Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/3a45ed-b0b8-4a16-9eec-223f5220a7d3/1/t2EV0TpYato9nMXfmuA-W6tPTcA.mft
File: t2EV0TpYato9nMXfmuA-W6tPTcA.mft (raw, json)
Hash identifier: 7nLF4CT9ttjc1OO07lK02vpPUYxVg00N2rjIP6PU/C0=
Subject key identifier: 27:5C:7C:D8:76:80:13:2A:33:81:66:50:DB:5D:29:E3:6B:B9:90:A8
Authority key identifier: B7:61:15:D1:3A:58:6A:DA:3D:9C:C5:DF:9A:E0:3E:5B:AB:4F:4D:C0
Certificate issuer: /CN=b76115d13a586ada3d9cc5df9ae03e5bab4f4dc0
Certificate serial: 0197B7EA49B635315CFBC72139EA061E3174
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t2EV0TpYato9nMXfmuA-W6tPTcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/3a45ed-b0b8-4a16-9eec-223f5220a7d3/1/t2EV0TpYato9nMXfmuA-W6tPTcA.mft
Manifest number: 0EDF
Signing time: Sat 28 Jun 2025 19:01:14 +0000
Manifest this update: Sat 28 Jun 2025 19:01:14 +0000
Manifest next update: Sun 29 Jun 2025 19:01:14 +0000
Files and hashes: 1: qRT-_MhiSov-WJNuRCh-o1ABg_w.roa (hash: Sgwzeb8jM4K/wZC25rDRhN0A8vnEn9LK1zNCxvWZ1iA=)
2: t2EV0TpYato9nMXfmuA-W6tPTcA.crl (hash: o6OS5Ukd2ec+3aAtLnXvrjF6jZImgx4n/tRAPilImGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/3a45ed-b0b8-4a16-9eec-223f5220a7d3/1/t2EV0TpYato9nMXfmuA-W6tPTcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/3a45ed-b0b8-4a16-9eec-223f5220a7d3/1/t2EV0TpYato9nMXfmuA-W6tPTcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/t2EV0TpYato9nMXfmuA-W6tPTcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:49:b6:35:31:5c:fb:c7:21:39:ea:06:1e:31:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b76115d13a586ada3d9cc5df9ae03e5bab4f4dc0
Validity
Not Before: Jun 28 19:01:14 2025 GMT
Not After : Jun 29 19:01:14 2025 GMT
Subject: CN=275c7cd87680132a33816650db5d29e36bb990a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:21:21:bf:16:31:50:35:ae:ad:e6:da:ed:7f:
d4:30:01:7b:7b:06:aa:bd:7e:88:e4:8a:be:ba:8b:
0b:29:47:cc:3f:74:3a:56:eb:8c:d4:c7:47:34:d6:
82:8d:cd:a3:45:4a:32:f7:03:81:0a:14:88:c3:ef:
ed:f0:10:59:57:a7:ca:86:4f:f9:80:cb:83:22:ba:
a5:23:fe:b4:dd:07:f7:26:00:c6:15:e7:51:75:5c:
c8:f7:cc:02:3a:72:1d:99:2a:a2:9e:37:17:79:29:
9b:89:40:1c:d3:fa:a4:8f:3d:f6:fc:6d:63:fb:00:
45:bd:49:ee:ef:09:1d:4b:0e:bf:00:e8:51:b7:f2:
8f:81:ed:24:7f:cf:c9:82:b7:be:bc:47:a5:9e:07:
21:3a:9a:b3:f4:b0:7e:80:73:d2:46:25:a6:b1:19:
e5:74:9e:9d:24:20:b9:78:db:b7:a7:55:35:44:ee:
ff:34:9d:b0:0f:89:56:56:da:32:1b:05:63:59:1a:
a5:90:15:e3:d7:5e:b7:19:91:9a:b6:b0:36:a6:ce:
35:05:2b:90:c4:61:cb:14:9e:43:cd:0c:57:28:cf:
72:ba:9b:66:ac:36:ee:dc:9c:c4:9d:20:1d:f6:62:
b5:22:f8:07:f4:5f:6d:d5:1f:99:08:0f:86:98:1e:
6c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:5C:7C:D8:76:80:13:2A:33:81:66:50:DB:5D:29:E3:6B:B9:90:A8
X509v3 Authority Key Identifier:
keyid:B7:61:15:D1:3A:58:6A:DA:3D:9C:C5:DF:9A:E0:3E:5B:AB:4F:4D:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t2EV0TpYato9nMXfmuA-W6tPTcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/3a45ed-b0b8-4a16-9eec-223f5220a7d3/1/t2EV0TpYato9nMXfmuA-W6tPTcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/3a45ed-b0b8-4a16-9eec-223f5220a7d3/1/t2EV0TpYato9nMXfmuA-W6tPTcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:95:fe:67:d5:28:ec:f2:94:d7:22:f7:6b:90:69:0b:80:58:
f3:5a:8b:21:dd:8f:f3:b1:40:c4:b9:7d:f8:e2:da:a8:9f:91:
b0:10:e0:83:1e:d4:1f:90:a0:7c:98:2d:c9:19:0a:8a:17:c5:
73:1b:2d:4e:c8:c0:73:52:d8:d0:61:a6:a5:8d:66:42:fe:55:
e8:6a:b1:27:f8:c9:9f:12:0c:56:7c:0b:50:91:d0:e8:9a:ea:
64:95:a8:a2:dd:dc:50:0f:db:dc:e6:34:94:aa:ea:ef:9a:7c:
53:2b:a4:a7:cf:30:f5:8a:f4:7b:15:cd:cc:8f:0d:20:3e:7a:
81:8d:5b:6f:be:ed:be:2c:32:6f:03:9c:79:83:c2:df:f7:f7:
fa:c5:df:c1:6c:38:36:76:37:b4:2a:1e:9d:f4:86:69:a7:f3:
f6:2e:fb:89:3e:f1:24:ee:52:27:56:ab:6e:3f:70:0d:1c:2b:
f1:e7:ba:59:4d:48:ba:41:f1:ac:4e:40:9b:b9:60:bb:21:eb:
cb:a6:9e:d3:e1:40:f2:7f:2e:82:6c:f3:e2:bc:15:1f:70:f8:
5f:a9:6d:3d:a9:ae:80:8e:1d:0b:5a:5f:2b:2c:56:5a:63:6a:
3b:58:d2:9a:b9:23:0b:02:f6:0d:be:ca:b0:7f:06:0f:a3:d2:
8a:f3:95:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:06:05 2025 by rpki-client