Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/e2510d-e573-45d3-9d20-754b60c5b568/1/tTuhjVzrjnlMgTnOAqeRuFAYJe8.mft
File: tTuhjVzrjnlMgTnOAqeRuFAYJe8.mft (raw, json)
Hash identifier: II/6chmbHgCzLTJCbms5LtVJkkFqp8b5pFkRPnu6n48=
Subject key identifier: C8:07:4D:5D:6F:86:F5:43:E4:68:03:9B:5A:7B:90:5E:0A:0A:CF:2A
Authority key identifier: B5:3B:A1:8D:5C:EB:8E:79:4C:81:39:CE:02:A7:91:B8:50:18:25:EF
Certificate issuer: /CN=b53ba18d5ceb8e794c8139ce02a791b8501825ef
Certificate serial: 0197C870845063330A93B2ED97F7FD005F52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tTuhjVzrjnlMgTnOAqeRuFAYJe8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/e2510d-e573-45d3-9d20-754b60c5b568/1/tTuhjVzrjnlMgTnOAqeRuFAYJe8.mft
Manifest number: 0CE5
Signing time: Wed 02 Jul 2025 00:01:46 +0000
Manifest this update: Wed 02 Jul 2025 00:01:46 +0000
Manifest next update: Thu 03 Jul 2025 00:01:46 +0000
Files and hashes: 1: 9FStBrS0NlZ9f0JDPC2m90a8BCY.roa (hash: xw+KW2Ni2Cd+C3tg5Q5Vf8DrtdT917ZQWwgX4LJaEm4=)
2: NcymNU3Ex55jeE07rsjVQP17Yc4.roa (hash: rqRVyPcE0vuZ2ea448N6H2EJDC40DdbDXkISgXkK53E=)
3: XUHwJb1I3gkKMlf7v2dTxFe6360.roa (hash: Gm/rvLP3jZuTC48xJtdoJ5/c1V7BDKST3JSzW3p7S08=)
4: tTuhjVzrjnlMgTnOAqeRuFAYJe8.crl (hash: +7ZkB3Aj8TokiVN49VjX9NsIwH1L2CHTqJ4rPANyMqg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/e2510d-e573-45d3-9d20-754b60c5b568/1/tTuhjVzrjnlMgTnOAqeRuFAYJe8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/e2510d-e573-45d3-9d20-754b60c5b568/1/tTuhjVzrjnlMgTnOAqeRuFAYJe8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tTuhjVzrjnlMgTnOAqeRuFAYJe8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 00:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c8:70:84:50:63:33:0a:93:b2:ed:97:f7:fd:00:5f:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b53ba18d5ceb8e794c8139ce02a791b8501825ef
Validity
Not Before: Jul 2 00:01:46 2025 GMT
Not After : Jul 3 00:01:46 2025 GMT
Subject: CN=c8074d5d6f86f543e468039b5a7b905e0a0acf2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:97:73:13:e8:d2:47:40:58:dc:f6:6d:cc:b1:
71:15:c1:3d:08:c3:64:ac:84:b3:43:96:1e:cb:85:
a0:d9:55:ca:38:51:0b:80:2c:8d:17:77:80:7c:d5:
38:f5:d3:d2:0e:f4:43:ed:8c:78:f5:71:a4:f9:5d:
ea:d4:27:04:db:de:6e:2f:c7:fc:ba:e3:7f:b8:72:
0e:b7:a9:e4:ae:85:de:11:3a:2d:7e:1c:1a:57:95:
ab:67:06:a9:13:83:21:da:21:ca:34:1b:ed:56:12:
8c:d6:5a:a0:c1:b1:1e:f3:ed:ee:40:bd:ca:ce:48:
e1:c4:71:68:36:39:56:1d:06:16:c9:84:14:04:50:
f2:0f:81:01:05:be:fc:db:a7:49:cf:ec:69:aa:bb:
27:61:8f:06:23:b4:09:2e:bc:1a:e3:10:ea:03:27:
ea:bb:7e:ff:8f:12:a6:3a:7d:e6:6b:f8:43:48:a7:
db:6a:a8:b1:26:26:c7:e7:53:c4:d1:ad:ec:61:bb:
c0:00:2b:e4:c6:13:13:48:a3:43:ad:5c:ac:f1:29:
35:da:ba:48:df:ff:3c:f0:11:f6:db:19:94:84:22:
ca:b5:4d:35:85:09:fa:4e:15:65:50:99:de:3e:a7:
84:31:13:c1:d1:0e:b1:1f:23:b8:86:e5:7e:a4:e0:
57:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:07:4D:5D:6F:86:F5:43:E4:68:03:9B:5A:7B:90:5E:0A:0A:CF:2A
X509v3 Authority Key Identifier:
keyid:B5:3B:A1:8D:5C:EB:8E:79:4C:81:39:CE:02:A7:91:B8:50:18:25:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tTuhjVzrjnlMgTnOAqeRuFAYJe8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/e2510d-e573-45d3-9d20-754b60c5b568/1/tTuhjVzrjnlMgTnOAqeRuFAYJe8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/e2510d-e573-45d3-9d20-754b60c5b568/1/tTuhjVzrjnlMgTnOAqeRuFAYJe8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:55:0e:37:2c:19:91:6b:55:4f:1c:4c:d1:39:a0:52:b4:db:
90:1f:6c:b9:5a:fe:56:95:dd:99:41:47:6b:5d:ea:24:fc:99:
00:2d:57:92:f0:a8:d6:54:f4:ea:80:55:e4:fe:99:26:ef:23:
5e:e7:43:0a:de:e6:ad:47:05:10:2f:f4:0e:e8:7d:44:37:99:
fa:59:da:7d:8c:de:e3:5e:5e:4c:df:12:d3:82:14:0d:64:a2:
c8:5d:31:06:84:99:74:82:89:fe:ea:be:1a:c7:55:e9:bc:8e:
57:eb:e2:99:84:89:f0:9c:34:e4:19:ee:63:8d:3a:04:5f:17:
ec:5e:9a:2e:d9:22:19:17:ab:d4:83:86:ed:a6:be:fc:a0:c4:
d4:38:83:ba:af:35:d8:00:9c:d4:8d:6a:26:e9:a8:85:86:24:
74:14:1d:07:40:17:05:91:77:97:e5:e9:84:1f:08:6d:cd:99:
65:ca:f4:58:d6:76:56:7b:80:34:59:ba:e0:65:39:fa:ef:a9:
cb:4c:8a:13:bb:91:7e:35:20:e6:9a:6e:31:1a:d9:80:67:35:
56:80:c2:7a:4d:ed:33:87:b4:2a:1b:67:30:04:ff:f7:f2:32:
d6:83:e0:93:ba:64:cd:26:c7:05:bd:aa:6e:f9:24:df:e7:ba:
aa:e5:fb:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 06:12:05 2025 by rpki-client