Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.mft
File: tJjJexTDdKUoM9tqQAe1S0Zixak.mft (raw, json)
Hash identifier: 7AwSA8hg7ocm0cIM8YQPvYQPjFsGo1tv4hF2aDFj/Ao=
Subject key identifier: 6B:88:37:E6:A6:AE:54:09:AF:BE:E3:B9:65:0F:F7:59:00:F6:61:7B
Authority key identifier: B4:98:C9:7B:14:C3:74:A5:28:33:DB:6A:40:07:B5:4B:46:62:C5:A9
Certificate issuer: /CN=b498c97b14c374a52833db6a4007b54b4662c5a9
Certificate serial: 0197B745AC05FBE5619890CFBE1E2AE3121A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tJjJexTDdKUoM9tqQAe1S0Zixak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.mft
Manifest number: 05DE
Signing time: Sat 28 Jun 2025 16:01:25 +0000
Manifest this update: Sat 28 Jun 2025 16:01:25 +0000
Manifest next update: Sun 29 Jun 2025 16:01:25 +0000
Files and hashes: 1: CvcmVd2qiQMCtgnMEuQp7Q5S4Vg.roa (hash: 6oEqjna8oaHJiSK9+x9VxezwWYrKn62GKKSEaLSxdDU=)
2: UKY-oSMIFmmicltNFFzSJHvvmLM.roa (hash: cA262Na30QfQdhfhBPxJOrAeDIB1dyAnD2XIGiuSUOI=)
3: tJjJexTDdKUoM9tqQAe1S0Zixak.crl (hash: 12xCM49r9wPuhhwW355lnLVJ1awwUDSbvHN3CRpXMU8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.mft
rsync://rpki.ripe.net/repository/DEFAULT/tJjJexTDdKUoM9tqQAe1S0Zixak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:ac:05:fb:e5:61:98:90:cf:be:1e:2a:e3:12:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b498c97b14c374a52833db6a4007b54b4662c5a9
Validity
Not Before: Jun 28 16:01:25 2025 GMT
Not After : Jun 29 16:01:25 2025 GMT
Subject: CN=6b8837e6a6ae5409afbee3b9650ff75900f6617b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:1b:56:d2:0e:18:60:15:23:2f:3f:ec:d2:a5:
f2:0a:f9:80:4b:2f:d1:f0:56:2d:82:c8:7a:ed:3a:
b7:41:5f:07:41:27:a9:f4:54:97:a7:92:e7:a7:aa:
21:8c:b2:84:a1:1b:b5:14:67:a0:c7:0a:8d:a9:2e:
6c:12:c3:5d:d0:4e:20:43:eb:5a:87:07:0a:43:0c:
4f:42:05:d2:98:eb:5f:9f:36:d4:87:8c:03:2f:6a:
c8:38:cd:7c:5f:40:50:dd:61:58:af:09:eb:cb:8c:
19:ba:e3:6d:db:1e:93:21:35:68:d6:df:2a:cc:6f:
79:e9:69:bf:66:ab:91:2e:df:86:6e:d4:19:6b:be:
4a:49:09:e1:e6:a9:36:25:b6:b2:ee:c3:10:9c:78:
b3:2b:56:f9:6c:2c:e6:8a:42:5d:38:94:46:e4:79:
2a:c2:02:fb:c6:c6:74:e3:e4:a0:8c:67:8a:a7:91:
4b:4b:7c:d4:f8:be:2e:b7:d8:2c:63:47:16:f9:98:
ae:46:04:a2:6c:53:8c:4a:4f:90:0d:17:1d:32:56:
4f:36:cb:23:83:ee:70:04:91:be:1a:98:07:53:7a:
bf:5f:ae:68:61:20:ed:a1:b6:96:ce:90:3e:62:6e:
20:0f:f7:25:22:1c:a3:b2:7e:0f:cc:f7:46:bf:9d:
73:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:88:37:E6:A6:AE:54:09:AF:BE:E3:B9:65:0F:F7:59:00:F6:61:7B
X509v3 Authority Key Identifier:
keyid:B4:98:C9:7B:14:C3:74:A5:28:33:DB:6A:40:07:B5:4B:46:62:C5:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tJjJexTDdKUoM9tqQAe1S0Zixak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:e1:01:d2:ab:8d:ff:00:f5:1c:b6:86:5b:ea:d6:c8:8f:7f:
3b:1b:ac:ed:18:20:cb:6d:75:3b:da:22:ff:b8:91:76:76:88:
0b:1e:d7:a7:e0:76:75:69:6e:32:e4:5e:bc:40:3b:84:c2:85:
9d:5b:a3:f9:a0:55:3b:59:b4:e5:f8:de:0d:11:b3:94:cf:28:
f5:0a:4f:da:75:16:99:b5:64:37:9a:eb:6d:37:89:9b:89:15:
b2:ce:51:de:bf:d7:2d:7f:92:7f:cc:2e:d8:5f:31:e3:46:55:
5d:2b:4f:20:0d:b8:e8:4c:71:8c:60:31:f7:a6:47:89:ae:ab:
da:e0:54:35:01:79:12:f2:30:81:30:81:2c:01:68:f8:e2:8d:
a7:1f:f8:d6:94:c9:34:eb:3c:cb:25:57:72:79:4a:03:18:37:
4b:44:38:d9:5a:34:ea:f1:aa:0d:29:94:db:c3:d3:43:38:e9:
9d:79:71:e4:9d:88:62:e5:5e:92:00:df:8e:e9:74:a1:4d:31:
d7:7a:cd:d4:26:79:3a:bb:3c:f5:3c:17:82:6c:d1:46:45:b5:
eb:f4:c4:f9:80:ee:ef:b3:f2:f4:bf:f6:04:bb:9a:b7:2d:6e:
f6:d6:48:7e:c1:04:40:00:e0:13:e2:1e:7d:e3:9c:86:5a:26:
58:82:6e:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:46:51 2025 by rpki-client