Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/e56d41-5bb8-4a91-a4f0-f86dcaad8c49/1/tHMWeROvc-T2N0FwxPlF-LDdfWQ.mft
File: tHMWeROvc-T2N0FwxPlF-LDdfWQ.mft (raw, json)
Hash identifier: Zmlp2+BsVuNkzY4lzqj1GxzEgqTcKf2hD92M1nIoLmg=
Subject key identifier: 26:33:C4:91:28:99:7E:B5:B7:A0:05:F4:98:1B:5C:4C:42:9D:DE:3E
Authority key identifier: B4:73:16:79:13:AF:73:E4:F6:37:41:70:C4:F9:45:F8:B0:DD:7D:64
Certificate issuer: /CN=b473167913af73e4f6374170c4f945f8b0dd7d64
Certificate serial: 0197B7B37D5926172FF4FDBDB7740A4CDB40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tHMWeROvc-T2N0FwxPlF-LDdfWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/e56d41-5bb8-4a91-a4f0-f86dcaad8c49/1/tHMWeROvc-T2N0FwxPlF-LDdfWQ.mft
Manifest number: 0C1A
Signing time: Sat 28 Jun 2025 18:01:22 +0000
Manifest this update: Sat 28 Jun 2025 18:01:22 +0000
Manifest next update: Sun 29 Jun 2025 18:01:22 +0000
Files and hashes: 1: J0ZgfR5U6lkaUqXFqkaevK5zE7Y.roa (hash: /1drMWi8WHeYZMzayKCKRAt2zHYV3mIjXjepj/lhD8k=)
2: tHMWeROvc-T2N0FwxPlF-LDdfWQ.crl (hash: NlU92fpFPEkEJUcIquwG2B41zizXCqaTVVzr/vlRqs4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/e56d41-5bb8-4a91-a4f0-f86dcaad8c49/1/tHMWeROvc-T2N0FwxPlF-LDdfWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/e56d41-5bb8-4a91-a4f0-f86dcaad8c49/1/tHMWeROvc-T2N0FwxPlF-LDdfWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/tHMWeROvc-T2N0FwxPlF-LDdfWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:7d:59:26:17:2f:f4:fd:bd:b7:74:0a:4c:db:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b473167913af73e4f6374170c4f945f8b0dd7d64
Validity
Not Before: Jun 28 18:01:22 2025 GMT
Not After : Jun 29 18:01:22 2025 GMT
Subject: CN=2633c49128997eb5b7a005f4981b5c4c429dde3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:43:ee:78:56:db:86:17:26:31:70:ab:f6:34:
dc:d1:8a:da:52:fe:c1:87:34:7f:0f:a2:c0:e9:15:
51:92:d4:3e:3c:fe:e9:71:86:42:ee:0e:84:05:f6:
c6:54:6e:ec:43:9b:07:9f:af:d1:c9:17:95:ea:e7:
5d:41:52:7b:4d:c7:d0:ae:79:53:e9:c7:4a:cc:01:
f3:00:7e:6f:6d:e6:a3:9b:b9:9b:1f:40:b4:b8:b6:
9b:be:22:28:70:75:18:b8:78:df:57:fa:3c:f9:61:
0c:84:2b:a4:60:f1:80:0d:68:96:76:1b:28:82:13:
de:77:42:1d:b5:b1:19:ea:af:68:d8:56:51:2a:d6:
65:43:40:b0:87:3e:9f:58:72:86:5a:24:ea:eb:3b:
34:98:03:03:8a:39:53:e8:6b:a4:f3:35:86:31:8d:
c4:b7:27:25:54:00:e3:0a:19:67:4b:63:3c:70:81:
52:73:de:0a:c8:b1:bb:15:5c:ed:ea:c6:44:6b:ea:
a1:b0:42:34:1b:61:79:8c:6d:17:60:90:94:de:f5:
47:04:27:3d:2b:b0:99:a3:58:f8:c7:7f:0f:5a:c3:
8c:35:95:74:30:65:92:ca:30:ae:44:53:b1:f9:56:
63:4b:28:ed:68:bb:52:11:20:36:c8:49:a8:bf:a7:
b0:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:33:C4:91:28:99:7E:B5:B7:A0:05:F4:98:1B:5C:4C:42:9D:DE:3E
X509v3 Authority Key Identifier:
keyid:B4:73:16:79:13:AF:73:E4:F6:37:41:70:C4:F9:45:F8:B0:DD:7D:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tHMWeROvc-T2N0FwxPlF-LDdfWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/e56d41-5bb8-4a91-a4f0-f86dcaad8c49/1/tHMWeROvc-T2N0FwxPlF-LDdfWQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/e56d41-5bb8-4a91-a4f0-f86dcaad8c49/1/tHMWeROvc-T2N0FwxPlF-LDdfWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:ca:5a:58:b4:c4:52:78:2d:22:44:be:77:73:95:83:c9:a1:
38:d6:1e:c7:0f:a8:88:c5:e8:d9:a5:1b:c0:c9:d6:a8:90:7b:
3a:4e:ed:6d:aa:40:58:97:05:3f:1a:bb:72:fe:f3:b2:19:30:
e3:1b:2c:32:9c:b8:37:28:55:5f:ef:30:49:44:2f:67:5a:73:
c6:fb:8e:1b:a8:2d:62:ad:65:66:a9:07:49:b5:6f:ba:7b:76:
f3:95:74:b5:8f:8f:0f:81:ad:2b:b6:04:fc:d6:e0:47:3c:69:
19:5e:6f:55:1a:5a:3d:1b:74:c7:a3:bc:60:2d:62:22:25:c1:
0c:1a:0d:0b:72:b1:80:b7:26:11:e1:a7:bf:83:02:cb:74:50:
ff:fa:23:70:bf:08:3b:a9:05:10:ff:ab:67:4d:99:41:e9:69:
fd:76:c3:ab:74:f7:e2:e9:cc:20:9d:41:0d:46:a9:b4:dd:4f:
62:cf:90:c8:ac:3b:56:9d:8a:36:34:a1:93:00:7b:a7:ec:f5:
a9:02:be:ca:bb:cd:da:13:48:45:e2:37:6e:c2:98:76:d4:da:
6d:9b:a6:cc:7c:4c:9f:3e:0d:5d:09:c5:d5:5d:e0:0b:99:e8:
84:d8:87:cb:80:61:af:cf:6d:c1:22:81:b0:3a:cf:b4:5c:47:
cb:20:d8:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:24:24 2025 by rpki-client