Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/c68bd1-8a98-41b2-b36b-386eea8d8dd6/1/Tu6GsiwkvKdxMHHeldaCLDOc_Rw.mft
File: Tu6GsiwkvKdxMHHeldaCLDOc_Rw.mft (raw, json)
Hash identifier: O1IPoU1uLs2FNpx2azvay+n5c94y8hHp65UzyU3F7zc=
Subject key identifier: 59:6C:84:25:07:E6:22:16:C4:42:4C:80:D3:09:1F:1F:DB:E6:8B:00
Authority key identifier: 4E:EE:86:B2:2C:24:BC:A7:71:30:71:DE:95:D6:82:2C:33:9C:FD:1C
Certificate issuer: /CN=4eee86b22c24bca7713071de95d6822c339cfd1c
Certificate serial: 0197B70E77195350ADFE02AF116A9E042ECF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tu6GsiwkvKdxMHHeldaCLDOc_Rw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/c68bd1-8a98-41b2-b36b-386eea8d8dd6/1/Tu6GsiwkvKdxMHHeldaCLDOc_Rw.mft
Manifest number: 12DA
Signing time: Sat 28 Jun 2025 15:01:07 +0000
Manifest this update: Sat 28 Jun 2025 15:01:07 +0000
Manifest next update: Sun 29 Jun 2025 15:01:07 +0000
Files and hashes: 1: DAiAlkKu2uIH3tPrZHXW35UovoY.roa (hash: ii+y3ES147W1gYE6b/JQu7S5U4fp3robU9GiKGcJGDs=)
2: Tu6GsiwkvKdxMHHeldaCLDOc_Rw.crl (hash: nA5TWnghafZkceGj5XcyKJKUSj2wZsYWE70LKhfb5v8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/c68bd1-8a98-41b2-b36b-386eea8d8dd6/1/Tu6GsiwkvKdxMHHeldaCLDOc_Rw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/c68bd1-8a98-41b2-b36b-386eea8d8dd6/1/Tu6GsiwkvKdxMHHeldaCLDOc_Rw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tu6GsiwkvKdxMHHeldaCLDOc_Rw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:77:19:53:50:ad:fe:02:af:11:6a:9e:04:2e:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4eee86b22c24bca7713071de95d6822c339cfd1c
Validity
Not Before: Jun 28 15:01:07 2025 GMT
Not After : Jun 29 15:01:07 2025 GMT
Subject: CN=596c842507e62216c4424c80d3091f1fdbe68b00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:69:d2:93:c6:66:3e:0a:82:07:61:3c:3e:2f:
9b:0b:b2:6c:9e:4c:00:58:97:77:b0:a4:3d:6c:b8:
93:64:48:89:9b:7e:7d:56:aa:c6:e6:d5:8b:65:2b:
02:16:73:86:5c:8c:72:00:0a:6a:be:50:42:d3:7b:
40:56:4f:26:63:cc:e2:72:a4:1f:79:df:10:b0:5d:
ce:4d:64:59:34:5b:2c:af:fb:8b:78:b3:d5:0f:2b:
16:4b:0a:00:60:fb:87:3e:a4:9d:5d:89:23:02:f9:
07:6e:f6:7f:9f:5f:4e:96:0c:87:1f:30:53:95:d5:
bb:7c:51:15:3c:c9:1b:94:3f:32:3a:67:3c:d8:37:
59:d1:32:14:d7:6f:0a:af:79:d9:ed:08:bc:51:77:
db:63:10:45:c8:80:aa:fd:84:38:bf:c8:ff:4f:2a:
7e:4a:41:db:bd:01:73:32:d2:26:c7:a9:5c:25:49:
16:72:49:72:06:fc:72:f8:fa:d2:88:e0:d3:dd:6a:
16:50:90:4e:61:5b:aa:8f:44:b3:55:8e:05:78:c9:
e3:de:54:80:75:fd:1d:a8:a2:09:74:c7:24:83:20:
ab:ac:36:67:37:c2:04:a9:a7:9e:9d:ec:ff:b9:ce:
7b:3e:17:ed:71:2b:fc:77:15:6c:c2:6a:81:8b:cc:
e6:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:6C:84:25:07:E6:22:16:C4:42:4C:80:D3:09:1F:1F:DB:E6:8B:00
X509v3 Authority Key Identifier:
keyid:4E:EE:86:B2:2C:24:BC:A7:71:30:71:DE:95:D6:82:2C:33:9C:FD:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tu6GsiwkvKdxMHHeldaCLDOc_Rw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c68bd1-8a98-41b2-b36b-386eea8d8dd6/1/Tu6GsiwkvKdxMHHeldaCLDOc_Rw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c68bd1-8a98-41b2-b36b-386eea8d8dd6/1/Tu6GsiwkvKdxMHHeldaCLDOc_Rw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:d0:ea:0c:ab:9b:c3:9e:fb:83:c3:1d:0a:c7:36:b2:d4:64:
09:da:2a:ec:80:e4:ae:08:50:7b:9b:64:34:79:06:2c:eb:77:
5d:cc:9d:c8:af:28:4a:29:0d:45:c1:25:59:3f:e2:d1:9a:93:
f4:2c:91:87:0d:57:b5:2d:f7:e0:86:e2:cf:a0:ac:11:fe:c8:
d3:da:5b:ba:e8:d2:01:cc:c7:4e:73:f9:0e:aa:31:b8:0f:f3:
fa:02:a6:8e:ac:19:47:fb:f4:3b:37:eb:15:ca:39:11:c4:eb:
90:6f:2b:27:42:c5:6f:2a:9f:b5:93:a4:b0:cc:a8:2d:9c:07:
cc:d3:19:56:fc:63:58:78:a9:88:77:dc:57:70:2d:1c:77:6b:
f3:46:c9:7e:55:a6:24:dd:47:29:da:44:eb:c0:5b:86:95:a2:
fd:a5:4c:61:ef:9d:5f:c9:ea:1b:c1:e2:20:79:cb:04:a8:e8:
7f:cf:a0:a8:33:08:ed:c0:36:81:b8:a9:16:20:6a:42:ec:69:
5a:c8:b2:09:2d:73:d4:71:d5:16:5f:a4:1e:46:84:10:cf:a1:
3c:ac:ac:7a:2e:93:b9:7a:29:0f:ea:a3:5d:fd:d0:03:d5:e6:
7d:92:ee:84:55:ca:91:5f:72:26:6a:0d:5a:8e:86:ca:b6:a2:
58:67:82:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:30:04 2025 by rpki-client