Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/39e9ec-8fa5-409c-b1de-937e9d99cac2/1/rTk8Y_F4ZXghoje6AmylJ5IzMz0.mft
File: rTk8Y_F4ZXghoje6AmylJ5IzMz0.mft (raw, json)
Hash identifier: mbou9B2Tp1I2JRbXyuSf9NZCY2TuVbBi4CkxM+hYXjI=
Subject key identifier: 86:D9:45:21:35:22:6A:CB:4E:59:F0:6F:BC:E7:81:E6:B4:28:40:6D
Authority key identifier: AD:39:3C:63:F1:78:65:78:21:A2:37:BA:02:6C:A5:27:92:33:33:3D
Certificate issuer: /CN=ad393c63f178657821a237ba026ca5279233333d
Certificate serial: 0197B8C58E67F05F2A48EE8A035B30E338BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rTk8Y_F4ZXghoje6AmylJ5IzMz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/39e9ec-8fa5-409c-b1de-937e9d99cac2/1/rTk8Y_F4ZXghoje6AmylJ5IzMz0.mft
Manifest number: 0E2A
Signing time: Sat 28 Jun 2025 23:00:44 +0000
Manifest this update: Sat 28 Jun 2025 23:00:44 +0000
Manifest next update: Sun 29 Jun 2025 23:00:44 +0000
Files and hashes: 1: NRGRL-46NCSPaGi9AZCwzE3w5nE.roa (hash: u0L8t2q2EBStWXwxFZXL40Y75wNx2nDlIz7mo+UHSk8=)
2: rTk8Y_F4ZXghoje6AmylJ5IzMz0.crl (hash: u/4aNhnM9b8yRd2laGmnJl84KRHMQE4Vxh9rO4P215k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/39e9ec-8fa5-409c-b1de-937e9d99cac2/1/rTk8Y_F4ZXghoje6AmylJ5IzMz0.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/39e9ec-8fa5-409c-b1de-937e9d99cac2/1/rTk8Y_F4ZXghoje6AmylJ5IzMz0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rTk8Y_F4ZXghoje6AmylJ5IzMz0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 23:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:c5:8e:67:f0:5f:2a:48:ee:8a:03:5b:30:e3:38:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad393c63f178657821a237ba026ca5279233333d
Validity
Not Before: Jun 28 23:00:44 2025 GMT
Not After : Jun 29 23:00:44 2025 GMT
Subject: CN=86d9452135226acb4e59f06fbce781e6b428406d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:9a:55:3f:5c:04:17:a8:7f:3d:7f:17:3e:48:
b6:c2:bb:0c:c3:c9:99:d5:28:be:c4:9a:ac:84:86:
0e:68:33:0c:bc:d5:16:76:39:2b:31:ba:13:3e:2b:
d0:bc:a8:17:26:b0:14:ad:52:8f:3f:22:b7:2c:53:
18:3b:90:4c:c3:e4:0e:03:a4:94:d9:33:9c:e8:c6:
49:d4:f4:ae:fe:86:8b:e2:2f:95:df:31:0e:27:c9:
fb:ff:6e:49:b8:24:5c:05:ca:b8:7e:fc:c2:13:79:
e8:99:f7:90:a4:bf:fa:96:33:58:85:65:da:e9:b5:
57:4d:a2:0c:10:ea:98:54:78:52:b0:b2:4c:c4:54:
d6:02:67:d1:a7:ce:71:0d:77:55:03:4d:04:72:dd:
34:7c:2c:5b:ed:0d:af:f4:12:0f:32:9c:1c:40:94:
4f:3b:b2:b3:79:b5:2b:5a:9d:b8:b8:84:c8:94:74:
55:7f:1d:1d:93:2c:da:85:f7:be:b4:1b:6b:81:62:
9e:43:a2:0d:10:89:00:19:16:20:94:f5:19:d6:91:
58:a4:6a:b0:f7:df:e9:43:87:4d:67:de:9b:68:e7:
5c:08:f3:06:11:0f:18:93:60:22:ec:82:12:bf:7f:
eb:08:18:35:5f:07:65:bf:c3:fb:6a:ab:d5:65:40:
b4:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:D9:45:21:35:22:6A:CB:4E:59:F0:6F:BC:E7:81:E6:B4:28:40:6D
X509v3 Authority Key Identifier:
keyid:AD:39:3C:63:F1:78:65:78:21:A2:37:BA:02:6C:A5:27:92:33:33:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rTk8Y_F4ZXghoje6AmylJ5IzMz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/39e9ec-8fa5-409c-b1de-937e9d99cac2/1/rTk8Y_F4ZXghoje6AmylJ5IzMz0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/39e9ec-8fa5-409c-b1de-937e9d99cac2/1/rTk8Y_F4ZXghoje6AmylJ5IzMz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:c5:30:b7:99:e6:59:2a:08:d5:ce:6b:73:9a:bd:b4:91:27:
30:36:aa:fe:58:6f:df:e8:88:4a:5f:50:9e:f8:0a:f4:bf:54:
b7:62:04:85:5d:52:5d:93:a8:d3:d3:80:9f:2a:03:e7:ca:e4:
42:11:17:c2:a7:42:c2:45:37:60:07:7d:ef:26:a3:30:3e:1e:
1d:81:76:40:c5:4f:88:c7:47:b4:1b:b7:70:00:69:f0:98:c0:
db:4d:2e:9a:f8:9b:a2:b0:6a:65:a8:8a:76:44:df:e6:cb:90:
be:95:a6:9a:6a:cd:b0:f7:10:79:cd:c6:08:dc:37:11:34:a1:
37:be:8d:aa:56:9b:de:cb:b0:d1:a4:ac:63:fb:a4:c8:64:fb:
04:8e:f7:47:26:fb:4a:31:a1:b7:00:d8:d0:93:11:22:f1:6f:
93:c6:bd:87:fe:1b:be:54:3a:c9:90:81:04:7f:b4:00:18:e7:
4a:6f:ba:e8:52:fe:c9:9d:e8:7c:da:02:03:b0:c7:00:ed:95:
9f:79:06:34:75:24:92:d8:5e:aa:19:b8:0d:49:6b:82:2b:81:
02:11:e1:2c:91:8e:71:6d:03:de:7f:58:c1:c0:35:b0:28:95:
dd:7e:9c:15:d5:1c:b7:87:41:af:69:87:75:8e:33:e7:4f:db:
1c:cb:f6:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:33:14 2025 by rpki-client