMT
Not After : Jul 7 04:01:08 2025 GMT
Subject: CN=dd16d21ccb74cd95cebffd806e7edf84b49c27cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:5a:38:c3:76:f7:02:b7:16:b1:a1:53:90:b1:
5f:10:fe:bf:a5:35:40:46:3c:34:92:bb:b0:4e:b4:
0a:57:74:0b:f5:62:f1:4d:f1:ea:b7:45:81:4f:04:
45:56:d4:cd:c1:f2:7e:7b:05:91:ab:9a:d0:a8:da:
5f:e0:38:ec:3b:23:87:52:c1:bb:68:55:02:ad:44:
f5:42:4b:43:8b:88:90:35:84:94:42:d7:4a:00:46:
26:b7:fc:fc:ab:12:8f:58:1a:37:58:6c:2b:45:5b:
93:89:3b:58:1d:1d:3d:7d:41:e2:a2:b5:3d:a9:d5:
f7:05:17:e5:c8:f7:6d:16:5c:a5:20:80:18:31:f4:
ab:e1:50:74:b0:09:94:1c:8f:02:b4:30:5e:af:d2:
bc:ff:6c:95:ed:64:ce:f5:a0:fb:34:9c:ba:94:26:
25:d0:b8:d2:a1:da:c2:bb:33:25:96:09:db:79:9a:
19:d4:c4:18:7f:5c:18:1d:40:38:ec:f3:c7:ee:98:
17:b7:87:11:ac:be:34:44:03:7f:f0:5c:d8:09:52:
ee:a6:6e:c1:b1:ed:04:d9:ac:2d:3a:b9:03:22:8f:
d9:5c:6a:02:cc:c6:16:8e:63:98:aa:43:4b:0d:24:
ff:f0:55:42:4f:0b:d2:58:ee:62:5e:cd:05:c0:ae:
47:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:16:D2:1C:CB:74:CD:95:CE:BF:FD:80:6E:7E:DF:84:B4:9C:27:CF
X509v3 Authority Key Identifier:
keyid:B4:E8:82:F7:17:1A:F6:DC:DC:CC:9C:D7:9F:98:DE:C6:75:7F:E1:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tOiC9xca9tzczJzXn5jexnV_4Yk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/tOiC9xca9tzczJzXn5jexnV_4Yk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/tOiC9xca9tzczJzXn5jexnV_4Yk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:f5:49:50:b1:6e:00:74:dd:66:5d:38:bb:d0:51:44:f2:2a:
1e:92:ec:7e:b4:da:a0:c2:7d:3b:b1:ca:d1:98:b6:cc:b0:e9:
7d:12:6b:d6:9c:6c:4c:4f:c3:bb:78:e5:43:cf:50:5e:b1:af:
41:c7:f7:42:e8:8d:9f:7d:4b:55:9b:5c:a3:aa:75:ef:12:b0:
22:f1:27:b2:6c:c2:aa:00:e1:5c:08:35:f9:a5:d6:e9:41:3b:
10:9e:1f:99:c7:26:36:e6:34:e2:40:28:2a:59:a2:79:23:7d:
53:81:84:92:47:db:5f:d4:c1:2d:93:31:5a:8e:12:70:ab:dd:
1c:c4:76:e8:5b:51:66:4b:e3:ed:ac:60:07:1c:7d:4a:6b:74:
b7:83:13:91:b1:bd:07:c7:24:8e:d1:aa:fb:22:cb:20:fd:46:
78:9b:a0:a8:49:dd:e1:13:c2:1c:c2:1a:6a:5d:11:52:c5:1a:
8c:9f:90:44:76:d2:6c:79:39:b7:ae:19:15:ff:9d:89:b0:62:
94:ae:0c:75:e2:fe:01:c1:91:26:27:51:61:87:4e:e5:bc:5e:
3f:a2:4a:f0:8f:89:2d:20:7c:f4:27:7a:18:aa:45:c4:05:7e:
24:4f:d7:96:1d:76:e2:e7:0a:47:ab:3a:3a:0e:4c:60:35:ce:
73:df:55:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 6 06:22:10 2025 by rpki-client