Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/d2a9bc-13b1-4b30-b563-209e1f84224e/1/tuD-D69oRJiK8vdE1RbtucXf5xw.mft
File: tuD-D69oRJiK8vdE1RbtucXf5xw.mft (raw, json)
Hash identifier: HYoQZ7uKVT7RnN39ncbiJAAtcevaSeYVV4o6JkDkg+E=
Subject key identifier: 66:32:EB:FB:4D:2E:97:FA:AE:EB:C1:45:27:E7:59:B7:FC:87:0A:15
Authority key identifier: B6:E0:FE:0F:AF:68:44:98:8A:F2:F7:44:D5:16:ED:B9:C5:DF:E7:1C
Certificate issuer: /CN=b6e0fe0faf6844988af2f744d516edb9c5dfe71c
Certificate serial: 0197CF4D7FA9646F8B28026414EF68FAB83E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tuD-D69oRJiK8vdE1RbtucXf5xw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/d2a9bc-13b1-4b30-b563-209e1f84224e/1/tuD-D69oRJiK8vdE1RbtucXf5xw.mft
Manifest number: 0D49
Signing time: Thu 03 Jul 2025 08:00:51 +0000
Manifest this update: Thu 03 Jul 2025 08:00:51 +0000
Manifest next update: Fri 04 Jul 2025 08:00:51 +0000
Files and hashes: 1: a_PNkPnx5ou35JrpXNK2_iqC5Yc.roa (hash: iMkdGKK1MTR9CDFy5rjVtC+a2w/5myXmTmA9XTMLkJo=)
2: tuD-D69oRJiK8vdE1RbtucXf5xw.crl (hash: Pv9EedReaDnhTuKFU7FKLTTy3nIshP7t3+bRay59QtY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/d2a9bc-13b1-4b30-b563-209e1f84224e/1/tuD-D69oRJiK8vdE1RbtucXf5xw.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/d2a9bc-13b1-4b30-b563-209e1f84224e/1/tuD-D69oRJiK8vdE1RbtucXf5xw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tuD-D69oRJiK8vdE1RbtucXf5xw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 05:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cf:4d:7f:a9:64:6f:8b:28:02:64:14:ef:68:fa:b8:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6e0fe0faf6844988af2f744d516edb9c5dfe71c
Validity
Not Before: Jul 3 08:00:51 2025 GMT
Not After : Jul 4 08:00:51 2025 GMT
Subject: CN=6632ebfb4d2e97faaeebc14527e759b7fc870a15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:de:73:23:38:15:e5:21:2f:09:01:1a:08:b7:
0e:86:30:f2:d4:c3:58:db:a3:75:d3:28:da:57:d0:
ef:31:d3:e8:f1:84:05:c0:5b:81:2f:ca:f2:fc:2b:
fe:8f:8c:d7:e0:d0:c4:3e:33:c0:60:6a:08:be:a0:
41:8f:90:99:8f:3e:37:ec:11:19:67:b4:f2:86:ff:
8b:4a:02:93:93:89:60:40:48:30:a5:00:11:98:0d:
ed:ac:f2:c9:fb:8b:fa:ea:89:9c:9f:94:20:26:54:
d0:e6:07:81:66:2d:c0:16:68:3b:d3:43:f2:ed:70:
b6:98:bd:43:c1:0a:25:2d:70:d3:6f:30:7c:5d:6a:
b0:3a:70:d3:57:c8:28:fb:8c:6f:03:f3:39:ea:fc:
b0:48:fa:5c:aa:0e:53:2b:a3:86:65:17:75:22:3e:
76:b6:42:4d:fa:2b:0f:98:17:fb:ef:18:77:0c:72:
da:af:8f:8a:ea:fb:14:c3:29:c1:26:fb:24:f2:a1:
22:52:bd:4f:cd:35:ed:71:50:59:f6:4d:d4:52:ff:
a3:ed:19:bd:30:a3:7a:8d:f7:9c:e2:33:96:df:54:
0a:b1:77:b2:3b:3a:6a:bb:f5:d8:b3:8a:ef:fa:dc:
bb:40:07:50:e2:80:40:de:1c:4d:de:a7:48:85:e4:
df:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:32:EB:FB:4D:2E:97:FA:AE:EB:C1:45:27:E7:59:B7:FC:87:0A:15
X509v3 Authority Key Identifier:
keyid:B6:E0:FE:0F:AF:68:44:98:8A:F2:F7:44:D5:16:ED:B9:C5:DF:E7:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tuD-D69oRJiK8vdE1RbtucXf5xw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/d2a9bc-13b1-4b30-b563-209e1f84224e/1/tuD-D69oRJiK8vdE1RbtucXf5xw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/d2a9bc-13b1-4b30-b563-209e1f84224e/1/tuD-D69oRJiK8vdE1RbtucXf5xw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:7b:2d:65:ec:ea:e0:3b:10:dc:74:64:cb:ea:be:76:e4:45:
00:a2:43:28:aa:df:4b:56:8d:28:23:0a:96:b7:d7:70:c5:76:
46:02:99:19:75:59:ca:c0:e6:43:b0:41:72:9b:69:9d:93:f7:
ed:b7:9d:05:d6:f6:f0:3c:e2:da:42:26:6c:4d:b2:bd:ca:31:
bd:63:1f:ef:0e:b7:8e:fe:9b:1e:76:62:a7:b0:72:7d:c8:f4:
68:e2:2a:98:b7:f8:65:97:df:51:3a:30:4a:aa:15:e9:28:5c:
92:1d:e7:f9:e1:a4:5a:02:30:2d:58:ad:35:16:39:e8:54:e3:
54:9e:e0:c0:67:43:ef:78:7e:72:8b:9e:80:d7:8d:7d:9e:85:
27:ca:49:de:5f:51:c4:6e:b4:8d:c3:1f:45:cc:5a:c3:07:0d:
c1:4d:19:d2:9d:af:8b:c2:9d:68:12:b9:89:c1:f3:8d:c6:ce:
94:79:f2:b9:fd:86:42:50:bb:8a:d3:b9:d3:4e:2b:bd:a5:6a:
e2:fc:38:49:86:04:78:e0:56:34:e9:21:dc:80:63:cb:61:d7:
03:87:52:4a:b0:a5:a0:94:84:4d:1b:ff:e6:bc:eb:34:77:e7:
73:77:6f:cf:fa:70:00:c2:bd:36:25:8c:69:62:fc:26:15:b8:
d6:3a:d8:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 09:12:31 2025 by rpki-client