Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/ac82ec-0e31-461e-a205-1f6010a30ebb/1/tQ32Wi_LmxF6hTprVoVLBxjsM0M.mft
File: tQ32Wi_LmxF6hTprVoVLBxjsM0M.mft (raw, json)
Hash identifier: McfV+dOzGTnXreVZ3fKM52LX14G++1/KkOq9+XTtKGk=
Subject key identifier: E5:D1:58:FE:13:2E:7C:C0:11:42:D4:78:5D:43:E8:8C:25:2A:0B:D9
Authority key identifier: B5:0D:F6:5A:2F:CB:9B:11:7A:85:3A:6B:56:85:4B:07:18:EC:33:43
Certificate issuer: /CN=b50df65a2fcb9b117a853a6b56854b0718ec3343
Certificate serial: 0197B6A0B4ECD8DF1B6C78201BCBCFFE4D17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tQ32Wi_LmxF6hTprVoVLBxjsM0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/ac82ec-0e31-461e-a205-1f6010a30ebb/1/tQ32Wi_LmxF6hTprVoVLBxjsM0M.mft
Manifest number: 08A8
Signing time: Sat 28 Jun 2025 13:01:14 +0000
Manifest this update: Sat 28 Jun 2025 13:01:14 +0000
Manifest next update: Sun 29 Jun 2025 13:01:14 +0000
Files and hashes: 1: tQ32Wi_LmxF6hTprVoVLBxjsM0M.crl (hash: b+nM3QGR1GgSODVmbAjgRGIjsx+vD0qJfxUPmhiHTVs=)
2: zBqyJEl1ZTI7fL6gM2motFXrSRM.roa (hash: OkJW2+OnAMScP2GdhvLfFrfdk7h2e43pg36iU6eHej4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/ac82ec-0e31-461e-a205-1f6010a30ebb/1/tQ32Wi_LmxF6hTprVoVLBxjsM0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/ac82ec-0e31-461e-a205-1f6010a30ebb/1/tQ32Wi_LmxF6hTprVoVLBxjsM0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/tQ32Wi_LmxF6hTprVoVLBxjsM0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:b4:ec:d8:df:1b:6c:78:20:1b:cb:cf:fe:4d:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b50df65a2fcb9b117a853a6b56854b0718ec3343
Validity
Not Before: Jun 28 13:01:14 2025 GMT
Not After : Jun 29 13:01:14 2025 GMT
Subject: CN=e5d158fe132e7cc01142d4785d43e88c252a0bd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:76:51:de:e4:d1:d1:40:85:3c:e4:21:73:66:
7e:16:9d:de:7b:8d:85:1e:a0:2e:42:b6:79:06:14:
df:cf:0c:b7:99:0d:32:da:88:17:26:97:ce:aa:86:
4e:5f:52:42:80:a3:4e:c4:3b:41:3d:e0:9f:d0:51:
e6:19:85:b0:98:32:15:04:3b:82:7d:a3:d0:04:b5:
ec:98:06:53:68:52:4b:48:ff:e2:48:2c:eb:84:e9:
b2:9d:0f:0b:ff:5c:4f:79:f4:96:5f:c3:6f:70:e0:
b7:c2:94:59:3c:90:d5:a1:5e:6b:8e:e7:c1:4e:cf:
72:df:ca:e1:a8:1e:6a:48:df:20:e8:5b:c3:ab:31:
56:bd:9c:b1:f7:d0:3c:50:3f:c5:6a:b5:bf:1a:44:
a2:85:1d:c9:79:7a:3b:33:db:67:da:7c:76:e5:28:
80:86:10:60:00:27:eb:9b:65:03:18:53:e7:24:7b:
2d:0f:5d:c4:f2:f1:8a:4d:b5:6e:e0:b4:62:38:b5:
88:e9:73:f1:d6:db:90:6d:41:41:ad:8e:5a:c4:a9:
e8:f9:f5:2d:cf:ac:ec:72:fb:71:e4:f1:c0:9d:db:
95:07:3f:2e:ed:23:39:c8:60:0d:7f:d1:91:17:bb:
12:12:a7:c4:b5:0d:b1:97:e5:aa:1d:a0:31:73:d2:
2e:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:D1:58:FE:13:2E:7C:C0:11:42:D4:78:5D:43:E8:8C:25:2A:0B:D9
X509v3 Authority Key Identifier:
keyid:B5:0D:F6:5A:2F:CB:9B:11:7A:85:3A:6B:56:85:4B:07:18:EC:33:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tQ32Wi_LmxF6hTprVoVLBxjsM0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/ac82ec-0e31-461e-a205-1f6010a30ebb/1/tQ32Wi_LmxF6hTprVoVLBxjsM0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/ac82ec-0e31-461e-a205-1f6010a30ebb/1/tQ32Wi_LmxF6hTprVoVLBxjsM0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:ae:28:54:0f:16:6a:91:35:80:45:ed:6d:6e:cb:0f:d8:f2:
2b:c9:40:88:05:f6:50:74:d1:b7:a5:4c:9d:f9:35:2c:0a:26:
f1:c3:5f:57:54:b3:d8:05:a1:e8:99:e9:bb:a3:be:29:d1:60:
e1:7b:5d:38:a1:f7:b0:20:22:2d:77:24:26:eb:c5:9d:41:db:
b3:74:cc:8e:48:28:5b:17:7b:af:de:b3:2b:46:49:3a:2a:2c:
61:6c:e3:63:41:20:bb:86:e1:a0:64:ea:30:28:ca:02:01:4c:
36:79:27:2e:c9:53:37:1c:34:60:fd:90:95:86:a2:29:fe:1e:
a9:10:15:88:04:dd:b2:39:b3:0a:e3:a0:a0:38:2c:d6:c1:a3:
fb:7a:05:e1:4b:4c:55:d7:30:b9:ea:06:1b:20:d5:c8:33:4e:
ab:32:78:d4:f8:39:e4:19:51:30:ca:b0:c9:8c:3b:67:7b:0b:
a9:01:b2:54:08:d9:76:dc:34:d9:f1:20:64:c0:88:5b:3f:d7:
7c:71:09:1f:cf:c4:bd:a9:7e:46:46:e9:73:8a:1c:d6:5a:23:
fc:8c:cb:9a:40:a5:75:a7:d2:b1:9e:3f:a0:a0:27:45:77:b6:
b2:66:76:d9:56:8d:bc:02:cc:1f:dd:af:60:33:62:19:f0:10:
f2:89:6e:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:07:39 2025 by rpki-client