Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/25e6d6-ced1-4283-8c9f-c84ccba4e607/1/tUPvm8PCEyNhwSQJcqGAkSv3qFk.mft
File: tUPvm8PCEyNhwSQJcqGAkSv3qFk.mft (raw, json)
Hash identifier: KkyUjGXgv5S9EDxcmNzKdxqvTSUqCFC9kt8McmJfDDI=
Subject key identifier: 43:BA:B3:E7:AE:9D:C1:DC:E1:9C:1C:2E:33:77:E7:7C:92:86:01:2B
Authority key identifier: B5:43:EF:9B:C3:C2:13:23:61:C1:24:09:72:A1:80:91:2B:F7:A8:59
Certificate issuer: /CN=b543ef9bc3c2132361c1240972a180912bf7a859
Certificate serial: 0197B6A08A0D7A7E902B86FB8A5A49E9AF56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tUPvm8PCEyNhwSQJcqGAkSv3qFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/25e6d6-ced1-4283-8c9f-c84ccba4e607/1/tUPvm8PCEyNhwSQJcqGAkSv3qFk.mft
Manifest number: 1162
Signing time: Sat 28 Jun 2025 13:01:03 +0000
Manifest this update: Sat 28 Jun 2025 13:01:03 +0000
Manifest next update: Sun 29 Jun 2025 13:01:03 +0000
Files and hashes: 1: 3_-c02s70_bWI80EfV5nMZhCjHg.roa (hash: 1ZDiW1elfufjNKaqhAw29FTOI2soWhXtopSXVjj/ruY=)
2: 9XYzuBVHhZfQ-Z8_PdIStP3gEJU.roa (hash: 45mg1wTAOjryTd4LOjOOGQdcDwneEtBdS+C0gsQtj+o=)
3: tUPvm8PCEyNhwSQJcqGAkSv3qFk.crl (hash: BjQDFySCfp0i1nYgbjTHbUHVb7GixBkPUE3PPlqOYWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/25e6d6-ced1-4283-8c9f-c84ccba4e607/1/tUPvm8PCEyNhwSQJcqGAkSv3qFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/25e6d6-ced1-4283-8c9f-c84ccba4e607/1/tUPvm8PCEyNhwSQJcqGAkSv3qFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/tUPvm8PCEyNhwSQJcqGAkSv3qFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:8a:0d:7a:7e:90:2b:86:fb:8a:5a:49:e9:af:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b543ef9bc3c2132361c1240972a180912bf7a859
Validity
Not Before: Jun 28 13:01:03 2025 GMT
Not After : Jun 29 13:01:03 2025 GMT
Subject: CN=43bab3e7ae9dc1dce19c1c2e3377e77c9286012b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:52:b9:cf:25:59:17:e3:00:69:2c:ba:68:04:
19:50:5e:0e:7a:41:3c:4a:a1:21:5d:00:5d:e0:dd:
e6:82:23:cf:2a:8a:da:56:6c:f4:68:4c:3e:94:1c:
a3:1f:ce:b2:e8:4d:58:90:d1:c4:d0:17:d9:88:df:
fc:27:1b:ca:c5:30:12:7c:48:0a:57:b0:d3:89:97:
88:83:d1:c3:8b:c8:33:0c:f5:0b:81:bf:71:c6:b8:
ef:9e:df:31:12:80:2c:20:27:7a:01:9b:c6:a0:53:
47:a7:cc:a6:67:83:dc:f0:b6:3a:48:20:04:84:64:
da:77:ba:50:89:c6:dd:7f:a5:5b:1b:bc:5b:3f:5d:
a5:d3:38:61:b5:f8:d2:e8:95:96:ad:cf:03:c0:99:
d4:dd:88:c8:37:d2:26:d9:c7:aa:54:78:c8:bc:09:
65:1b:ab:f2:17:65:d2:96:e3:0a:2f:10:f6:95:47:
ec:28:be:76:69:0f:2d:e9:3f:f4:9a:5e:24:e2:5d:
cf:6f:ea:5c:6e:ae:a1:57:bb:19:4b:82:ba:a2:83:
78:bf:93:a0:b5:fa:1f:78:b5:62:18:be:6e:ac:ff:
0a:7a:f5:ce:f2:c7:2e:83:f7:b8:da:bd:39:2f:02:
08:5b:27:f3:70:80:91:ce:8b:8b:87:3c:c1:90:be:
3e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:BA:B3:E7:AE:9D:C1:DC:E1:9C:1C:2E:33:77:E7:7C:92:86:01:2B
X509v3 Authority Key Identifier:
keyid:B5:43:EF:9B:C3:C2:13:23:61:C1:24:09:72:A1:80:91:2B:F7:A8:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tUPvm8PCEyNhwSQJcqGAkSv3qFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/25e6d6-ced1-4283-8c9f-c84ccba4e607/1/tUPvm8PCEyNhwSQJcqGAkSv3qFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/25e6d6-ced1-4283-8c9f-c84ccba4e607/1/tUPvm8PCEyNhwSQJcqGAkSv3qFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:48:99:b6:21:43:c7:c8:5f:1c:0d:e4:31:66:e3:d2:f9:7a:
71:75:4a:8f:3b:c4:d5:74:e8:bc:ad:7e:3c:2f:ee:f0:d8:b2:
fc:0b:0c:c7:1a:bf:09:d9:03:1a:bd:ac:d9:6c:30:28:26:af:
cc:27:66:c0:0c:72:2f:51:bd:a1:79:d2:cb:5c:73:ab:e5:43:
9c:fe:24:ee:64:99:40:94:32:1a:54:bf:3f:4c:c7:37:69:bd:
6d:16:80:9a:1c:ad:52:84:ed:ac:26:d4:5c:97:b0:65:d8:37:
0c:2f:83:ce:ad:c3:ec:0a:e4:79:bb:f0:2d:f7:e4:20:06:2c:
d9:cc:7f:c7:02:ce:f4:ee:e1:fb:02:63:48:f0:25:c3:61:52:
8c:f4:8c:2c:c7:19:9d:35:9f:ca:4b:9e:f3:d3:39:83:66:0c:
31:37:78:46:c0:ef:9b:1d:2e:48:70:0c:39:01:fe:29:a6:a5:
6c:79:4c:d9:2c:fa:f6:c0:74:4f:f7:f6:54:0f:f9:94:45:77:
94:2f:46:91:7a:15:7e:69:2b:44:72:44:ba:9b:17:40:b4:ab:
a9:00:0d:e0:6a:d2:b1:df:ba:c2:11:b7:3d:5b:a9:56:4b:1b:
12:90:2a:04:1a:3a:75:ed:9e:c8:b4:0b:c5:72:30:93:e4:52:
57:71:5c:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:04:32 2025 by rpki-client