Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/283e8f-bda2-49dc-8afe-af137ccb2b69/1/tcOYwHMlxA59dtI5ahvoXEL9wsg.mft
File: tcOYwHMlxA59dtI5ahvoXEL9wsg.mft (raw, json)
Hash identifier: AEqdKVj0H+PtYcxpSNhHgkpmuDLxqj3JQ/PVSrHnN+s=
Subject key identifier: CE:EF:B9:60:6A:21:50:99:7F:2E:93:05:AB:E8:0C:49:A6:01:4F:DC
Authority key identifier: B5:C3:98:C0:73:25:C4:0E:7D:76:D2:39:6A:1B:E8:5C:42:FD:C2:C8
Certificate issuer: /CN=b5c398c07325c40e7d76d2396a1be85c42fdc2c8
Certificate serial: 0197B6A0FF9966B44B67CF988DDDF0B8B25D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tcOYwHMlxA59dtI5ahvoXEL9wsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/283e8f-bda2-49dc-8afe-af137ccb2b69/1/tcOYwHMlxA59dtI5ahvoXEL9wsg.mft
Manifest number: 0533
Signing time: Sat 28 Jun 2025 13:01:33 +0000
Manifest this update: Sat 28 Jun 2025 13:01:33 +0000
Manifest next update: Sun 29 Jun 2025 13:01:33 +0000
Files and hashes: 1: HeTNJZjhVHC3QazbToD7IxfPGhg.roa (hash: k/lPKk3dyIcZTARgL9fxQcpWqaVNc6/eODt+UcBvC5M=)
2: tcOYwHMlxA59dtI5ahvoXEL9wsg.crl (hash: Udzu/yNt8/W3RFXydt2D+EY/oXJObTvSn7WR9OZPuW0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/283e8f-bda2-49dc-8afe-af137ccb2b69/1/tcOYwHMlxA59dtI5ahvoXEL9wsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/283e8f-bda2-49dc-8afe-af137ccb2b69/1/tcOYwHMlxA59dtI5ahvoXEL9wsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/tcOYwHMlxA59dtI5ahvoXEL9wsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:ff:99:66:b4:4b:67:cf:98:8d:dd:f0:b8:b2:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5c398c07325c40e7d76d2396a1be85c42fdc2c8
Validity
Not Before: Jun 28 13:01:33 2025 GMT
Not After : Jun 29 13:01:33 2025 GMT
Subject: CN=ceefb9606a2150997f2e9305abe80c49a6014fdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:a9:52:27:54:c7:48:c2:7c:ad:fd:2f:f5:37:
80:4f:01:23:6f:68:1e:7e:9c:ad:4c:ec:24:dd:25:
75:94:ca:60:b7:86:95:45:17:c7:91:42:00:39:81:
ab:ff:b9:59:f8:5b:c3:b3:29:8b:07:ea:8d:54:06:
94:c7:e4:10:11:2e:3f:eb:8a:b9:1f:d8:81:c2:46:
f6:3d:64:b9:ec:96:e7:cf:72:c5:fa:2b:cb:cf:cb:
80:be:5c:32:9f:e0:f3:d5:9f:7a:89:3a:0f:b8:dd:
6c:18:27:f8:f3:84:9b:fc:72:b5:da:63:2f:6a:af:
96:24:31:06:28:0c:0c:4f:4c:1f:64:0e:d7:7a:1f:
eb:67:b2:77:e0:8f:e8:34:63:fd:ff:c1:c2:97:25:
d8:bb:c5:d6:6c:c7:05:cb:5f:80:7d:a6:6a:87:c5:
d1:b9:35:89:cf:d0:30:0a:11:fe:4c:78:5c:ba:4e:
b2:65:bb:cd:2f:49:99:f9:0c:37:40:b8:ac:03:14:
21:8c:35:60:5d:be:f0:04:19:6a:c8:65:d1:a5:b6:
13:01:d5:c5:00:9c:29:20:f3:58:cd:99:e0:c3:c0:
52:ad:a0:48:87:02:f5:49:1e:c8:6e:30:e4:4e:06:
3a:5e:49:17:86:87:06:7e:91:a6:38:1b:04:f3:b6:
05:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:EF:B9:60:6A:21:50:99:7F:2E:93:05:AB:E8:0C:49:A6:01:4F:DC
X509v3 Authority Key Identifier:
keyid:B5:C3:98:C0:73:25:C4:0E:7D:76:D2:39:6A:1B:E8:5C:42:FD:C2:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tcOYwHMlxA59dtI5ahvoXEL9wsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/283e8f-bda2-49dc-8afe-af137ccb2b69/1/tcOYwHMlxA59dtI5ahvoXEL9wsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/283e8f-bda2-49dc-8afe-af137ccb2b69/1/tcOYwHMlxA59dtI5ahvoXEL9wsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:d2:27:ce:a4:34:dd:6f:58:b7:7e:23:e6:4c:e3:49:72:77:
66:57:48:e9:e3:ce:8c:c0:85:ad:f8:a4:c3:df:8e:4b:e1:b8:
9f:4a:32:5c:95:f2:5f:2e:d7:a8:ce:97:24:34:fd:49:31:27:
f7:23:82:14:d8:b6:cf:e3:e9:b5:e2:0d:18:17:d9:0f:57:ab:
84:4e:85:cf:1a:6d:20:69:b5:1c:5b:9b:a1:64:cc:5e:ac:1c:
7d:ef:0f:3a:f0:c7:54:ab:10:69:f2:7f:00:5e:85:31:86:86:
00:53:56:9d:88:84:1a:fd:55:35:0b:81:ad:70:76:d9:9c:87:
b6:84:aa:4d:6a:8c:cc:87:a3:81:27:cf:c5:87:98:04:a6:07:
eb:22:3b:e0:70:bc:d0:8c:53:f3:13:73:10:42:f1:92:a4:1e:
ed:31:52:48:80:4d:a5:29:22:1f:71:d3:c6:bf:a0:0a:ce:dd:
32:b3:af:b5:85:4d:55:cb:4b:d0:cb:c1:87:21:d4:14:d0:0f:
4b:32:49:5d:6d:64:b4:c4:28:16:9d:d5:b5:17:0e:f2:b4:c4:
9f:34:fa:8a:06:30:ad:c7:a9:42:d0:1b:73:af:48:0e:4a:58:
d1:15:60:6e:a4:77:e2:d1:81:d0:74:aa:3e:14:00:42:ea:51:
35:d4:31:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:07:04 2025 by rpki-client