Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/8c02ff-a9c5-4788-ae8b-18b9a8510539/1/tXwPr6ZQ3ZSjtVgXOfY9iO-kFPM.mft
File: tXwPr6ZQ3ZSjtVgXOfY9iO-kFPM.mft (raw, json)
Hash identifier: +UZc30N3xaIUmTMVtz8uT5RVu3xDNFDxgzU3zLBTiFU=
Subject key identifier: 73:52:EB:8A:13:E1:37:5B:8D:4A:F9:57:F2:39:63:25:1E:27:08:89
Authority key identifier: B5:7C:0F:AF:A6:50:DD:94:A3:B5:58:17:39:F6:3D:88:EF:A4:14:F3
Certificate issuer: /CN=b57c0fafa650dd94a3b5581739f63d88efa414f3
Certificate serial: 0197CA94E1AC78753502B7D6BBD28923236E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tXwPr6ZQ3ZSjtVgXOfY9iO-kFPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/8c02ff-a9c5-4788-ae8b-18b9a8510539/1/tXwPr6ZQ3ZSjtVgXOfY9iO-kFPM.mft
Manifest number: 0CDD
Signing time: Wed 02 Jul 2025 10:00:43 +0000
Manifest this update: Wed 02 Jul 2025 10:00:43 +0000
Manifest next update: Thu 03 Jul 2025 10:00:43 +0000
Files and hashes: 1: WKXMRCbOe7azjRi4M3txfig4AbQ.roa (hash: misoRXqMC74XUm7CVVuJWe90Pkw4I/1hXuzduVdNB/4=)
2: tXwPr6ZQ3ZSjtVgXOfY9iO-kFPM.crl (hash: T9vnbTROPCltQ5cIx1jcGLmgxFCDFRtTQ4HR6VZyxc8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/8c02ff-a9c5-4788-ae8b-18b9a8510539/1/tXwPr6ZQ3ZSjtVgXOfY9iO-kFPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/8c02ff-a9c5-4788-ae8b-18b9a8510539/1/tXwPr6ZQ3ZSjtVgXOfY9iO-kFPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/tXwPr6ZQ3ZSjtVgXOfY9iO-kFPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 10:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ca:94:e1:ac:78:75:35:02:b7:d6:bb:d2:89:23:23:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b57c0fafa650dd94a3b5581739f63d88efa414f3
Validity
Not Before: Jul 2 10:00:43 2025 GMT
Not After : Jul 3 10:00:43 2025 GMT
Subject: CN=7352eb8a13e1375b8d4af957f23963251e270889
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:75:4d:ac:98:43:52:5b:5e:e5:8d:40:64:d5:
1c:59:34:a9:13:de:a7:9e:ad:76:5e:ad:34:27:a0:
51:c9:93:7b:46:c9:c3:f6:0e:f6:ef:a3:5b:8f:15:
64:91:6f:6d:68:0c:8e:76:6a:e6:03:2b:5c:a0:cf:
f9:14:d1:1a:7a:c5:c6:59:b4:d3:d0:c7:f7:0e:de:
34:72:a3:6e:cd:dc:e0:20:36:76:12:74:a2:df:bb:
c3:44:07:92:41:e2:5b:66:75:32:98:f6:c6:ce:ec:
f6:79:43:81:af:1c:9a:3b:38:84:9f:46:a2:f0:9a:
a0:7e:95:89:3a:e8:a7:62:d9:04:1a:94:ed:5c:1b:
42:dc:62:54:fc:bc:fa:d2:53:34:60:3c:fc:19:89:
80:90:31:e5:31:d7:20:9f:d4:06:d3:18:42:d9:48:
ea:67:19:6a:9b:b6:f1:f7:18:47:1e:07:e8:7f:79:
49:db:ef:14:5d:d2:0b:69:ee:34:67:cf:8f:29:5e:
73:02:e3:e4:a7:66:92:f8:2f:91:d0:6d:38:7f:9b:
7a:a2:87:75:92:49:e3:38:b4:f8:62:c3:70:87:7d:
fb:f9:61:20:35:68:6f:2d:21:6b:d1:cb:52:fd:4a:
22:b7:97:80:ce:f7:33:12:94:1f:88:36:d6:30:b2:
76:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:52:EB:8A:13:E1:37:5B:8D:4A:F9:57:F2:39:63:25:1E:27:08:89
X509v3 Authority Key Identifier:
keyid:B5:7C:0F:AF:A6:50:DD:94:A3:B5:58:17:39:F6:3D:88:EF:A4:14:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tXwPr6ZQ3ZSjtVgXOfY9iO-kFPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/8c02ff-a9c5-4788-ae8b-18b9a8510539/1/tXwPr6ZQ3ZSjtVgXOfY9iO-kFPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/8c02ff-a9c5-4788-ae8b-18b9a8510539/1/tXwPr6ZQ3ZSjtVgXOfY9iO-kFPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:54:e3:9d:68:1d:15:4c:99:fe:c5:8d:67:6a:6e:21:25:b8:
0c:53:62:1c:b1:d6:6f:fc:8c:bb:58:57:61:41:d9:53:6c:c6:
db:0f:13:32:82:f2:a9:43:b2:20:1c:51:d4:36:70:90:1f:43:
93:f9:11:52:f6:4a:45:39:e2:3e:c1:00:3f:18:ea:67:1e:17:
09:5d:1b:28:72:ed:39:94:9e:82:51:fe:cb:77:83:7a:35:38:
07:45:9d:13:9c:f8:a2:f9:ed:51:52:76:09:5c:6f:63:d3:32:
0d:e6:ef:2a:99:80:1c:c9:4a:4e:3d:1c:b1:f0:c9:93:b2:74:
22:01:6a:98:c0:25:91:32:97:2a:cd:7b:4f:27:fc:47:f1:a2:
a2:08:e2:b2:c1:b7:0a:e7:4c:48:8a:5b:fe:52:95:df:bc:46:
9b:c8:12:e1:6c:62:fb:04:03:08:78:56:37:9a:ee:b1:4c:dc:
14:7e:d5:1b:15:47:e1:7a:a8:d0:4e:93:a6:35:b1:bf:f9:89:
96:e0:42:88:8d:54:99:9f:fd:40:26:ff:1d:7a:42:62:7f:18:
35:44:f2:a2:f2:76:61:ee:84:3c:d4:56:f9:5c:2c:b7:77:ca:
cc:dc:e1:1d:a2:5c:13:74:a8:85:62:e7:63:d0:c5:f4:64:3c:
d2:11:f4:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 19:26:30 2025 by rpki-client