Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/359179-4ac2-431c-9531-0b7a33dd5b56/1/tFBkwayGkOLHepWaUCVG6YvNNyc.mft
File: tFBkwayGkOLHepWaUCVG6YvNNyc.mft (raw, json)
Hash identifier: IfMJKC77qc2+HMQH6MFXRYQyPJtNi9ErMi0jou10uJs=
Subject key identifier: 24:5D:02:B0:C4:F1:F2:40:96:EA:05:61:DF:27:A3:C5:FA:34:D9:FC
Authority key identifier: B4:50:64:C1:AC:86:90:E2:C7:7A:95:9A:50:25:46:E9:8B:CD:37:27
Certificate issuer: /CN=b45064c1ac8690e2c77a959a502546e98bcd3727
Certificate serial: 0197B6A18DAEA81515C3A90170ED8AE6AE59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFBkwayGkOLHepWaUCVG6YvNNyc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/359179-4ac2-431c-9531-0b7a33dd5b56/1/tFBkwayGkOLHepWaUCVG6YvNNyc.mft
Manifest number: 0C35
Signing time: Sat 28 Jun 2025 13:02:10 +0000
Manifest this update: Sat 28 Jun 2025 13:02:10 +0000
Manifest next update: Sun 29 Jun 2025 13:02:10 +0000
Files and hashes: 1: _INaZ6DycFqZuVm42lkSOfz9oRs.roa (hash: N1fFaEC6dFW7nNDOY6nEbXrF6dJ7s2tSPU9xB9zA38k=)
2: tFBkwayGkOLHepWaUCVG6YvNNyc.crl (hash: mxcSfi9U2kWnqrsLYgDoqpRMjiN8rcTIdsi6ruQPrEs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/359179-4ac2-431c-9531-0b7a33dd5b56/1/tFBkwayGkOLHepWaUCVG6YvNNyc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/359179-4ac2-431c-9531-0b7a33dd5b56/1/tFBkwayGkOLHepWaUCVG6YvNNyc.mft
rsync://rpki.ripe.net/repository/DEFAULT/tFBkwayGkOLHepWaUCVG6YvNNyc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:8d:ae:a8:15:15:c3:a9:01:70:ed:8a:e6:ae:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b45064c1ac8690e2c77a959a502546e98bcd3727
Validity
Not Before: Jun 28 13:02:10 2025 GMT
Not After : Jun 29 13:02:10 2025 GMT
Subject: CN=245d02b0c4f1f24096ea0561df27a3c5fa34d9fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6f:1e:1e:65:db:cc:5b:12:db:00:e0:db:ed:
eb:81:ae:e5:76:e2:14:ef:63:c5:4c:22:31:c5:c7:
ec:aa:00:a6:bb:1c:2f:97:69:ab:7b:22:b3:cb:7b:
d9:86:e2:ca:c1:ef:3f:9b:5b:3b:fc:60:06:fb:29:
2d:f3:fd:69:72:7e:03:10:fd:51:15:85:b8:fe:20:
36:e1:c9:90:7e:86:c6:49:e3:38:68:32:a5:17:80:
92:2c:78:b6:be:70:24:3b:7c:ca:0b:f9:41:71:8f:
f2:78:27:89:f4:3d:37:56:0f:bc:db:cb:92:55:8b:
4c:3f:12:80:3f:17:db:8c:0f:b6:45:d1:e9:21:fe:
24:f4:76:e6:d9:dd:58:1c:89:1c:69:ea:3e:48:74:
38:ae:21:7b:af:4f:4e:53:3e:93:c0:f2:7b:e9:ec:
60:7d:c4:c3:8d:33:30:60:fb:fb:15:6b:b4:d2:75:
66:d6:0b:14:ec:1f:c3:b6:29:ce:3d:d3:db:7d:e4:
ee:58:41:71:2f:b5:06:e7:48:11:09:ae:df:ef:ee:
fe:ed:af:6d:d3:36:60:eb:2d:74:cd:eb:ac:ac:ba:
73:cb:6b:62:d9:49:ba:b4:be:3a:ed:16:ca:f6:52:
9a:54:d5:e9:fc:37:bc:b1:ae:b0:c2:6e:4f:ad:08:
46:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:5D:02:B0:C4:F1:F2:40:96:EA:05:61:DF:27:A3:C5:FA:34:D9:FC
X509v3 Authority Key Identifier:
keyid:B4:50:64:C1:AC:86:90:E2:C7:7A:95:9A:50:25:46:E9:8B:CD:37:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFBkwayGkOLHepWaUCVG6YvNNyc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/359179-4ac2-431c-9531-0b7a33dd5b56/1/tFBkwayGkOLHepWaUCVG6YvNNyc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/359179-4ac2-431c-9531-0b7a33dd5b56/1/tFBkwayGkOLHepWaUCVG6YvNNyc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:ff:5b:20:ac:1f:ad:73:c1:4b:21:9b:8b:57:12:6a:75:0e:
fa:66:4b:ab:ef:45:0d:ba:2a:e3:82:ee:a0:b7:79:0d:fc:fd:
96:f8:aa:75:cf:50:bd:ac:10:50:a4:2c:4a:9a:c9:ea:21:68:
39:38:86:32:75:d5:ae:58:f2:8b:e0:5f:25:72:e9:3e:ed:e1:
9c:e9:89:f5:0e:7f:ca:03:2c:b6:4b:6b:35:e7:7c:2d:7e:38:
65:72:79:95:18:f5:91:c3:31:f2:16:0c:5f:1b:1f:88:00:e0:
c2:e8:7d:b9:bc:ce:1a:e4:c0:68:1d:12:6c:49:cf:da:5e:e7:
91:23:ff:03:77:a6:bd:3c:3b:cc:ac:8b:6b:e8:45:a3:64:87:
10:54:3c:36:08:69:1e:eb:f5:11:37:ec:5a:5e:d0:97:38:94:
3d:4f:c5:07:8f:26:f7:ff:fe:b7:e6:2b:5d:a2:77:21:e3:ed:
2d:02:d7:28:67:60:34:8c:d9:ca:e8:3a:95:27:a2:3e:7e:f8:
b6:56:5a:55:e2:a0:07:80:74:33:2a:e4:cd:5c:71:5e:af:01:
a4:c8:34:d2:f6:89:f8:0f:7b:26:99:33:4b:45:e0:26:d5:7e:
0c:50:8b:7b:60:f8:96:24:4f:a8:54:2f:d3:2c:54:0e:5a:3e:
52:81:c4:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:11:04 2025 by rpki-client