Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/4652e8-5d20-42f6-a739-d54921604ecd/1/t0QwmQgmnlOLK0-pYzcMnsIHeng.mft
File: t0QwmQgmnlOLK0-pYzcMnsIHeng.mft (raw, json)
Hash identifier: NRwGzCJc65EkE0clrALCjVcRCI/MInsHCaZ7AXtEn6Y=
Subject key identifier: 76:75:83:6B:08:57:F3:31:82:A4:EA:84:65:49:59:14:37:28:C8:8A
Authority key identifier: B7:44:30:99:08:26:9E:53:8B:2B:4F:A9:63:37:0C:9E:C2:07:7A:78
Certificate issuer: /CN=b744309908269e538b2b4fa963370c9ec2077a78
Certificate serial: 0197B6D78195417A5332FD492C9AA8D870B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t0QwmQgmnlOLK0-pYzcMnsIHeng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/4652e8-5d20-42f6-a739-d54921604ecd/1/t0QwmQgmnlOLK0-pYzcMnsIHeng.mft
Manifest number: 1006
Signing time: Sat 28 Jun 2025 14:01:06 +0000
Manifest this update: Sat 28 Jun 2025 14:01:06 +0000
Manifest next update: Sun 29 Jun 2025 14:01:06 +0000
Files and hashes: 1: YBLZGJHJKH4DoV9XrJh7KrLAY0g.roa (hash: L0o/zjJZLOmk6cpaT73kurdvyrzNoMlbhiuzTQLNAKg=)
2: t0QwmQgmnlOLK0-pYzcMnsIHeng.crl (hash: NGitGUDaO3i1RJP+4X0GojZwuzmQLg8lR9zvDc6wg7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/4652e8-5d20-42f6-a739-d54921604ecd/1/t0QwmQgmnlOLK0-pYzcMnsIHeng.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/4652e8-5d20-42f6-a739-d54921604ecd/1/t0QwmQgmnlOLK0-pYzcMnsIHeng.mft
rsync://rpki.ripe.net/repository/DEFAULT/t0QwmQgmnlOLK0-pYzcMnsIHeng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:81:95:41:7a:53:32:fd:49:2c:9a:a8:d8:70:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b744309908269e538b2b4fa963370c9ec2077a78
Validity
Not Before: Jun 28 14:01:06 2025 GMT
Not After : Jun 29 14:01:06 2025 GMT
Subject: CN=7675836b0857f33182a4ea84654959143728c88a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:22:fc:3d:1c:6f:b7:82:e1:3a:73:28:22:f0:
7b:dc:6e:88:58:3d:8c:ca:36:8a:01:4b:bf:f1:5a:
4c:c0:23:b5:ad:f1:1b:3f:41:c4:dd:74:cd:59:d0:
21:41:72:a4:09:bd:a5:30:49:b6:bc:80:b0:e8:a7:
71:1e:e1:f4:dd:df:4d:f9:35:e6:2b:3d:a1:09:1c:
73:27:c4:16:9b:18:80:45:e1:c2:c7:0c:1e:a4:78:
2e:23:b2:c3:28:24:b4:09:b1:36:2e:b4:fa:f3:ab:
55:11:c2:9c:94:74:2d:bc:91:86:05:a0:bf:36:c7:
b5:10:39:c2:ab:56:cf:e6:98:6c:a5:8b:18:04:6d:
18:1f:a6:26:30:14:2c:a4:95:43:2e:53:c2:d6:19:
f1:02:d9:5d:8c:c4:2f:55:96:8d:97:55:30:9c:82:
70:b8:b5:68:df:6a:ee:a4:b3:2e:a3:03:7f:66:9d:
62:83:f2:4f:fc:de:39:1b:67:20:bf:a4:36:14:e2:
74:08:17:73:3e:6b:bd:98:0c:9c:41:f5:6c:5d:4c:
ec:e8:c4:b8:8e:0a:cd:bc:e6:e0:50:30:28:e3:f5:
cd:91:66:8e:9e:27:c6:c4:c0:da:de:36:17:d8:95:
be:21:97:c2:c1:f1:b9:21:86:ad:c3:6a:9e:8a:c8:
1a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:75:83:6B:08:57:F3:31:82:A4:EA:84:65:49:59:14:37:28:C8:8A
X509v3 Authority Key Identifier:
keyid:B7:44:30:99:08:26:9E:53:8B:2B:4F:A9:63:37:0C:9E:C2:07:7A:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t0QwmQgmnlOLK0-pYzcMnsIHeng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4652e8-5d20-42f6-a739-d54921604ecd/1/t0QwmQgmnlOLK0-pYzcMnsIHeng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4652e8-5d20-42f6-a739-d54921604ecd/1/t0QwmQgmnlOLK0-pYzcMnsIHeng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:26:ef:2d:fc:f5:02:fe:ae:52:6d:58:65:63:f8:be:9f:1e:
72:ea:c3:28:57:f9:25:37:c0:6a:e7:9c:25:e4:76:01:8d:dc:
c9:ca:bf:f1:5b:a8:fb:e3:dc:94:62:4f:5f:3b:6c:f9:60:5b:
c1:f3:76:5d:0c:ff:6c:80:98:bf:b7:30:2a:75:71:9c:9f:06:
df:6f:05:b8:5f:7c:b8:be:86:b5:22:f6:00:ee:1b:8d:3f:1c:
6e:bb:18:63:74:0c:76:4e:6e:aa:0f:36:74:1c:74:bb:09:93:
70:0d:d4:07:fd:f2:70:02:14:c6:a8:bf:d2:38:36:53:3b:cb:
25:ca:e5:d0:26:3e:7f:9b:3f:a1:8d:b2:3c:29:0f:83:37:b5:
8c:44:5f:1c:ed:4e:07:d7:68:4e:e2:6f:ab:9f:31:5e:30:45:
61:56:06:cb:06:61:a3:73:38:50:08:6d:54:78:cb:42:3e:86:
c8:20:35:7c:62:2b:af:3e:ad:47:54:7a:8e:0d:aa:bb:33:45:
46:88:8d:7e:a1:12:89:b3:ae:ff:70:4c:e8:69:83:de:4a:a1:
9b:80:dd:ad:fd:6c:4c:5c:97:e3:81:0a:24:20:ab:63:f3:ac:
82:d0:88:61:a1:5a:18:11:c5:ef:fa:e6:e4:d7:c4:e0:eb:ab:
bd:9b:8c:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:42:30 2025 by rpki-client