Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/da25c9-4fe1-45da-8e74-2bea34b8938b/1/tBhner86ruA2zUrdd9ZhlvzeTG0.mft
File: tBhner86ruA2zUrdd9ZhlvzeTG0.mft (raw, json)
Hash identifier: H2BvXzaT+8YeZ891jJ50uiRHk1tVMEFxvlas74Oj3lE=
Subject key identifier: 87:60:A2:18:27:EA:3E:DA:D5:58:DF:7E:AF:AA:E6:88:21:CA:2D:2F
Authority key identifier: B4:18:67:7A:BF:3A:AE:E0:36:CD:4A:DD:77:D6:61:96:FC:DE:4C:6D
Certificate issuer: /CN=b418677abf3aaee036cd4add77d66196fcde4c6d
Certificate serial: 0197B8FD4725C8966BC5C1E1B5DE48AC433B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tBhner86ruA2zUrdd9ZhlvzeTG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/da25c9-4fe1-45da-8e74-2bea34b8938b/1/tBhner86ruA2zUrdd9ZhlvzeTG0.mft
Manifest number: 0E85
Signing time: Sun 29 Jun 2025 00:01:35 +0000
Manifest this update: Sun 29 Jun 2025 00:01:35 +0000
Manifest next update: Mon 30 Jun 2025 00:01:35 +0000
Files and hashes: 1: GluX1bXAOCEKoiPGiqd94CJ3PnQ.roa (hash: Ni4Tstwu0GgIgTRS0r/kMJY1nK24hB/s3xhSSr7BatI=)
2: sUg9MVJbpnKjp6n_qVdxGGSeJB8.roa (hash: iazJ3Yw/lvASdOuiaEdBPRq3HWHdL5Kxvj+o3m8saWE=)
3: tBhner86ruA2zUrdd9ZhlvzeTG0.crl (hash: e9gjlpAVDu95Bk7gWN4vRX55D/LjvhbAFPdoujYc9zg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/da25c9-4fe1-45da-8e74-2bea34b8938b/1/tBhner86ruA2zUrdd9ZhlvzeTG0.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/da25c9-4fe1-45da-8e74-2bea34b8938b/1/tBhner86ruA2zUrdd9ZhlvzeTG0.mft
rsync://rpki.ripe.net/repository/DEFAULT/tBhner86ruA2zUrdd9ZhlvzeTG0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:fd:47:25:c8:96:6b:c5:c1:e1:b5:de:48:ac:43:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b418677abf3aaee036cd4add77d66196fcde4c6d
Validity
Not Before: Jun 29 00:01:35 2025 GMT
Not After : Jun 30 00:01:35 2025 GMT
Subject: CN=8760a21827ea3edad558df7eafaae68821ca2d2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:21:85:8a:a0:0a:2f:e2:dd:fe:bc:c6:36:f7:
d6:7e:19:e2:6c:56:25:e3:b7:76:ef:65:5c:6c:51:
f1:5f:10:0e:d5:fc:63:09:ea:75:10:4c:cc:23:1d:
fc:a9:7a:10:76:d3:f8:8c:09:93:22:4f:3f:da:0d:
d1:ca:e1:3a:e9:ca:9a:05:1f:e1:84:b6:9f:c4:11:
66:46:03:37:30:f0:32:d4:b8:30:ad:c9:b4:3c:c8:
a5:6c:05:07:a9:43:28:a7:54:d0:67:14:2a:41:b4:
75:41:b2:27:36:6a:8f:2f:f8:f0:94:3d:b6:7f:95:
78:cb:53:d5:27:28:9c:c1:17:79:47:b6:7e:fb:75:
78:aa:24:9a:a4:d4:e3:cf:20:c9:f8:13:35:c6:c0:
e9:99:4e:b2:ea:f8:68:83:54:b3:c8:59:12:59:18:
9d:57:aa:9e:19:a0:fa:20:99:96:70:11:e4:36:0f:
c4:7b:9c:af:85:3a:cb:9d:9c:5e:5a:7c:c7:80:60:
ed:dd:b4:45:79:e8:38:58:ba:66:61:02:15:1d:fa:
77:49:1f:a6:31:cb:ce:16:d8:08:90:8d:0d:26:55:
de:68:e1:dd:3a:df:bc:70:56:17:c6:5f:77:7a:e1:
6d:1b:d0:76:a5:45:9a:d3:a3:4e:1d:c4:dd:c1:6d:
46:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:60:A2:18:27:EA:3E:DA:D5:58:DF:7E:AF:AA:E6:88:21:CA:2D:2F
X509v3 Authority Key Identifier:
keyid:B4:18:67:7A:BF:3A:AE:E0:36:CD:4A:DD:77:D6:61:96:FC:DE:4C:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tBhner86ruA2zUrdd9ZhlvzeTG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/da25c9-4fe1-45da-8e74-2bea34b8938b/1/tBhner86ruA2zUrdd9ZhlvzeTG0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/da25c9-4fe1-45da-8e74-2bea34b8938b/1/tBhner86ruA2zUrdd9ZhlvzeTG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:fd:dc:cc:40:64:a5:ba:61:64:de:71:0a:14:ac:69:4e:4f:
06:13:e9:f3:77:00:be:03:7d:ba:b3:08:f4:60:6b:6c:d1:f6:
89:de:b3:13:b1:f0:11:6f:4d:00:e1:bc:d1:67:58:67:74:fa:
05:68:ca:a6:97:f0:dd:6d:e9:ea:65:6c:02:99:06:6d:47:4e:
b1:d1:0e:07:e3:00:d7:72:b6:b6:79:e7:f9:c6:d1:31:2b:1c:
be:71:b8:50:1c:6e:f1:6b:9e:c4:ab:58:62:58:d4:2f:5a:8e:
de:f9:93:c9:f2:43:62:4a:46:2d:6d:1c:ef:01:61:93:2b:17:
ab:28:44:ca:e7:15:5a:79:61:0b:be:6a:6b:28:81:d2:bf:a5:
2e:87:a7:e2:27:bf:f7:71:8a:93:84:8d:b6:6f:eb:45:c3:f8:
9f:67:c0:d8:b2:31:3b:f7:9e:13:58:31:86:d8:c9:db:5c:c8:
92:64:8e:07:ca:fb:6f:a6:07:51:82:47:7b:41:05:fa:86:76:
b9:94:2e:a2:54:f9:ce:17:a9:2d:6a:dc:78:55:9b:d0:28:f5:
d9:26:26:fb:5c:f3:25:ca:32:7a:f3:91:e9:cc:64:f0:3e:d2:
17:1a:1b:37:a1:0f:46:22:81:f2:b2:72:94:5e:b8:d9:06:f5:
15:0a:c6:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 07:09:17 2025 by rpki-client