Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/f63d76-2fb6-43a2-bfec-9f7aa094303b/1/tPSWmNCOjCg8DfKoLxaZfmJZurY.mft
File: tPSWmNCOjCg8DfKoLxaZfmJZurY.mft (raw, json)
Hash identifier: apX0GHWDRcaCQL1pIf0q2fCcp2djhnP1PWX2V1p9TOU=
Subject key identifier: C8:09:2B:1B:9C:DD:44:FB:46:4B:2E:32:27:77:93:30:EB:48:96:3E
Authority key identifier: B4:F4:96:98:D0:8E:8C:28:3C:0D:F2:A8:2F:16:99:7E:62:59:BA:B6
Certificate issuer: /CN=b4f49698d08e8c283c0df2a82f16997e6259bab6
Certificate serial: 0197BB59882CE25F84393607A0C2D75FDCA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPSWmNCOjCg8DfKoLxaZfmJZurY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/f63d76-2fb6-43a2-bfec-9f7aa094303b/1/tPSWmNCOjCg8DfKoLxaZfmJZurY.mft
Manifest number: 0784
Signing time: Sun 29 Jun 2025 11:01:36 +0000
Manifest this update: Sun 29 Jun 2025 11:01:36 +0000
Manifest next update: Mon 30 Jun 2025 11:01:36 +0000
Files and hashes: 1: tPSWmNCOjCg8DfKoLxaZfmJZurY.crl (hash: 4rqYdf3QEqqieWO50YAe1IcA1tExVB5EZ3PJGpv1/kA=)
2: xzawIGSZ9gaUq6klJYybOrl_u8k.roa (hash: 1673awjNQrA/kSjVn3AcQmjZN9mvF8MpaJPKmYa0E/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/f63d76-2fb6-43a2-bfec-9f7aa094303b/1/tPSWmNCOjCg8DfKoLxaZfmJZurY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/f63d76-2fb6-43a2-bfec-9f7aa094303b/1/tPSWmNCOjCg8DfKoLxaZfmJZurY.mft
rsync://rpki.ripe.net/repository/DEFAULT/tPSWmNCOjCg8DfKoLxaZfmJZurY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:bb:59:88:2c:e2:5f:84:39:36:07:a0:c2:d7:5f:dc:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f49698d08e8c283c0df2a82f16997e6259bab6
Validity
Not Before: Jun 29 11:01:36 2025 GMT
Not After : Jun 30 11:01:36 2025 GMT
Subject: CN=c8092b1b9cdd44fb464b2e3227779330eb48963e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0e:1a:95:f8:c5:64:c7:9f:3f:99:5d:a5:00:
68:fe:56:ff:43:17:66:3c:45:b7:3e:e6:fd:b0:6d:
ac:da:29:11:e5:b2:1c:2d:ba:85:d3:72:33:52:05:
aa:c3:81:ff:db:ad:a2:ee:9a:36:5c:98:2d:2b:b1:
0c:b5:38:60:0e:e0:6a:df:41:02:83:6f:ae:d9:c9:
22:c0:80:d2:1d:90:23:29:53:c8:0a:3c:06:92:93:
45:9d:b0:2f:be:e8:a2:30:c4:f0:2f:e6:90:40:5d:
cb:06:de:80:0c:e8:f5:0f:1a:3a:a5:30:2b:3b:8b:
82:55:c6:49:90:4a:ca:db:bd:f1:c7:d3:3c:67:c8:
28:4f:00:a9:cf:6f:c3:16:de:71:25:64:5e:53:5c:
22:da:fe:3b:a2:29:c9:a5:cf:1a:ef:0b:72:b5:57:
ad:89:d1:11:25:05:9a:f2:2a:52:50:d8:2b:8f:94:
cd:19:8c:a9:74:13:0d:c7:a8:2b:6b:c3:2e:6a:0f:
19:1f:86:1b:8c:60:ec:0b:40:46:10:94:63:66:d4:
03:78:23:67:47:ec:72:2f:dc:63:15:df:36:ea:44:
ce:76:07:6c:f4:9d:f1:bb:5a:9b:81:e5:99:74:08:
11:60:8f:13:a7:18:3b:c0:29:d2:55:b3:3a:78:59:
3a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:09:2B:1B:9C:DD:44:FB:46:4B:2E:32:27:77:93:30:EB:48:96:3E
X509v3 Authority Key Identifier:
keyid:B4:F4:96:98:D0:8E:8C:28:3C:0D:F2:A8:2F:16:99:7E:62:59:BA:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPSWmNCOjCg8DfKoLxaZfmJZurY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f63d76-2fb6-43a2-bfec-9f7aa094303b/1/tPSWmNCOjCg8DfKoLxaZfmJZurY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f63d76-2fb6-43a2-bfec-9f7aa094303b/1/tPSWmNCOjCg8DfKoLxaZfmJZurY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:f9:35:12:fa:91:3d:a0:d2:24:b0:76:2a:09:1d:7e:3a:9d:
96:66:9a:5e:30:a7:8c:b1:5c:f3:0e:23:79:8d:cc:b3:59:ba:
fb:83:e6:08:e3:44:e7:8d:a5:7f:f5:1b:45:92:b9:28:56:47:
1e:9d:48:59:b5:c9:91:c9:75:71:97:33:a3:b7:0d:e7:bf:88:
a7:16:43:51:28:85:46:1b:80:79:15:53:30:67:ba:66:77:b7:
93:c9:0d:3b:f7:76:9e:77:ec:c3:73:fd:97:bb:8f:39:b5:20:
78:9c:76:ba:da:09:5a:23:b7:be:99:f9:1f:e5:06:c7:cb:1a:
24:a0:e3:22:b7:8e:c1:f8:c1:0f:d4:0f:6f:d3:ed:9a:69:f7:
ff:47:d7:8e:70:2f:c6:0a:b3:09:20:8f:c3:b0:82:cc:e5:ef:
5a:05:a8:20:3f:52:c0:63:79:d6:a3:94:66:96:34:68:dc:c3:
07:7e:3a:1e:f4:8c:71:57:21:5f:8b:7c:3f:79:be:08:99:1c:
18:0e:c2:67:42:0c:63:bc:16:6c:7b:1c:50:6b:31:67:10:d8:
98:30:c9:4b:77:1b:58:a8:77:f6:86:89:ad:80:ee:59:b5:fd:
78:05:b7:ae:2e:51:db:e3:49:75:3b:cb:d6:68:c0:4b:c4:c0:
40:9a:c4:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 14:18:09 2025 by rpki-client