Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/033e8b-bde1-4f90-baf5-23847a40d9e4/1/tg1sqV4ncPVTQNkJ7HyX7so_4g4.mft
File: tg1sqV4ncPVTQNkJ7HyX7so_4g4.mft (raw, json)
Hash identifier: WsZk9LWaBvTu4uhdbdAW0TT8iX6Tz1Bki/b3krs0MTg=
Subject key identifier: B8:D4:9F:E0:A1:D8:C0:A5:1A:99:0C:65:10:92:29:6B:CA:D2:04:A9
Authority key identifier: B6:0D:6C:A9:5E:27:70:F5:53:40:D9:09:EC:7C:97:EE:CA:3F:E2:0E
Certificate issuer: /CN=b60d6ca95e2770f55340d909ec7c97eeca3fe20e
Certificate serial: 0197D887D778F3A60CEEBCA02CCC78CE64EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tg1sqV4ncPVTQNkJ7HyX7so_4g4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/033e8b-bde1-4f90-baf5-23847a40d9e4/1/tg1sqV4ncPVTQNkJ7HyX7so_4g4.mft
Manifest number: 15C6
Signing time: Sat 05 Jul 2025 03:01:10 +0000
Manifest this update: Sat 05 Jul 2025 03:01:10 +0000
Manifest next update: Sun 06 Jul 2025 03:01:10 +0000
Files and hashes: 1: 3wD7YASUrL3NpA7N1DKGwyMvpW8.roa (hash: E3LCGPj2WzMDsMMPMtvTWx8+o6rGMeVTiLG80T025To=)
2: tCxsttlDEYs9pRw5Gm9iTgZyCBc.roa (hash: 0ZbwaGE5XpT8151KuGcEKOSEkVLV60MXa5tXdHShvII=)
3: tg1sqV4ncPVTQNkJ7HyX7so_4g4.crl (hash: 4QHF4GG5IFvPNSsdLbbJQL2wqnjxgSK4Iqjw/1tgQgw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/033e8b-bde1-4f90-baf5-23847a40d9e4/1/tg1sqV4ncPVTQNkJ7HyX7so_4g4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/033e8b-bde1-4f90-baf5-23847a40d9e4/1/tg1sqV4ncPVTQNkJ7HyX7so_4g4.mft
rsync://rpki.ripe.net/repository/DEFAULT/tg1sqV4ncPVTQNkJ7HyX7so_4g4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Jul 2025 02:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d8:87:d7:78:f3:a6:0c:ee:bc:a0:2c:cc:78:ce:64:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b60d6ca95e2770f55340d909ec7c97eeca3fe20e
Validity
Not Before: Jul 5 03:01:10 2025 GMT
Not After : Jul 6 03:01:10 2025 GMT
Subject: CN=b8d49fe0a1d8c0a51a990c651092296bcad204a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ad:95:34:99:f5:98:9e:3e:2d:05:86:34:b8:
aa:64:e9:ae:f7:7c:02:cf:c5:27:61:66:63:9d:12:
a8:46:45:30:44:a3:da:85:e9:90:25:9e:22:50:a5:
47:04:11:0b:d2:5f:89:b7:94:a0:a1:8c:d3:74:f5:
f8:0c:6b:50:fa:73:d6:81:25:26:22:08:cf:26:ed:
f0:a9:8f:24:9a:02:7e:32:c1:a9:77:f3:7e:f4:12:
5f:7e:a9:1a:c1:06:4b:26:0d:b7:d4:00:de:5d:2c:
93:3b:93:09:1e:9f:18:5f:e8:dc:d5:09:e9:b0:73:
a0:17:49:a0:74:7e:d4:fa:ba:27:b9:d4:26:c3:43:
d0:e6:2e:bd:a6:d7:77:23:14:bb:c4:d7:f8:cd:f6:
e8:ed:b9:44:1d:bb:0a:3b:6e:61:3f:8c:de:81:20:
d1:15:45:91:97:90:a0:c8:63:3d:da:82:1c:8d:a2:
5f:f8:d3:e6:e1:77:1e:5e:04:60:48:74:5a:2f:ec:
12:e5:58:6b:05:46:08:f6:f0:85:7f:cf:d5:cf:49:
45:36:aa:a7:4e:09:8e:b9:ba:39:48:6a:ec:44:24:
b7:66:e0:1b:d0:28:36:6a:6f:dd:1c:fb:02:c3:6f:
a3:f5:bf:64:d3:3f:a2:73:63:c7:b7:8a:fb:e1:a5:
dc:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:D4:9F:E0:A1:D8:C0:A5:1A:99:0C:65:10:92:29:6B:CA:D2:04:A9
X509v3 Authority Key Identifier:
keyid:B6:0D:6C:A9:5E:27:70:F5:53:40:D9:09:EC:7C:97:EE:CA:3F:E2:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tg1sqV4ncPVTQNkJ7HyX7so_4g4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/033e8b-bde1-4f90-baf5-23847a40d9e4/1/tg1sqV4ncPVTQNkJ7HyX7so_4g4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/033e8b-bde1-4f90-baf5-23847a40d9e4/1/tg1sqV4ncPVTQNkJ7HyX7so_4g4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:ec:75:0e:a4:70:e2:02:8c:24:ea:17:90:e9:26:26:2c:e5:
f4:58:36:ad:a3:5a:87:cd:4f:4a:01:ad:f8:40:93:fd:e9:06:
29:89:65:01:cf:54:75:17:c4:3c:e8:0c:8c:3e:0b:cc:22:f3:
b5:3f:1a:c2:ad:48:d7:b2:0b:26:4c:87:6d:fc:53:44:30:48:
33:c2:1b:58:c6:a7:8d:e6:d4:87:4e:09:29:48:8d:26:0a:90:
c1:2e:eb:66:3b:c0:f6:80:20:0d:ec:c4:07:76:86:66:b1:8e:
b4:08:92:9d:b8:63:30:5e:ea:ca:3c:66:f3:67:f0:e3:88:3a:
57:75:e8:29:01:36:43:fa:58:78:84:c1:f3:4d:49:82:ad:7e:
e1:8e:3e:84:7b:85:47:e1:e5:32:54:54:72:b0:33:08:ce:d0:
05:63:bc:af:10:2c:0d:e0:86:d2:33:21:43:e6:f8:9a:e5:b1:
1a:db:89:9d:0b:9e:91:11:db:d3:f4:7f:9e:4a:97:25:a5:ca:
2d:0d:3a:74:9d:cf:a1:a6:b2:aa:fe:1d:9e:a5:14:b4:dd:ff:
89:7a:1f:ec:34:da:c7:7a:3e:f0:35:5a:8e:ae:78:83:34:f0:
75:99:86:1d:a8:46:93:0d:4f:bf:0d:5b:6b:88:63:a9:3a:c8:
7a:29:75:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 10:54:44 2025 by rpki-client