Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/03b79a-30ed-4d26-8585-9c5d351526b3/1/tDycG90eFSiKuTDUAFGzZTywnno.mft
File: tDycG90eFSiKuTDUAFGzZTywnno.mft (raw, json)
Hash identifier: a9qvqJX18q0W6kVaT8R5nFZICi8L1Denb+b45aVkJ30=
Subject key identifier: 5E:C4:60:48:AF:7D:9C:9B:14:4F:09:0C:DB:8C:89:82:AE:91:36:60
Authority key identifier: B4:3C:9C:1B:DD:1E:15:28:8A:B9:30:D4:00:51:B3:65:3C:B0:9E:7A
Certificate issuer: /CN=b43c9c1bdd1e15288ab930d40051b3653cb09e7a
Certificate serial: 0197C493038F7E652DCD1A18F9108F56547D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDycG90eFSiKuTDUAFGzZTywnno.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/03b79a-30ed-4d26-8585-9c5d351526b3/1/tDycG90eFSiKuTDUAFGzZTywnno.mft
Manifest number: 15BC
Signing time: Tue 01 Jul 2025 06:00:58 +0000
Manifest this update: Tue 01 Jul 2025 06:00:58 +0000
Manifest next update: Wed 02 Jul 2025 06:00:58 +0000
Files and hashes: 1: tDycG90eFSiKuTDUAFGzZTywnno.crl (hash: kDgjeygizVXmAJuHU7iAzAG9DY7nznSVLgSsqx8kg9A=)
2: yUpCnFh46Tqx7sCXg4QHc_cNe3o.roa (hash: cp+PmQthE9hblxpquCO9Uz9at9P5Zu4kvGvMw6tU+Ug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/03b79a-30ed-4d26-8585-9c5d351526b3/1/tDycG90eFSiKuTDUAFGzZTywnno.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/03b79a-30ed-4d26-8585-9c5d351526b3/1/tDycG90eFSiKuTDUAFGzZTywnno.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDycG90eFSiKuTDUAFGzZTywnno.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c4:93:03:8f:7e:65:2d:cd:1a:18:f9:10:8f:56:54:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b43c9c1bdd1e15288ab930d40051b3653cb09e7a
Validity
Not Before: Jul 1 06:00:58 2025 GMT
Not After : Jul 2 06:00:58 2025 GMT
Subject: CN=5ec46048af7d9c9b144f090cdb8c8982ae913660
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:80:b8:50:d9:7a:e5:16:c6:40:ed:ec:22:ab:
b8:73:33:f7:3d:36:05:40:84:ea:2b:80:dc:31:2b:
3a:13:79:5a:e5:5c:f0:52:bf:58:fe:df:e6:53:06:
32:6a:3f:21:c4:69:8a:b1:86:d0:1d:ac:f0:94:ab:
76:a3:bd:a8:14:42:5e:5b:eb:f0:9e:e5:46:7e:b9:
c2:39:25:ff:e7:9c:97:ff:22:34:f7:b0:89:fb:06:
de:10:15:9f:f1:c3:bd:c7:b2:d9:85:27:65:4e:8d:
ef:16:13:94:d4:39:72:3c:89:41:19:d5:07:c1:a2:
f6:56:80:fc:91:be:b1:0f:89:0a:57:9c:76:14:dd:
e4:1c:38:de:cb:50:a5:24:fd:62:8c:b1:2f:98:36:
ef:3d:59:34:71:a4:a4:13:8c:6a:28:f6:f0:7c:76:
77:f5:84:9f:72:71:1f:1d:e6:1e:e6:86:68:df:04:
2c:f3:44:cf:0f:1e:68:3b:d5:ee:f6:3b:64:c5:7b:
12:2c:7b:7a:ab:59:1a:c7:0b:a5:23:0d:69:6a:60:
d6:fc:03:1b:af:3a:37:e3:9a:53:3e:af:d0:8e:ca:
c9:d9:6a:60:36:69:3a:72:85:c6:b4:02:98:85:ce:
4f:4e:77:81:62:1c:51:d2:02:45:e7:a8:2d:19:07:
66:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:C4:60:48:AF:7D:9C:9B:14:4F:09:0C:DB:8C:89:82:AE:91:36:60
X509v3 Authority Key Identifier:
keyid:B4:3C:9C:1B:DD:1E:15:28:8A:B9:30:D4:00:51:B3:65:3C:B0:9E:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDycG90eFSiKuTDUAFGzZTywnno.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/03b79a-30ed-4d26-8585-9c5d351526b3/1/tDycG90eFSiKuTDUAFGzZTywnno.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/03b79a-30ed-4d26-8585-9c5d351526b3/1/tDycG90eFSiKuTDUAFGzZTywnno.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:df:70:20:5a:2e:7a:07:38:25:30:f7:c8:01:f1:86:bc:75:
bb:46:4d:a6:ac:29:99:8a:cf:da:61:ce:5c:67:ff:b7:ac:b6:
17:a6:99:e8:7f:30:11:10:b3:9d:ca:49:3d:a6:82:95:a4:46:
3e:37:7f:e8:ff:d3:16:51:6c:82:e9:68:17:53:ca:4f:08:2a:
04:e2:bb:bc:d2:76:8d:a8:d4:e2:f1:ff:2e:00:37:b4:10:69:
de:42:ea:20:67:9a:ab:55:ec:79:5e:6b:83:b6:e0:3a:f8:30:
0f:aa:40:5c:61:5e:ae:e7:93:e7:1a:e2:21:47:06:a5:35:9f:
5a:13:83:f7:99:3d:ac:df:ac:f2:c3:b4:c8:c2:8f:33:19:a5:
a3:d3:79:40:59:2a:29:db:a8:4d:b9:97:09:54:1f:58:3c:80:
03:c6:9a:3e:80:e3:0d:51:17:f3:67:f2:28:da:93:63:24:48:
35:82:b5:ba:84:ac:e5:55:bd:15:cd:74:78:f7:3f:2a:56:7f:
4e:79:05:77:3a:2a:db:fa:bf:e9:19:0c:76:dc:a7:c0:b0:44:
d4:23:af:36:d9:09:50:5f:c0:31:07:8c:e1:70:78:d5:59:60:
c1:9c:7c:ad:15:21:88:cc:c4:b5:b6:37:0c:2c:ef:a7:31:03:
be:01:ff:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 08:15:05 2025 by rpki-client