Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/a3baca-437d-4607-9c1a-557a4c31e02e/1/tMQeWYNNphLYPKJBlPAsptdgJEg.mft
File: tMQeWYNNphLYPKJBlPAsptdgJEg.mft (raw, json)
Hash identifier: ggqtTAnrCP0c3Li+qkRonziUfV4MaGUqgi8kROUxe9Q=
Subject key identifier: B2:7C:FA:28:4C:61:86:54:BF:1E:8E:B0:35:31:68:7B:9A:B7:17:43
Authority key identifier: B4:C4:1E:59:83:4D:A6:12:D8:3C:A2:41:94:F0:2C:A6:D7:60:24:48
Certificate issuer: /CN=b4c41e59834da612d83ca24194f02ca6d7602448
Certificate serial: 0197B6A0A34B531487FDE5C578B3CBE5C450
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tMQeWYNNphLYPKJBlPAsptdgJEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/a3baca-437d-4607-9c1a-557a4c31e02e/1/tMQeWYNNphLYPKJBlPAsptdgJEg.mft
Manifest number: 03DA
Signing time: Sat 28 Jun 2025 13:01:10 +0000
Manifest this update: Sat 28 Jun 2025 13:01:10 +0000
Manifest next update: Sun 29 Jun 2025 13:01:10 +0000
Files and hashes: 1: hrqEKTykKr09BUd_K3mCMU0oC6Q.roa (hash: pufSFJ+QVHIcFkxQwEPRtygVlxFuvFk+kfnkYeAvjWg=)
2: tMQeWYNNphLYPKJBlPAsptdgJEg.crl (hash: AyWSOVm9Bd7v2QPm5IqSlxDImsjoimzVAFiivCmWeHI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/a3baca-437d-4607-9c1a-557a4c31e02e/1/tMQeWYNNphLYPKJBlPAsptdgJEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/a3baca-437d-4607-9c1a-557a4c31e02e/1/tMQeWYNNphLYPKJBlPAsptdgJEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/tMQeWYNNphLYPKJBlPAsptdgJEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:a3:4b:53:14:87:fd:e5:c5:78:b3:cb:e5:c4:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4c41e59834da612d83ca24194f02ca6d7602448
Validity
Not Before: Jun 28 13:01:10 2025 GMT
Not After : Jun 29 13:01:10 2025 GMT
Subject: CN=b27cfa284c618654bf1e8eb03531687b9ab71743
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:89:e5:cb:7c:cb:ae:c6:f2:91:93:86:d6:52:
ff:42:70:ae:cb:8f:d6:c3:75:25:45:cb:8f:bf:75:
48:14:87:e4:25:fb:78:be:ce:fc:8f:d9:19:0a:52:
d3:f2:22:0e:e9:23:03:94:49:6f:62:7a:b7:d5:22:
c3:da:14:ef:f4:86:d9:a3:52:a4:39:b1:41:b3:e3:
41:d4:b3:9a:41:ba:f6:a3:8a:85:c1:f5:41:bc:b0:
45:01:15:92:fd:6b:f6:bb:4a:2f:bd:c5:b9:13:5d:
3d:aa:31:12:30:1a:7f:d3:40:66:70:7d:59:52:a4:
53:02:25:68:a6:b1:97:98:0e:55:91:22:89:a3:12:
f1:5d:b3:45:9e:c2:a8:70:0f:d1:c0:36:98:2e:9d:
c0:e9:a7:d5:86:ce:e4:15:e7:e0:d0:cd:ea:43:2d:
65:3a:34:fd:a9:7d:8c:b9:87:1c:51:58:f7:12:97:
b5:c1:cd:28:39:bf:30:a4:a2:09:e3:bb:0b:11:4c:
56:68:9e:2e:ed:9c:ac:4e:30:52:e9:f9:f5:73:ae:
6b:88:30:17:5c:e7:d9:19:2b:e6:fa:2d:8e:7a:69:
1c:ae:4a:0d:c1:5e:aa:9c:0d:a2:79:b1:51:5d:7a:
1b:d9:c8:27:37:57:f6:6f:56:8a:52:15:93:a3:c2:
23:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:7C:FA:28:4C:61:86:54:BF:1E:8E:B0:35:31:68:7B:9A:B7:17:43
X509v3 Authority Key Identifier:
keyid:B4:C4:1E:59:83:4D:A6:12:D8:3C:A2:41:94:F0:2C:A6:D7:60:24:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tMQeWYNNphLYPKJBlPAsptdgJEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a3baca-437d-4607-9c1a-557a4c31e02e/1/tMQeWYNNphLYPKJBlPAsptdgJEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a3baca-437d-4607-9c1a-557a4c31e02e/1/tMQeWYNNphLYPKJBlPAsptdgJEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:c8:6f:56:e6:40:50:e1:96:75:5c:15:ed:a1:cf:f0:c9:ac:
49:6a:d7:c1:98:50:ee:fd:e7:d1:3e:df:10:45:e7:fc:bf:ac:
cc:3a:18:f3:2b:f1:ae:c4:0c:d2:d5:a3:0e:72:15:77:2a:7f:
0d:a7:8c:a8:f9:9e:46:57:1c:dd:ef:77:41:df:e6:9b:8f:3c:
2f:18:72:61:37:84:f0:89:91:39:97:b9:b1:81:92:c2:f0:c4:
5a:8e:2c:69:eb:87:33:4e:eb:4d:bd:5b:27:0e:3a:eb:ec:fb:
90:c4:0b:1a:85:0c:5b:8a:48:7b:8e:f0:8a:55:c4:09:56:99:
6d:f9:05:83:bc:b7:ea:70:ee:72:05:84:e6:79:32:39:f1:8e:
e9:12:bd:cb:4d:46:28:7f:f3:08:f7:e0:99:a7:63:dd:17:d5:
62:bb:4d:ad:fc:27:77:12:d3:e3:28:d0:d1:d8:cd:3a:5e:62:
f4:fc:ae:fe:bd:ec:a8:cd:30:db:fa:54:f6:c9:ab:dc:5c:b0:
9d:92:4d:54:89:43:97:94:3c:29:f7:b0:9a:d1:a9:7f:18:c1:
f6:31:9b:4e:73:d7:3c:af:e5:cf:ff:c1:e1:0c:7c:f0:6a:08:
6b:07:2a:96:4b:8c:34:b9:a3:61:91:a0:e5:0d:1d:9f:a4:2e:
4a:27:fd:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:07:11 2025 by rpki-client