Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/d282be-7ca5-400f-be84-cfab10d30693/1/tTRCGKSIC1AMAzMh52vXi088Flg.mft
File: tTRCGKSIC1AMAzMh52vXi088Flg.mft (raw, json)
Hash identifier: b29599HGByrvzCq00Jr1hnnlJ3H1HQ1fbjGEVcDAXfE=
Subject key identifier: FA:20:E8:7F:4A:7A:55:6C:34:BF:D9:4B:63:DF:9C:8D:23:EE:92:58
Authority key identifier: B5:34:42:18:A4:88:0B:50:0C:03:33:21:E7:6B:D7:8B:4F:3C:16:58
Certificate issuer: /CN=b5344218a4880b500c033321e76bd78b4f3c1658
Certificate serial: 0197B6A16EF06953907F6EF79D2586CA40D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tTRCGKSIC1AMAzMh52vXi088Flg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/d282be-7ca5-400f-be84-cfab10d30693/1/tTRCGKSIC1AMAzMh52vXi088Flg.mft
Manifest number: 15BA
Signing time: Sat 28 Jun 2025 13:02:02 +0000
Manifest this update: Sat 28 Jun 2025 13:02:02 +0000
Manifest next update: Sun 29 Jun 2025 13:02:02 +0000
Files and hashes: 1: 8Pm542mxmtNx79Ipw8aJ3MUUUlw.roa (hash: wUyn8TfNac0yPrEyoAGwGRLxadfovmjunsKwqoO4Tic=)
2: MK5kvHBNAAlnKRq0I1CvZhVF9Ng.roa (hash: ku7EY/yVBZoDpf18kdWwR04OCaLbQDYij0LYSvbt0Ho=)
3: tTRCGKSIC1AMAzMh52vXi088Flg.crl (hash: AvtoLF9BET3odcdfdcR383BMDwZ6a1VGc6j2MAqqUU0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/d282be-7ca5-400f-be84-cfab10d30693/1/tTRCGKSIC1AMAzMh52vXi088Flg.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/d282be-7ca5-400f-be84-cfab10d30693/1/tTRCGKSIC1AMAzMh52vXi088Flg.mft
rsync://rpki.ripe.net/repository/DEFAULT/tTRCGKSIC1AMAzMh52vXi088Flg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:6e:f0:69:53:90:7f:6e:f7:9d:25:86:ca:40:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5344218a4880b500c033321e76bd78b4f3c1658
Validity
Not Before: Jun 28 13:02:02 2025 GMT
Not After : Jun 29 13:02:02 2025 GMT
Subject: CN=fa20e87f4a7a556c34bfd94b63df9c8d23ee9258
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:8d:a3:de:66:a8:b1:b7:70:b7:21:2b:8d:e7:
27:f6:72:da:90:6f:5a:04:ce:54:c5:fb:2e:cc:cd:
6c:ad:98:c5:78:a0:56:cb:43:f1:e1:ad:a1:8a:7b:
ad:ce:2a:dd:a1:b8:b9:42:ee:e3:41:39:16:38:dc:
de:28:b9:5e:df:8f:cb:5a:d1:15:47:89:71:9e:90:
df:ac:6b:8c:a9:74:fb:54:00:bc:f3:e2:59:7f:0a:
13:2e:14:b1:d1:8f:93:12:f2:72:2a:7e:64:40:c4:
0a:32:c8:8e:66:e2:9a:a7:8a:0c:05:fc:df:73:42:
15:b3:cb:02:a5:92:75:ef:cb:a5:8b:ed:8b:07:12:
7d:f4:94:13:f1:1d:6f:43:03:13:21:97:35:55:9e:
d1:62:46:aa:d8:10:5f:9d:43:63:72:48:09:0f:cb:
ba:61:ae:d6:41:08:8b:40:15:49:77:ba:9b:55:c8:
63:32:2d:93:99:99:2d:06:e6:5c:40:2c:f9:fe:c6:
57:2d:fa:25:f6:2c:57:87:99:6e:f9:9a:bc:36:c6:
9e:46:95:20:76:9f:a1:e4:d3:b4:f5:10:a7:f6:88:
0f:1a:c1:54:0e:e0:de:ed:04:34:c6:ee:ac:36:39:
aa:59:55:49:00:43:14:89:e8:93:f8:3d:40:a1:e5:
4b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:20:E8:7F:4A:7A:55:6C:34:BF:D9:4B:63:DF:9C:8D:23:EE:92:58
X509v3 Authority Key Identifier:
keyid:B5:34:42:18:A4:88:0B:50:0C:03:33:21:E7:6B:D7:8B:4F:3C:16:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tTRCGKSIC1AMAzMh52vXi088Flg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/d282be-7ca5-400f-be84-cfab10d30693/1/tTRCGKSIC1AMAzMh52vXi088Flg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/d282be-7ca5-400f-be84-cfab10d30693/1/tTRCGKSIC1AMAzMh52vXi088Flg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:c0:92:19:29:0b:a6:8a:f0:fa:32:2f:12:6e:47:6c:c9:14:
0d:07:a4:7a:03:3c:00:56:8f:e7:d2:28:2c:fe:3e:21:14:5e:
0e:ad:27:df:10:db:83:37:86:45:57:1d:e6:29:ce:8f:54:4f:
56:9a:b4:0b:64:51:58:63:e9:d7:a3:ed:26:7d:dd:04:72:88:
ba:13:dc:89:3b:26:b6:58:dd:7d:55:d3:81:0f:55:90:ec:c3:
a6:dd:22:cd:ae:47:ad:9d:1f:91:ed:2c:cc:c6:4f:e6:fc:31:
8e:3a:3e:21:67:71:fa:fa:33:9f:70:13:87:e6:41:4a:fd:1d:
e6:a6:8e:21:7b:96:76:68:3d:74:d6:6c:21:e2:9c:dd:86:01:
ef:95:f1:4a:25:ae:bc:5e:4d:3c:59:86:79:28:08:46:48:19:
c2:9c:0f:16:07:d3:2e:4c:4c:c6:0f:8a:65:e1:60:06:65:6b:
0f:fc:ec:d2:08:1c:ef:da:74:fb:9a:ca:03:01:c2:b1:2d:d7:
d3:d2:1a:e8:28:6d:b5:af:2b:ca:a1:84:2d:bc:65:77:21:b6:
45:58:21:e8:47:39:12:d2:4e:de:41:93:04:df:59:8a:95:93:
9c:60:db:58:f2:bc:0e:38:ad:f4:aa:66:c9:f4:eb:94:c9:e2:
13:49:5f:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:08:20 2025 by rpki-client