Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/afd6b9-6c4e-40e0-ae96-b4da20a757cf/1/t1RlKp6YkUWgWfeIg9U26SxDtT8.mft
File: t1RlKp6YkUWgWfeIg9U26SxDtT8.mft (raw, json)
Hash identifier: 73KAYEkliyjRbe6Z8fOysxkfGARz+zVCs6tddNWVb8g=
Subject key identifier: 46:07:44:58:25:A1:47:0D:01:76:B0:30:09:58:16:1B:74:BF:BF:B0
Authority key identifier: B7:54:65:2A:9E:98:91:45:A0:59:F7:88:83:D5:36:E9:2C:43:B5:3F
Certificate issuer: /CN=b754652a9e989145a059f78883d536e92c43b53f
Certificate serial: 0197C613B9F487D4B828D06E614D59D3E61B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t1RlKp6YkUWgWfeIg9U26SxDtT8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/afd6b9-6c4e-40e0-ae96-b4da20a757cf/1/t1RlKp6YkUWgWfeIg9U26SxDtT8.mft
Manifest number: 50
Signing time: Tue 01 Jul 2025 13:01:10 +0000
Manifest this update: Tue 01 Jul 2025 13:01:10 +0000
Manifest next update: Wed 02 Jul 2025 13:01:10 +0000
Files and hashes: 1: 5Dk0AIyQ8366dMD1Y4_Uei8F_xA.roa (hash: zRbpvOB6g3fcUQ2lDKrBbTaTLHRrCOPhGnLFNdn6z9I=)
2: t1RlKp6YkUWgWfeIg9U26SxDtT8.crl (hash: O2sM/eBT31UfJtnnD0aZTkQIQiQbzH6CAlI85Wx/DeA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/afd6b9-6c4e-40e0-ae96-b4da20a757cf/1/t1RlKp6YkUWgWfeIg9U26SxDtT8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/afd6b9-6c4e-40e0-ae96-b4da20a757cf/1/t1RlKp6YkUWgWfeIg9U26SxDtT8.mft
rsync://rpki.ripe.net/repository/DEFAULT/t1RlKp6YkUWgWfeIg9U26SxDtT8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c6:13:b9:f4:87:d4:b8:28:d0:6e:61:4d:59:d3:e6:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b754652a9e989145a059f78883d536e92c43b53f
Validity
Not Before: Jul 1 13:01:10 2025 GMT
Not After : Jul 2 13:01:10 2025 GMT
Subject: CN=4607445825a1470d0176b0300958161b74bfbfb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:bd:ce:e2:e0:a0:c6:75:56:82:d8:5d:de:ca:
03:6b:53:70:f0:9e:85:76:24:9f:67:eb:1c:28:fe:
40:27:31:77:d9:ee:05:55:63:5f:ad:eb:58:e7:2a:
b9:74:68:d0:9c:f4:82:31:02:6f:c9:01:fb:bb:54:
0d:82:41:1a:18:e9:d6:9a:fb:0a:a7:86:08:c4:4f:
65:eb:55:26:aa:3a:36:2c:b8:dc:dc:43:eb:aa:99:
c2:ec:08:43:41:27:d6:2a:fc:74:7e:1c:8f:26:42:
be:90:98:75:ac:2d:0e:16:68:63:11:39:13:c8:ce:
a6:f2:74:eb:16:de:2a:5d:3e:5e:3d:05:1c:89:8a:
5d:13:f7:93:e6:07:ca:95:d0:61:1b:d5:6b:8c:fe:
43:d4:0c:4b:e4:db:50:43:c8:d2:a1:e8:43:f8:5e:
ab:0e:64:8e:c4:d0:5f:cf:ca:b1:a2:af:fa:38:48:
a0:73:85:89:c3:ca:08:f6:3f:bb:39:5f:81:b7:93:
66:0f:0f:f8:4a:0a:0c:64:47:d4:58:c4:d3:ea:72:
64:b2:e4:5f:5f:08:70:b8:3f:13:b3:a0:c0:d1:b5:
7b:71:ac:98:53:0a:f5:a1:00:2f:aa:fd:67:0b:6e:
39:dd:4c:30:30:b0:08:d2:90:70:b9:1e:be:23:b3:
f5:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:07:44:58:25:A1:47:0D:01:76:B0:30:09:58:16:1B:74:BF:BF:B0
X509v3 Authority Key Identifier:
keyid:B7:54:65:2A:9E:98:91:45:A0:59:F7:88:83:D5:36:E9:2C:43:B5:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t1RlKp6YkUWgWfeIg9U26SxDtT8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/afd6b9-6c4e-40e0-ae96-b4da20a757cf/1/t1RlKp6YkUWgWfeIg9U26SxDtT8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/afd6b9-6c4e-40e0-ae96-b4da20a757cf/1/t1RlKp6YkUWgWfeIg9U26SxDtT8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:e0:df:0c:b5:b0:fb:3f:58:c0:b1:6b:9e:16:48:08:14:88:
e6:ca:50:29:16:40:85:a2:d0:72:e0:74:a3:3c:6e:31:38:ff:
c6:32:55:f8:89:68:78:a9:a3:05:46:0d:bd:1f:eb:61:e5:72:
62:04:c4:8b:d4:26:8c:6f:fa:84:7a:72:06:d1:a5:d2:25:92:
cb:9b:42:48:f6:e9:35:9e:30:66:d6:04:b8:da:5a:2d:82:37:
bb:b4:4d:12:e5:6f:84:58:ef:44:b9:0a:cc:a5:49:8f:e6:29:
41:e0:05:5e:a5:aa:98:78:45:fd:65:97:49:6f:a1:da:70:84:
ed:3f:fb:da:63:35:32:f6:06:13:bd:25:bf:11:b5:7a:4a:0f:
97:51:c0:2b:5f:d0:34:15:a1:92:7a:ca:7c:49:06:83:c0:b8:
cd:4d:0a:fe:72:46:20:43:2f:ce:7e:c3:df:b3:8c:8e:54:9a:
b0:a1:84:9f:b5:02:19:65:6e:ca:80:1c:43:4a:8a:ec:e5:06:
80:a8:99:51:8c:80:ce:89:80:ba:a9:33:55:96:a5:b4:bf:e2:
62:60:30:f6:02:6c:15:9c:b7:07:9c:d1:79:f9:a8:4f:ae:7a:
7c:a8:6b:df:df:e7:5f:58:49:a5:33:1f:eb:91:88:c0:5f:02:
86:48:b4:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 16:26:22 2025 by rpki-client