Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/283e8f-bda2-49dc-8afe-af137ccb2b69/1/tcOYwHMlxA59dtI5ahvoXEL9wsg.mft
File: tcOYwHMlxA59dtI5ahvoXEL9wsg.mft (raw, json)
Hash identifier: mpzkzX4uj1ebecXlEzmps6SEe+CCYZ5ork/zAVGKPAw=
Subject key identifier: 42:75:7C:63:A5:A9:9F:DC:62:71:6F:9E:4D:91:A8:F6:D1:9D:15:E2
Authority key identifier: B5:C3:98:C0:73:25:C4:0E:7D:76:D2:39:6A:1B:E8:5C:42:FD:C2:C8
Certificate issuer: /CN=b5c398c07325c40e7d76d2396a1be85c42fdc2c8
Certificate serial: 0198D472D47C3D47F234C8C726B5D3406236
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tcOYwHMlxA59dtI5ahvoXEL9wsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/283e8f-bda2-49dc-8afe-af137ccb2b69/1/tcOYwHMlxA59dtI5ahvoXEL9wsg.mft
Manifest number: 05C7
Signing time: Sat 23 Aug 2025 01:02:31 +0000
Manifest this update: Sat 23 Aug 2025 01:02:31 +0000
Manifest next update: Sun 24 Aug 2025 01:02:31 +0000
Files and hashes: 1: HeTNJZjhVHC3QazbToD7IxfPGhg.roa (hash: k/lPKk3dyIcZTARgL9fxQcpWqaVNc6/eODt+UcBvC5M=)
2: tcOYwHMlxA59dtI5ahvoXEL9wsg.crl (hash: 94P3fe0H0OejbrU5Ok4r5hFlnNF8wROCSobFu5GcFhk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/283e8f-bda2-49dc-8afe-af137ccb2b69/1/tcOYwHMlxA59dtI5ahvoXEL9wsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/283e8f-bda2-49dc-8afe-af137ccb2b69/1/tcOYwHMlxA59dtI5ahvoXEL9wsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/tcOYwHMlxA59dtI5ahvoXEL9wsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:d4:7c:3d:47:f2:34:c8:c7:26:b5:d3:40:62:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5c398c07325c40e7d76d2396a1be85c42fdc2c8
Validity
Not Before: Aug 23 01:02:31 2025 GMT
Not After : Aug 24 01:02:31 2025 GMT
Subject: CN=42757c63a5a99fdc62716f9e4d91a8f6d19d15e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:fb:2f:af:c8:62:46:68:49:b0:50:a4:63:4f:
89:d2:b7:66:2a:e9:42:cc:eb:bd:46:b7:47:5a:78:
94:58:f7:fb:12:41:f2:92:d8:44:f9:25:db:78:8b:
5a:cb:aa:77:07:2f:6c:20:d8:dd:88:03:bb:af:40:
20:71:5e:20:e1:a3:e9:8b:07:4e:db:87:6a:a4:65:
c5:7a:c6:cb:15:7f:ff:cb:9f:a5:e6:aa:6a:7c:2b:
55:e7:d6:35:08:9b:25:4c:11:51:93:69:c0:b9:0e:
ee:dc:90:c9:94:04:d3:2f:28:44:05:08:3c:2e:11:
e5:aa:37:ad:da:b3:03:fb:dd:73:d2:2a:44:03:b6:
25:f9:d4:cf:04:80:c6:ae:b3:9d:66:b8:77:a1:66:
ec:a3:29:95:9f:55:21:e3:df:c1:2a:75:f0:e4:e0:
e1:4d:68:6c:df:3b:ac:d1:75:c0:8c:4b:d3:67:25:
db:82:31:fc:b4:e7:ab:2d:3d:54:5a:fe:57:2a:1b:
b9:6a:de:02:b5:0d:15:31:b8:82:8e:c7:c1:7e:f2:
43:9b:57:af:3d:ce:32:d7:65:74:8e:c2:9e:45:b4:
6f:c8:a9:a3:ff:e3:96:c3:31:93:6e:8c:1a:a4:1d:
4e:64:5d:34:a7:f8:97:69:b4:b2:d7:ca:52:1b:92:
ab:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:75:7C:63:A5:A9:9F:DC:62:71:6F:9E:4D:91:A8:F6:D1:9D:15:E2
X509v3 Authority Key Identifier:
keyid:B5:C3:98:C0:73:25:C4:0E:7D:76:D2:39:6A:1B:E8:5C:42:FD:C2:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tcOYwHMlxA59dtI5ahvoXEL9wsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/283e8f-bda2-49dc-8afe-af137ccb2b69/1/tcOYwHMlxA59dtI5ahvoXEL9wsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/283e8f-bda2-49dc-8afe-af137ccb2b69/1/tcOYwHMlxA59dtI5ahvoXEL9wsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:23:ae:a1:52:0c:ab:63:7b:63:35:27:0b:fa:db:a8:fc:f1:
22:b4:f5:14:47:06:90:f0:23:c0:95:2f:ad:70:4a:47:43:5a:
3c:31:56:bd:c7:48:ec:a8:36:8c:6e:b5:85:f3:9d:a1:52:f1:
89:c2:03:e5:12:8d:30:f3:c5:95:0e:b0:39:e2:ab:4a:42:be:
9b:5d:75:27:65:be:ac:88:47:25:a3:4b:35:dc:ad:60:99:6e:
bb:e5:29:40:bc:33:6c:66:d6:d5:19:97:65:5b:f0:d1:e3:a0:
70:03:44:41:e0:bd:b6:01:63:02:24:18:e9:1c:52:8e:b9:7e:
7d:64:f6:10:78:d1:bf:57:05:46:df:5e:a2:43:79:5e:66:a2:
dc:3f:23:bb:27:a5:01:f8:14:5c:81:26:cd:8b:6d:57:ef:67:
52:44:d4:5c:6c:a0:02:19:81:1b:fe:9c:c8:8c:d6:6c:28:a9:
78:59:68:e5:32:e6:5d:68:56:39:99:77:fc:6a:ef:44:0b:09:
ff:e3:5b:a4:4c:f4:8d:45:2e:37:32:fa:a3:f9:2a:e2:7d:53:
01:75:28:d4:b0:32:14:08:93:14:a9:a5:98:c7:a7:28:53:ab:
a2:18:53:bb:7c:15:af:3d:9c:be:a5:3c:7d:fd:7c:82:09:1a:
9b:7c:a0:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:36:50 2025 by rpki-client