Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/d2bb68-9bc7-4791-8528-0c495477ca10/1/tUJ-pJ-XLRnFY5OmiefL65kNXXo.mft
File: tUJ-pJ-XLRnFY5OmiefL65kNXXo.mft (raw, json)
Hash identifier: v5PfQjuGJNjwrzD4k0dQXWVBVdGfIwDkASCKHgW+Ez4=
Subject key identifier: 89:98:7F:42:42:A8:F9:11:BB:F0:FE:47:04:3E:35:6F:07:8B:FB:D1
Authority key identifier: B5:42:7E:A4:9F:97:2D:19:C5:63:93:A6:89:E7:CB:EB:99:0D:5D:7A
Certificate issuer: /CN=b5427ea49f972d19c56393a689e7cbeb990d5d7a
Certificate serial: 0197B82119E4EE0E9ECDB2F92DE493BDF974
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tUJ-pJ-XLRnFY5OmiefL65kNXXo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/d2bb68-9bc7-4791-8528-0c495477ca10/1/tUJ-pJ-XLRnFY5OmiefL65kNXXo.mft
Manifest number: 15BA
Signing time: Sat 28 Jun 2025 20:01:06 +0000
Manifest this update: Sat 28 Jun 2025 20:01:06 +0000
Manifest next update: Sun 29 Jun 2025 20:01:06 +0000
Files and hashes: 1: AwMEJfGD-_TNRZ72c5x-9dIRsd4.roa (hash: 6UVDM1JqxHmjbnJ4pDDIOsD2r8EQyy1bF6KNp9ocKGg=)
2: VJtvXDXYtAcS9C4LIbmlaqXh4Co.roa (hash: THcKGdc9aA5a+OjJYNnV65xxowh1d3kb8KQrHqiCPq4=)
3: fUXrv6-AqG-Sdl9xICl4cQAU7yA.roa (hash: jv2v4x0octz1D9witRg3iiWbwIrgi4wxjje3xLewI+U=)
4: tUJ-pJ-XLRnFY5OmiefL65kNXXo.crl (hash: kE7bMWxx/7WokvrBdtzu8JKzmWJs5sm6wPV4EtiN4d8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/d2bb68-9bc7-4791-8528-0c495477ca10/1/tUJ-pJ-XLRnFY5OmiefL65kNXXo.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/d2bb68-9bc7-4791-8528-0c495477ca10/1/tUJ-pJ-XLRnFY5OmiefL65kNXXo.mft
rsync://rpki.ripe.net/repository/DEFAULT/tUJ-pJ-XLRnFY5OmiefL65kNXXo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:19:e4:ee:0e:9e:cd:b2:f9:2d:e4:93:bd:f9:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5427ea49f972d19c56393a689e7cbeb990d5d7a
Validity
Not Before: Jun 28 20:01:06 2025 GMT
Not After : Jun 29 20:01:06 2025 GMT
Subject: CN=89987f4242a8f911bbf0fe47043e356f078bfbd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:64:0a:2c:d6:da:63:64:62:f8:dd:ab:98:a0:
9c:fb:48:15:09:66:ab:d6:38:ba:9d:3c:91:82:f8:
12:98:b1:60:a6:92:11:00:15:43:f1:2e:ee:68:05:
52:2c:93:45:24:12:43:80:e7:37:5c:03:07:64:cc:
49:0c:66:5c:28:82:9f:6c:30:2f:9c:c6:53:e4:4f:
25:20:5c:8c:79:60:21:26:15:7e:a5:c4:1e:7f:9d:
3e:71:0e:7a:bd:64:43:28:cd:4b:5b:21:f1:47:53:
f5:9f:44:80:45:a9:87:25:3f:ce:64:39:c3:15:a7:
ee:53:d5:1e:62:cb:78:da:7a:c5:31:69:b4:7e:53:
0e:cf:a0:2c:47:6c:cd:9b:39:93:b4:4a:9c:93:2a:
be:52:ec:cb:5f:8a:54:ad:9f:5b:f4:5f:3a:8a:1f:
ce:b4:b5:17:c2:3b:43:79:ec:d0:22:ee:8f:72:7a:
5e:1a:51:04:77:86:7c:67:40:b3:5b:59:84:06:2e:
45:aa:d5:ee:8b:9f:77:a3:4d:a7:35:b8:a4:81:d0:
78:af:be:8b:e4:cd:3f:44:b5:46:5d:d3:4a:f5:03:
eb:ce:3e:7c:42:a9:5f:0f:94:cf:10:92:a5:91:dd:
4c:23:8d:7d:e0:80:40:d6:17:96:05:0c:84:3f:6e:
cf:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:98:7F:42:42:A8:F9:11:BB:F0:FE:47:04:3E:35:6F:07:8B:FB:D1
X509v3 Authority Key Identifier:
keyid:B5:42:7E:A4:9F:97:2D:19:C5:63:93:A6:89:E7:CB:EB:99:0D:5D:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tUJ-pJ-XLRnFY5OmiefL65kNXXo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/d2bb68-9bc7-4791-8528-0c495477ca10/1/tUJ-pJ-XLRnFY5OmiefL65kNXXo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/d2bb68-9bc7-4791-8528-0c495477ca10/1/tUJ-pJ-XLRnFY5OmiefL65kNXXo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:37:0b:a4:2f:6b:0e:80:5a:7f:28:86:2c:98:6a:d5:2f:0d:
4c:0e:61:9c:73:b1:cc:9b:8f:5c:c9:18:a0:27:68:c9:e8:69:
28:f0:86:d2:67:60:5c:9c:31:19:ff:13:a1:ac:d8:0c:1f:6f:
6d:15:2e:4d:41:73:38:0f:66:1b:ce:46:39:2a:3b:e8:96:f3:
5f:5f:1e:04:29:9f:f9:a8:60:45:50:95:a3:91:12:cb:c8:1b:
d9:a0:56:02:1b:45:e9:ac:e6:46:a3:84:b8:6b:aa:8a:3c:fc:
fb:17:ac:fb:3a:9c:be:ed:cd:c0:4e:ca:d4:b4:2e:30:19:58:
59:9a:d6:8d:80:2d:b1:ac:67:54:28:99:38:51:e3:fb:12:dd:
83:1d:13:55:77:9f:eb:92:4a:09:87:79:27:52:36:b3:6d:ef:
04:02:ba:b5:0e:52:88:6d:36:42:53:04:dc:dc:08:7f:96:01:
13:08:8d:ef:f5:ed:10:f7:db:fc:96:bf:d8:1e:d9:e4:36:f4:
52:9f:68:fa:2b:44:2a:22:eb:49:32:81:eb:ce:6f:7d:2c:45:
02:7b:72:b7:ef:10:d0:a0:66:5c:1c:8a:d2:db:e1:30:19:c0:
47:be:21:8a:7c:d4:54:89:6a:1d:c7:f2:59:88:f8:7f:05:dc:
74:69:e8:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:14:42 2025 by rpki-client