Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.mft
File: tcfYHsTEBVxnP_VxzK0Hw6aZEF4.mft (raw, json)
Hash identifier: dfHhvP0ddnZjlqW382AhFGCR/yPR04kCA8nbER7+y8I=
Subject key identifier: CC:D3:AD:1D:80:13:1E:B5:B4:68:82:68:8A:B2:42:78:0D:E8:5E:F5
Authority key identifier: B5:C7:D8:1E:C4:C4:05:5C:67:3F:F5:71:CC:AD:07:C3:A6:99:10:5E
Certificate issuer: /CN=b5c7d81ec4c4055c673ff571ccad07c3a699105e
Certificate serial: 0197C615547AF84511ADE5BACDFA5E781B9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.mft
Manifest number: 0916
Signing time: Tue 01 Jul 2025 13:02:56 +0000
Manifest this update: Tue 01 Jul 2025 13:02:56 +0000
Manifest next update: Wed 02 Jul 2025 13:02:56 +0000
Files and hashes: 1: Dnpb75XdwM7LxtjkYlloNVMA6rs.roa (hash: EzyV/txDtZvmkY6vt32XISbysVcisfy2gnGp9jREhPs=)
2: ZFlE4CwGV5oXv28o6nsvolZlI_Y.roa (hash: S5Q4DAjjTKxkiafJ6he6yLpO30RXNUCaXjGnLWKadCQ=)
3: tcfYHsTEBVxnP_VxzK0Hw6aZEF4.crl (hash: 59ZFFeKK+rbxZa5pxFNrOibrhCnuZaOSr8ndx5t/sB4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.mft
rsync://rpki.ripe.net/repository/DEFAULT/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c6:15:54:7a:f8:45:11:ad:e5:ba:cd:fa:5e:78:1b:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5c7d81ec4c4055c673ff571ccad07c3a699105e
Validity
Not Before: Jul 1 13:02:56 2025 GMT
Not After : Jul 2 13:02:56 2025 GMT
Subject: CN=ccd3ad1d80131eb5b46882688ab242780de85ef5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f7:1a:82:92:0f:aa:89:af:1b:2e:3f:e7:28:
68:ff:55:35:4e:3a:54:24:4b:c5:0c:80:8d:8e:bd:
16:df:14:fd:9c:fe:42:b8:53:1c:39:cf:17:ef:3e:
18:1d:df:40:f1:f9:54:27:65:5b:a5:55:e1:ee:6d:
56:c8:a4:ee:f8:95:f0:38:84:be:a8:df:76:22:b3:
97:e0:36:ac:48:75:84:0d:2a:9e:77:75:75:95:5d:
5d:69:79:d4:93:31:b6:a9:ed:98:d4:78:98:3d:a1:
2e:57:09:52:9f:93:8e:8e:33:26:d6:78:44:92:9b:
2d:27:e9:33:02:1d:16:61:ed:a2:c5:d8:a9:b4:5c:
0c:f9:f8:42:4f:2e:c0:49:fb:4b:c6:c1:5d:c0:16:
d4:59:ff:8b:65:23:b0:30:fb:1a:da:57:a8:b4:9a:
13:51:a6:c6:e9:20:3b:11:e8:1f:a0:54:ad:8d:d0:
a7:d3:4d:47:6b:8e:85:16:3b:41:c9:1e:7d:47:f4:
00:15:05:26:03:ae:fe:ca:30:b3:fe:65:e0:ea:91:
a6:a4:21:6a:f5:ae:10:53:e2:52:4e:b5:1d:8d:66:
8a:ca:03:d3:c5:c9:12:8f:68:9d:91:0a:66:bf:c7:
d9:f9:98:cf:51:e9:4b:4f:dc:5c:35:99:fb:2e:d3:
86:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:D3:AD:1D:80:13:1E:B5:B4:68:82:68:8A:B2:42:78:0D:E8:5E:F5
X509v3 Authority Key Identifier:
keyid:B5:C7:D8:1E:C4:C4:05:5C:67:3F:F5:71:CC:AD:07:C3:A6:99:10:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:5b:5a:5b:e2:5d:5d:cd:c4:de:d4:32:59:28:23:1e:63:73:
d3:66:de:cc:74:80:d8:5d:18:6c:c5:9a:81:fe:3d:8f:da:43:
6b:b3:20:f0:72:cf:0a:d5:24:65:fc:da:9b:5e:a6:61:b9:cc:
18:c3:62:70:09:70:aa:7a:cb:ad:03:d7:46:a2:1f:18:fd:20:
17:f1:85:39:01:5c:14:8c:13:06:23:f1:a6:00:fe:30:ac:2c:
0b:cb:dc:25:46:ef:15:61:88:24:31:df:ec:dc:cf:f8:43:a4:
20:57:e1:f6:c7:15:72:ee:a2:c7:f7:8a:97:90:16:2f:a6:d7:
2f:41:d2:b0:ae:9b:f6:ec:3e:9c:27:2a:95:99:f5:16:14:82:
10:3a:b8:c8:87:70:48:4b:34:b4:3b:55:cb:67:b3:bf:52:79:
5b:e8:cf:72:fa:98:86:b0:23:a2:ac:85:d8:8a:08:f0:c3:3e:
bd:71:ee:cd:5d:58:5d:90:b6:d0:14:49:e1:f5:bc:da:be:a2:
25:4d:9f:4d:ff:dd:14:8f:26:2e:5d:9c:34:7e:6e:72:bb:be:
c5:45:97:ee:1b:c9:1f:67:1e:17:63:64:dd:1c:94:1e:39:87:
c9:6f:8b:47:e6:b0:cb:4d:d8:6f:0b:c4:2a:ce:e8:f1:68:08:
ff:34:d4:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 17:08:56 2025 by rpki-client