Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.mft
File: tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.mft (raw, json)
Hash identifier: 1zgNZmTWLxM30LSPqp89cDk37zi7LxkNzK7J9FNa77w=
Subject key identifier: D3:CD:7D:40:48:BA:47:AD:1D:0D:A4:16:54:DF:41:A4:D1:84:BF:2C
Authority key identifier: B5:99:09:ED:17:1B:38:C1:FD:C4:36:22:29:E7:8D:69:85:1D:E1:1C
Certificate issuer: /CN=b59909ed171b38c1fdc4362229e78d69851de11c
Certificate serial: 0197C5012909EDCFAB20DE6A2038238A625A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.mft
Manifest number: 15BE
Signing time: Tue 01 Jul 2025 08:01:16 +0000
Manifest this update: Tue 01 Jul 2025 08:01:16 +0000
Manifest next update: Wed 02 Jul 2025 08:01:16 +0000
Files and hashes: 1: 1lSa1sl-dNBGB6RIspgIufADhjs.roa (hash: ZUkq8NELozqtJDfHgnQK7IOC8L6Hnu5OT9um+2WKleM=)
2: TB1SNMK17klLvRw1OV09EGXDsjg.roa (hash: 3s2Ua7bRSNfwEdFtiO4U1p/wzm3QtvPjfYSSDJ4385k=)
3: tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.crl (hash: 9i7P65UF0iyDmQNAaQwOKwpqLZmAgNYdNDzJHNhu0ks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c5:01:29:09:ed:cf:ab:20:de:6a:20:38:23:8a:62:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b59909ed171b38c1fdc4362229e78d69851de11c
Validity
Not Before: Jul 1 08:01:16 2025 GMT
Not After : Jul 2 08:01:16 2025 GMT
Subject: CN=d3cd7d4048ba47ad1d0da41654df41a4d184bf2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c2:c3:96:8a:6a:f1:a1:39:63:8a:56:42:01:
8f:b1:ac:f0:19:c6:fa:18:42:3f:e1:03:df:78:6e:
15:38:bb:7e:58:b9:35:97:b3:db:85:c2:91:e3:46:
51:b5:fc:cd:ab:27:eb:e1:ab:8b:ae:7e:1d:84:e4:
92:de:b4:41:8c:97:aa:50:58:0b:74:3b:cc:25:cd:
36:e3:26:6a:9c:a8:08:9a:db:56:15:c5:fc:f5:2b:
66:6f:71:f4:f8:9a:cb:9b:ae:65:9b:dc:af:12:e5:
7c:86:9a:62:4e:14:67:f0:2f:a9:a9:8b:69:5b:b9:
1e:f7:d7:70:be:0b:37:d6:3f:62:ae:0e:37:03:12:
da:cf:45:87:c3:3f:4c:14:6c:cf:90:38:50:52:8f:
d7:77:79:b1:3c:54:2a:d6:93:04:80:4a:f0:8e:f7:
55:61:11:10:9a:ee:15:86:d2:3e:ed:02:a8:fb:d6:
99:9e:ad:87:1c:8f:e6:e8:e8:2f:85:bc:fe:df:7e:
b3:80:8e:94:5d:16:09:8d:6c:25:6e:73:13:66:58:
3f:3c:0c:8f:99:14:52:35:32:6c:82:80:aa:1f:0d:
38:81:a4:8c:27:b6:11:5f:25:1e:27:11:31:b1:61:
4a:9b:73:dd:37:1c:f1:4f:f6:96:f3:45:c7:b0:59:
5c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:CD:7D:40:48:BA:47:AD:1D:0D:A4:16:54:DF:41:A4:D1:84:BF:2C
X509v3 Authority Key Identifier:
keyid:B5:99:09:ED:17:1B:38:C1:FD:C4:36:22:29:E7:8D:69:85:1D:E1:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:01:7d:e9:b9:2f:67:fa:d0:80:84:67:64:88:2d:b1:3e:25:
0e:a2:f9:2d:e1:5a:61:7d:0f:99:85:15:c7:f3:c8:f5:7f:bc:
46:6b:a4:a9:de:64:d6:67:9c:d2:a5:fe:5a:04:27:53:d9:c3:
dd:7d:51:fb:35:52:45:fb:b2:75:9d:00:aa:cd:64:97:cd:23:
46:23:92:4a:c5:63:f5:9b:19:44:b9:3f:3a:0e:a9:40:6a:ba:
06:f9:e8:a5:0f:a5:c7:b1:cd:0e:b8:0b:86:4b:d0:32:b4:bb:
7c:60:24:29:3f:b1:42:25:27:12:33:54:51:14:1c:f5:04:3f:
a2:68:c4:c5:da:49:8c:99:1f:d7:5b:a3:e1:8e:95:11:a7:cf:
bf:49:43:62:ca:2a:c7:44:27:de:45:e5:96:26:cb:fa:b9:48:
ae:87:e9:55:d5:ba:ef:f7:14:19:f6:04:07:13:49:bb:dc:fe:
f0:64:3e:2b:9b:9b:40:37:ba:af:e9:8e:d3:52:db:51:bc:1b:
10:b8:10:15:5a:7e:2b:be:e1:fc:69:fb:e6:0a:3e:11:dc:11:
91:90:87:b1:d3:8c:49:39:4b:e3:f2:c6:d1:39:30:a4:08:92:
00:12:8c:73:5a:65:ef:61:fc:c8:a4:13:a0:e5:2f:cc:45:5b:
76:05:ba:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 11:26:31 2025 by rpki-client