Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/c70928-cede-4b62-89a7-60f6fa9110e2/1/T51fuq92qApl4OksAgYeiVsrgRc.mft
File: T51fuq92qApl4OksAgYeiVsrgRc.mft (raw, json)
Hash identifier: TAuiTXoOrsCsVEai6O+dQ9UUH38Afj7E9EA9bNegvx0=
Subject key identifier: B6:CE:A0:90:82:77:B4:BA:6F:7C:CD:24:A3:38:C9:2A:67:F1:B3:4E
Authority key identifier: 4F:9D:5F:BA:AF:76:A8:0A:65:E0:E9:2C:02:06:1E:89:5B:2B:81:17
Certificate issuer: /CN=4f9d5fbaaf76a80a65e0e92c02061e895b2b8117
Certificate serial: 0197B6D731E9DF8879F6FE6AAF0039DD92C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T51fuq92qApl4OksAgYeiVsrgRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/c70928-cede-4b62-89a7-60f6fa9110e2/1/T51fuq92qApl4OksAgYeiVsrgRc.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 14:00:45 +0000
Manifest this update: Sat 28 Jun 2025 14:00:45 +0000
Manifest next update: Sun 29 Jun 2025 14:00:45 +0000
Files and hashes: 1: T51fuq92qApl4OksAgYeiVsrgRc.crl (hash: BqHpJWD15eySGNeD3esBXks8GqMwT2YIcwf+2cduwKc=)
2: oudSfHdCLiNB6U8UydMcb_Ovg84.roa (hash: LQDm0fv1Tzx1NMtk5XfrPEJuzKPUwQiMUZ87fbukA4c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/c70928-cede-4b62-89a7-60f6fa9110e2/1/T51fuq92qApl4OksAgYeiVsrgRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/c70928-cede-4b62-89a7-60f6fa9110e2/1/T51fuq92qApl4OksAgYeiVsrgRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/T51fuq92qApl4OksAgYeiVsrgRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:31:e9:df:88:79:f6:fe:6a:af:00:39:dd:92:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9d5fbaaf76a80a65e0e92c02061e895b2b8117
Validity
Not Before: Jun 28 14:00:45 2025 GMT
Not After : Jun 29 14:00:45 2025 GMT
Subject: CN=b6cea0908277b4ba6f7ccd24a338c92a67f1b34e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:88:ee:8d:2f:c8:6b:a7:a0:8a:d0:ef:32:d0:
92:eb:d6:4f:cf:41:d5:14:f5:0c:e6:ac:0b:16:e4:
4f:13:03:bb:98:0a:8a:4a:9c:e0:e5:82:c0:53:49:
a9:6d:d3:09:1a:26:b1:40:1d:c4:20:76:a3:27:e6:
f7:22:f6:80:cd:16:7b:f5:8c:7a:9b:98:7b:98:8a:
cd:ef:2b:8b:96:86:96:8c:b5:81:03:58:81:29:8a:
c1:94:fe:84:26:0f:d0:43:0c:14:d8:95:5a:ec:c8:
df:a5:c1:bf:bd:c8:6f:56:a4:43:47:c3:fe:f8:fd:
3a:3f:af:df:9b:94:13:85:5e:f4:3b:69:b4:b2:44:
a1:90:c8:54:f5:85:7b:24:50:1c:b6:b4:24:94:a0:
d5:a4:c3:0e:7c:b5:fa:da:f5:0d:e8:e1:89:bd:36:
bd:b1:44:fb:a8:5e:e8:1c:b9:54:db:51:05:5c:14:
21:b2:f5:11:55:14:fd:64:fa:d3:82:6a:db:be:cc:
b7:ed:52:ed:5d:43:db:45:cb:57:dd:df:67:02:24:
6a:de:f6:e4:82:53:c7:5a:21:e6:82:5c:81:75:14:
85:38:96:d3:b2:d4:d0:1d:db:5c:c8:8b:6e:4a:bd:
72:c1:fe:9b:80:6d:2c:89:ce:69:88:6d:68:33:c5:
9f:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:CE:A0:90:82:77:B4:BA:6F:7C:CD:24:A3:38:C9:2A:67:F1:B3:4E
X509v3 Authority Key Identifier:
keyid:4F:9D:5F:BA:AF:76:A8:0A:65:E0:E9:2C:02:06:1E:89:5B:2B:81:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T51fuq92qApl4OksAgYeiVsrgRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/c70928-cede-4b62-89a7-60f6fa9110e2/1/T51fuq92qApl4OksAgYeiVsrgRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/c70928-cede-4b62-89a7-60f6fa9110e2/1/T51fuq92qApl4OksAgYeiVsrgRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:ee:95:fe:b6:1a:2e:fa:75:dc:48:4a:14:ed:85:83:4d:98:
1e:0c:e3:d1:f0:bb:a8:a0:43:3a:44:da:df:72:9a:20:c8:d2:
6a:72:c8:8a:35:14:36:ea:72:b3:a1:f9:ad:9f:5b:53:33:a4:
dd:3c:ab:01:dd:03:89:42:c4:05:25:83:5a:ac:60:5d:9f:cd:
46:7f:14:2b:bd:e2:89:2d:ca:4d:b8:c0:ab:76:1a:38:42:b3:
b4:85:73:a0:bb:7e:13:78:92:56:c9:ed:09:96:26:96:32:ff:
e5:84:28:71:76:83:30:60:49:7e:a1:44:68:70:75:01:6e:13:
20:40:86:63:6a:ae:47:88:f3:d2:6f:29:5b:1b:86:9f:cd:19:
07:89:4f:57:13:00:ea:4c:61:23:c7:14:ac:06:75:a1:c6:9d:
29:69:ba:a5:50:b4:76:ba:12:32:fe:24:20:3a:00:73:1e:0c:
8e:22:b3:96:e1:d0:76:aa:6f:c5:c3:4e:c8:de:e7:a9:36:bf:
7c:60:aa:d1:55:81:22:d4:a7:2d:f1:b6:67:c2:ac:fc:18:f3:
f6:27:66:1a:f2:46:5f:a9:e0:52:d3:76:1b:13:04:54:19:64:
95:c1:d7:27:8d:85:71:fa:76:ce:fc:4b:ee:bd:c7:eb:01:cb:
c1:53:63:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:56:52 2025 by rpki-client