Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/82098b-0c53-4df2-8a32-fbc1e3f7e92b/1/tSU8JVLUQD9DuDwl52IjjfEtroE.mft
File: tSU8JVLUQD9DuDwl52IjjfEtroE.mft (raw, json)
Hash identifier: DuFj6p9zlIv2vaWaBvFiUa+tk4hDVNkB5lfcVxnhLQo=
Subject key identifier: 5C:7C:23:FD:3E:A0:66:B2:24:0E:D8:1C:A0:98:B9:9E:7E:B7:68:7E
Authority key identifier: B5:25:3C:25:52:D4:40:3F:43:B8:3C:25:E7:62:23:8D:F1:2D:AE:81
Certificate issuer: /CN=b5253c2552d4403f43b83c25e762238df12dae81
Certificate serial: 0198D51638EDB88F568BAD0E1D0A0A3E1D4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tSU8JVLUQD9DuDwl52IjjfEtroE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/82098b-0c53-4df2-8a32-fbc1e3f7e92b/1/tSU8JVLUQD9DuDwl52IjjfEtroE.mft
Manifest number: 072D
Signing time: Sat 23 Aug 2025 04:00:59 +0000
Manifest this update: Sat 23 Aug 2025 04:00:59 +0000
Manifest next update: Sun 24 Aug 2025 04:00:59 +0000
Files and hashes: 1: 6BgZvuvQdTTnHkpFXfURizE8XGQ.roa (hash: 78Xx7tAnFjhWDtWYiSHC9JJs2O6w1we6/J46orAWVbc=)
2: tSU8JVLUQD9DuDwl52IjjfEtroE.crl (hash: O2ypPtp9n52IpR45hfcXl0eqvxSKnYGSpdvOM5xKDj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/82098b-0c53-4df2-8a32-fbc1e3f7e92b/1/tSU8JVLUQD9DuDwl52IjjfEtroE.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/82098b-0c53-4df2-8a32-fbc1e3f7e92b/1/tSU8JVLUQD9DuDwl52IjjfEtroE.mft
rsync://rpki.ripe.net/repository/DEFAULT/tSU8JVLUQD9DuDwl52IjjfEtroE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:16:38:ed:b8:8f:56:8b:ad:0e:1d:0a:0a:3e:1d:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5253c2552d4403f43b83c25e762238df12dae81
Validity
Not Before: Aug 23 04:00:59 2025 GMT
Not After : Aug 24 04:00:59 2025 GMT
Subject: CN=5c7c23fd3ea066b2240ed81ca098b99e7eb7687e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:62:20:85:2b:96:62:b2:aa:d4:93:17:16:f6:
9f:0a:b7:07:17:8b:fe:a7:65:ce:d4:56:36:2c:2f:
d3:33:11:3a:08:8c:2d:cb:2d:2a:94:96:77:f7:a7:
72:69:b1:37:80:58:52:c6:6d:05:82:58:55:a5:04:
6b:8c:c6:67:ef:5f:38:f9:ce:71:04:48:57:c1:7b:
3c:8b:d8:a0:8a:db:3d:af:d6:66:f4:23:95:38:03:
71:a5:d7:d9:b1:33:23:1b:e0:6f:f5:93:0e:be:88:
22:78:a0:b8:f8:4c:2e:38:f0:22:d1:1d:02:3e:2f:
29:74:80:e9:1a:25:49:85:0c:7e:b4:a4:c4:06:b0:
ec:de:82:df:48:90:d8:bd:e0:7b:2d:41:89:55:a7:
48:a6:e7:90:18:90:5e:a1:35:44:f5:e3:ad:be:45:
26:35:5a:da:e3:6f:ec:d3:ed:ec:ba:52:6f:0b:18:
58:d9:24:6a:ea:e2:c8:ca:d3:9c:27:80:82:27:7f:
04:bf:82:24:59:0a:43:12:8f:22:a2:71:2a:72:c0:
02:26:69:31:f4:31:db:55:5c:83:df:f4:10:05:a7:
71:9d:4e:da:a4:ba:49:07:5a:a7:e5:1a:16:70:da:
5f:9a:15:28:30:1e:58:e6:25:6c:97:c7:0b:d1:8b:
c2:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:7C:23:FD:3E:A0:66:B2:24:0E:D8:1C:A0:98:B9:9E:7E:B7:68:7E
X509v3 Authority Key Identifier:
keyid:B5:25:3C:25:52:D4:40:3F:43:B8:3C:25:E7:62:23:8D:F1:2D:AE:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tSU8JVLUQD9DuDwl52IjjfEtroE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/82098b-0c53-4df2-8a32-fbc1e3f7e92b/1/tSU8JVLUQD9DuDwl52IjjfEtroE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/82098b-0c53-4df2-8a32-fbc1e3f7e92b/1/tSU8JVLUQD9DuDwl52IjjfEtroE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:8f:c0:d6:8b:6f:b7:49:bc:88:85:68:70:29:dd:72:10:90:
e8:e9:20:36:73:c8:2a:1e:77:e3:a9:37:65:22:bb:f0:d7:06:
b4:07:3c:b4:3d:e1:89:95:85:cf:2b:7c:10:69:0f:e0:77:f8:
9d:6b:b9:55:46:92:bd:ec:a8:c7:0b:5e:83:51:4d:21:d2:6d:
9e:e7:13:37:61:e6:f1:08:ae:ce:e5:ff:5d:4f:fb:63:ad:bc:
78:e1:a1:cb:06:7a:59:7c:66:d2:b4:8a:1b:82:17:0e:1d:fc:
91:07:92:26:2f:a3:1a:34:37:91:21:e3:ec:58:b3:f0:49:9c:
df:be:0b:0b:fc:0b:dd:25:14:b6:5d:67:59:97:46:4d:50:b8:
5e:c1:65:ba:5c:2c:67:4c:54:2e:b1:03:8e:96:6d:4f:3d:df:
41:a9:eb:5a:d7:90:a6:82:38:a7:d3:d1:cd:e0:11:0d:b2:1b:
58:37:a4:9f:69:b7:b5:b2:5b:ee:65:d6:15:6a:b9:fe:21:a5:
23:4d:61:c6:bd:3d:af:88:b2:1c:f8:e2:a6:c9:4d:07:44:8e:
23:83:d1:7b:d2:53:ae:01:d0:7b:00:75:d0:0c:2b:64:6e:ab:
5f:e1:48:a4:8c:5b:d3:10:23:f5:d0:b5:fb:01:07:56:fc:b6:
29:38:cb:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:19:23 2025 by rpki-client