Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/649a98-339a-4f4b-8750-6e9d3b732b08/1/tWyxebPbXGs2zTMINAgB_tsrfRk.mft
File: tWyxebPbXGs2zTMINAgB_tsrfRk.mft (raw, json)
Hash identifier: E98rzHwfzfsh9/3kMb3L+IPDyP6qWHC9Tr/1chuy2rE=
Subject key identifier: 7A:28:DC:84:58:E4:CA:14:AD:D4:20:FB:44:BB:E1:E6:75:1F:31:B0
Authority key identifier: B5:6C:B1:79:B3:DB:5C:6B:36:CD:33:08:34:08:01:FE:DB:2B:7D:19
Certificate issuer: /CN=b56cb179b3db5c6b36cd3308340801fedb2b7d19
Certificate serial: 0197B70F10748E3A149E611A5486E64F2172
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tWyxebPbXGs2zTMINAgB_tsrfRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/649a98-339a-4f4b-8750-6e9d3b732b08/1/tWyxebPbXGs2zTMINAgB_tsrfRk.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 15:01:47 +0000
Manifest this update: Sat 28 Jun 2025 15:01:47 +0000
Manifest next update: Sun 29 Jun 2025 15:01:47 +0000
Files and hashes: 1: egERklG4JDoNVaiZcO7pQtm8HwI.roa (hash: UCPCOxDDKaXVSI1SbOM7CcRIC7mRuotxlKVUCRUv8VQ=)
2: tWyxebPbXGs2zTMINAgB_tsrfRk.crl (hash: oYB/xAvZcuMJZKs4VmP76TjdN7fHI3P3YBDe9dxw//w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/649a98-339a-4f4b-8750-6e9d3b732b08/1/tWyxebPbXGs2zTMINAgB_tsrfRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/649a98-339a-4f4b-8750-6e9d3b732b08/1/tWyxebPbXGs2zTMINAgB_tsrfRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/tWyxebPbXGs2zTMINAgB_tsrfRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:10:74:8e:3a:14:9e:61:1a:54:86:e6:4f:21:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b56cb179b3db5c6b36cd3308340801fedb2b7d19
Validity
Not Before: Jun 28 15:01:47 2025 GMT
Not After : Jun 29 15:01:47 2025 GMT
Subject: CN=7a28dc8458e4ca14add420fb44bbe1e6751f31b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:11:da:a0:d6:e5:81:71:df:d2:c5:21:32:59:
30:b5:fc:9a:9a:5f:74:6f:fb:37:24:f8:79:76:02:
a3:15:e9:72:b8:12:0b:78:5a:35:b1:49:25:24:71:
5c:d0:4a:af:45:31:d2:9d:1a:c7:fd:47:df:34:77:
a7:31:c0:82:bc:0c:b3:2a:7d:d6:95:82:a9:10:98:
1a:b7:84:19:8a:d5:9f:99:1e:bb:ff:43:d8:b3:a7:
0c:1f:cf:98:ad:7c:94:14:16:00:d2:73:1a:b7:58:
bf:a6:ab:f8:92:3d:15:79:ae:f5:ee:cb:b1:e3:96:
7d:8d:3d:81:e4:b3:1d:2a:a4:01:f7:3e:36:d8:f2:
1d:2f:5a:aa:e6:a6:76:1e:1c:f5:9a:9f:ea:eb:83:
bc:64:e5:8b:81:71:e5:37:8b:36:82:06:a5:c3:6d:
1a:fd:37:8b:65:38:f1:c1:3e:be:12:08:07:95:4b:
e5:ba:ae:47:af:5a:47:5a:7a:c1:3b:09:0d:f3:59:
6a:ca:2f:84:79:a2:79:63:35:c5:97:37:61:aa:ce:
dc:f4:cd:3b:44:53:5c:d5:9e:e1:a6:9d:d9:80:f9:
e1:c8:e0:90:a6:ef:28:4a:7a:e2:c1:d4:a6:d8:ca:
0f:b0:8d:dc:2e:c2:3e:b8:a8:59:12:e9:1c:c5:df:
68:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:28:DC:84:58:E4:CA:14:AD:D4:20:FB:44:BB:E1:E6:75:1F:31:B0
X509v3 Authority Key Identifier:
keyid:B5:6C:B1:79:B3:DB:5C:6B:36:CD:33:08:34:08:01:FE:DB:2B:7D:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tWyxebPbXGs2zTMINAgB_tsrfRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/649a98-339a-4f4b-8750-6e9d3b732b08/1/tWyxebPbXGs2zTMINAgB_tsrfRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/649a98-339a-4f4b-8750-6e9d3b732b08/1/tWyxebPbXGs2zTMINAgB_tsrfRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:d2:11:a0:d7:96:58:5f:2d:00:0c:06:90:af:e8:14:55:34:
c0:97:c1:d9:d8:28:b4:70:27:97:b3:51:cd:14:ff:03:c0:e3:
d2:0d:51:99:2c:8e:37:05:b6:95:cc:3c:87:b5:c5:4d:bb:e4:
c0:c1:6a:f6:fd:70:1d:44:e8:d6:c4:3f:45:51:de:73:65:48:
fc:70:a6:4a:70:83:79:e4:1f:ed:2d:0d:11:2d:26:cf:d8:42:
9a:47:5a:69:d8:19:3f:99:19:e1:eb:66:c5:7d:32:91:f8:d4:
42:f3:db:1c:ca:66:b6:a6:7b:ec:14:ce:52:57:13:9d:70:d3:
50:a7:d8:e3:26:1a:48:2a:46:c2:6d:4b:f2:82:c0:0b:54:46:
ff:83:dc:c6:b6:97:de:ac:4a:ea:70:3c:d8:cb:42:d6:17:18:
81:f7:d0:0f:7c:3a:47:dd:ba:4a:a8:58:2e:ba:00:19:7a:b9:
0d:1c:55:6e:ac:f2:03:da:d4:33:21:2e:3e:64:67:ad:b8:cf:
71:32:40:26:67:1e:06:42:8a:af:fb:13:2a:64:ae:9a:a4:58:
bd:0d:df:98:87:85:7f:49:56:95:f9:42:7f:ad:bb:61:bf:99:
3a:8d:c8:c8:83:5e:d2:0c:2f:dd:43:2c:c5:71:18:75:2d:52:
0b:e0:db:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:19:27 2025 by rpki-client