
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/3182ce-9d2f-4b22-abcd-acd9a2eca33f/1/tAyVhnwwhMTBai_rtGZRCQ8yR-Q.mft
File: tAyVhnwwhMTBai_rtGZRCQ8yR-Q.mft (raw, json)
Hash identifier: qq4IUbj8oXezfRntdCYjrjS5AqwPiZVfN4HlghqNGpQ=
Subject key identifier: 57:DE:91:52:46:D3:70:7D:48:78:86:B0:C5:FF:61:D0:B4:6E:BE:B8
Authority key identifier: B4:0C:95:86:7C:30:84:C4:C1:6A:2F:EB:B4:66:51:09:0F:32:47:E4
Certificate issuer: /CN=b40c95867c3084c4c16a2febb46651090f3247e4
Certificate serial: 0198D5BBD0DBD4F7D451EE007EC7B23FCED1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tAyVhnwwhMTBai_rtGZRCQ8yR-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/3182ce-9d2f-4b22-abcd-acd9a2eca33f/1/tAyVhnwwhMTBai_rtGZRCQ8yR-Q.mft
Manifest number: 0CC7
Signing time: Sat 23 Aug 2025 07:01:52 +0000
Manifest this update: Sat 23 Aug 2025 07:01:52 +0000
Manifest next update: Sun 24 Aug 2025 07:01:52 +0000
Files and hashes: 1: lEEZzzybqBVZbE52j1UTaBha8S8.roa (hash: M0ghNe8I1TZs4KtvQ8xKIi7A+x2ciHjaRyld8EsOpko=)
2: tAyVhnwwhMTBai_rtGZRCQ8yR-Q.crl (hash: C3F+emAIKmdlQnRQSWD0+KUiq2RwNaIqodB+2eKrDuY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/3182ce-9d2f-4b22-abcd-acd9a2eca33f/1/tAyVhnwwhMTBai_rtGZRCQ8yR-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/3182ce-9d2f-4b22-abcd-acd9a2eca33f/1/tAyVhnwwhMTBai_rtGZRCQ8yR-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/tAyVhnwwhMTBai_rtGZRCQ8yR-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:d0:db:d4:f7:d4:51:ee:00:7e:c7:b2:3f:ce:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b40c95867c3084c4c16a2febb46651090f3247e4
Validity
Not Before: Aug 23 07:01:52 2025 GMT
Not After : Aug 24 07:01:52 2025 GMT
Subject: CN=57de915246d3707d487886b0c5ff61d0b46ebeb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:9d:05:a1:de:b9:84:ff:55:b1:b8:e3:55:f9:
ca:a4:54:53:0d:65:e8:b4:11:ec:78:7d:20:62:79:
1c:7e:ac:4d:c2:b3:63:ed:6c:1d:74:24:ef:92:e8:
36:e2:26:08:0e:a7:f6:53:6c:b1:17:a3:7a:de:74:
89:b6:92:9c:5e:b0:97:d4:dd:d0:c2:27:4f:82:f6:
a8:bd:a4:84:ea:20:b1:ae:47:37:99:62:14:1d:6f:
12:b1:2b:99:d9:7f:f6:ab:78:39:9c:d4:72:d3:ac:
93:cd:3b:86:5d:8a:66:3a:62:57:da:8e:ed:d5:54:
91:95:d5:ad:e9:4e:7c:78:b6:84:b5:42:9e:b3:ec:
fb:d2:b0:bb:bc:88:bf:11:60:be:3b:4d:25:9f:c4:
e5:22:df:c9:5e:d4:4c:f8:99:c4:2d:66:13:ec:41:
3b:12:e4:29:3b:d4:5e:b5:fa:b6:7f:75:7d:59:e2:
59:15:2d:9a:ef:04:2b:ab:f2:c0:f6:b8:c4:9a:a8:
e2:a5:19:f7:8e:ad:f9:8b:c5:a7:bf:19:66:1b:82:
ba:18:7b:6e:fc:cf:14:43:6e:18:04:fb:77:e9:17:
ce:b7:bb:7b:82:fd:7e:0d:c3:e9:60:48:a5:c5:e3:
e0:96:5a:62:f1:a9:77:1e:96:1c:45:f4:f4:f9:02:
89:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:DE:91:52:46:D3:70:7D:48:78:86:B0:C5:FF:61:D0:B4:6E:BE:B8
X509v3 Authority Key Identifier:
keyid:B4:0C:95:86:7C:30:84:C4:C1:6A:2F:EB:B4:66:51:09:0F:32:47:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tAyVhnwwhMTBai_rtGZRCQ8yR-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/3182ce-9d2f-4b22-abcd-acd9a2eca33f/1/tAyVhnwwhMTBai_rtGZRCQ8yR-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/3182ce-9d2f-4b22-abcd-acd9a2eca33f/1/tAyVhnwwhMTBai_rtGZRCQ8yR-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:68:98:0e:79:d2:00:35:e7:29:2b:1b:68:9e:33:4d:a8:5d:
45:f0:74:ce:59:22:7f:b7:83:82:fe:61:9c:e0:43:66:e5:d6:
b8:2f:b0:98:b6:52:fd:8b:46:cb:c2:68:28:05:66:14:94:b9:
f6:27:dd:e1:d7:8f:9e:c2:0c:3d:ec:de:20:ff:b0:31:7a:ec:
7a:d9:21:2f:42:70:03:29:c4:44:c8:41:ea:27:71:4f:c9:f5:
af:08:97:ee:87:c4:98:42:bb:d2:bd:f3:ea:4f:d8:98:15:1d:
b2:66:40:f4:a0:ca:ad:4f:06:e8:a1:b8:c5:10:7b:09:c7:53:
32:9c:e1:78:86:1c:0a:d2:84:20:d3:31:ca:11:b5:2a:87:93:
75:9f:9c:42:2c:e5:88:63:88:ab:ee:55:1e:73:8d:dc:7a:22:
cf:27:1d:eb:01:93:8f:7d:93:37:9f:1c:37:f1:ca:21:68:2a:
86:fd:9b:32:a7:22:22:e1:21:76:e5:dc:b9:c0:1c:cc:df:30:
f0:65:a8:e5:db:f6:39:69:eb:53:02:f3:3f:1a:35:dd:20:d3:
56:5f:5b:1c:4b:5c:90:a5:39:16:40:ba:41:43:41:f1:b9:8b:
75:8b:f8:0a:f8:d9:4d:b5:4f:6f:70:87:4e:48:c8:43:75:c3:
d8:af:7a:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:03:31 2025 by rpki-client