Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/4dd169-8dcb-4653-8a03-571b6c612bec/1/tUFVgYH3hjEZv0oVVMddqx9sUpI.mft
File: tUFVgYH3hjEZv0oVVMddqx9sUpI.mft (raw, json)
Hash identifier: ftyG+zkm2RoLh37opwdOp/FktDMSaYjzbNt5JSBZJCc=
Subject key identifier: 53:1A:9E:63:7F:6C:B3:B5:9E:16:BA:CA:7A:BB:52:94:3C:FE:3C:AA
Authority key identifier: B5:41:55:81:81:F7:86:31:19:BF:4A:15:54:C7:5D:AB:1F:6C:52:92
Certificate issuer: /CN=b541558181f7863119bf4a1554c75dab1f6c5292
Certificate serial: 0197C83921CDF44B15C7D669818D1AD3E343
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tUFVgYH3hjEZv0oVVMddqx9sUpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/4dd169-8dcb-4653-8a03-571b6c612bec/1/tUFVgYH3hjEZv0oVVMddqx9sUpI.mft
Manifest number: 03D9
Signing time: Tue 01 Jul 2025 23:01:16 +0000
Manifest this update: Tue 01 Jul 2025 23:01:16 +0000
Manifest next update: Wed 02 Jul 2025 23:01:16 +0000
Files and hashes: 1: 1-HTDTTyHqsL8qWvl7tdyMvlROZo.roa (hash: rDjH3KjSESto7R5VRIkalhKhlHHWAhNK5nCorKVRQGY=)
2: 74rFfsVLB83xqrl230f69RyQMZo.roa (hash: uIHKdF0Md6VmRaPIQqLHKtiwEPhOEBVDe4Gopq3AYXw=)
3: UVLB6EC_S4cdufZlLeGb47V1ReM.roa (hash: +1SPWwuKyVjoCsUjj6tw92B1zG4mEC7h1VegEv3YxLE=)
4: dCGcZg2F9Ea5zPZKvzxM5matRyQ.roa (hash: CVLQb8zE8ujxwsspK1MH+reOHlP+NQATO7Xjq1jEaUs=)
5: tUFVgYH3hjEZv0oVVMddqx9sUpI.crl (hash: RfGDxhmGNpjMcePBrZdIFa7D1JAcOvmCO7VbToNcE1k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/4dd169-8dcb-4653-8a03-571b6c612bec/1/tUFVgYH3hjEZv0oVVMddqx9sUpI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/4dd169-8dcb-4653-8a03-571b6c612bec/1/tUFVgYH3hjEZv0oVVMddqx9sUpI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tUFVgYH3hjEZv0oVVMddqx9sUpI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 16:57:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c8:39:21:cd:f4:4b:15:c7:d6:69:81:8d:1a:d3:e3:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b541558181f7863119bf4a1554c75dab1f6c5292
Validity
Not Before: Jul 1 23:01:16 2025 GMT
Not After : Jul 2 23:01:16 2025 GMT
Subject: CN=531a9e637f6cb3b59e16baca7abb52943cfe3caa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:a6:4a:42:63:0e:72:c1:5c:4b:e5:39:6b:11:
3a:73:3d:ac:73:22:d4:2f:08:15:cf:12:5d:f5:88:
2a:07:00:77:a3:b3:69:e3:16:3f:07:9a:84:44:74:
fd:35:de:33:e6:85:32:63:42:f3:39:21:4f:18:81:
48:f2:3a:0a:95:ce:6f:82:15:9e:4e:4f:89:76:ea:
90:86:3c:2a:2e:01:b7:2d:57:b6:56:97:8d:b7:be:
c2:64:6c:da:a8:f5:30:af:30:17:ff:21:a2:d5:02:
59:c3:16:8d:5a:92:7c:aa:9a:70:0f:29:9d:0a:45:
a3:9d:d1:ad:63:ea:af:8d:cb:d9:21:01:e3:cb:43:
c0:9c:5d:b5:f8:62:36:b8:02:7c:41:af:ce:49:19:
49:82:12:14:6c:ca:47:c0:ab:46:6c:75:fa:4d:a6:
c6:db:1c:cb:22:87:81:bb:dc:33:c8:90:d4:b4:89:
44:25:72:92:88:9e:da:5c:0c:79:2b:3a:9c:3b:08:
89:51:3d:d6:e2:d8:44:d3:74:cb:da:e4:7e:c4:50:
c9:33:4b:4b:c7:47:43:a8:fd:d2:82:93:d0:ee:5d:
0e:6a:75:9f:06:b0:b4:8e:fe:e2:26:28:0f:15:86:
02:dc:55:29:9c:29:6c:d0:c6:f0:58:c6:b7:a3:8a:
1d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:1A:9E:63:7F:6C:B3:B5:9E:16:BA:CA:7A:BB:52:94:3C:FE:3C:AA
X509v3 Authority Key Identifier:
keyid:B5:41:55:81:81:F7:86:31:19:BF:4A:15:54:C7:5D:AB:1F:6C:52:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tUFVgYH3hjEZv0oVVMddqx9sUpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/4dd169-8dcb-4653-8a03-571b6c612bec/1/tUFVgYH3hjEZv0oVVMddqx9sUpI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/4dd169-8dcb-4653-8a03-571b6c612bec/1/tUFVgYH3hjEZv0oVVMddqx9sUpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:f5:ec:5a:fe:78:7f:6b:e7:12:17:85:48:3d:a6:9c:ca:ee:
50:c6:9f:58:45:da:3c:ce:e0:a8:a5:77:36:d9:9d:b5:e9:71:
9d:6a:24:97:d5:78:15:70:fe:31:c8:5d:4b:a2:1c:46:bc:78:
37:cc:3e:f9:6e:5d:1c:ba:0f:d5:c4:30:a3:b2:11:51:f5:ad:
34:ae:a5:5d:6b:bf:66:e3:3f:7e:c9:2e:25:c3:83:37:de:60:
be:04:05:ad:ec:26:dd:dc:84:1b:08:3d:2c:3f:b4:1d:5c:cd:
16:93:f9:1d:e4:a3:f3:0f:0c:0f:5c:a3:ed:49:0d:57:01:4e:
61:32:7c:76:32:8c:b7:c0:65:7c:b5:25:22:b9:94:90:d8:6a:
cb:92:bd:3f:fa:c4:7a:5e:54:e9:77:44:84:e4:cf:3a:b5:67:
19:03:1e:e7:40:49:0a:a9:84:ab:f0:41:85:83:cd:21:75:e3:
35:fa:4d:3b:c3:2d:3c:2e:a8:20:07:b8:16:fd:a8:3e:09:62:
2c:4c:77:44:98:09:26:c5:f3:e0:11:08:c7:aa:c3:0b:03:4c:
51:e4:b7:0e:fd:9a:3f:b5:bb:65:e4:b9:8e:8f:66:34:73:89:
3b:92:ae:0a:10:c5:bd:8c:c1:3e:61:a5:f6:73:05:89:7a:b2:
5e:b9:6e:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 01:53:27 2025 by rpki-client