Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/f75596-7790-432c-88cd-333e53cfa021/1/tE-FORdNAL-ov95JBD9IXDpYdSU.mft
File: tE-FORdNAL-ov95JBD9IXDpYdSU.mft (raw, json)
Hash identifier: GHIH/qa8+rl3Zs4HrPxLs9xs1J7HCk7HcHZU2Cwat8U=
Subject key identifier: 51:4E:86:9E:D2:52:F9:72:09:A4:F1:A7:1F:97:C1:57:5F:96:51:18
Authority key identifier: B4:4F:85:39:17:4D:00:BF:A8:BF:DE:49:04:3F:48:5C:3A:58:75:25
Certificate issuer: /CN=b44f8539174d00bfa8bfde49043f485c3a587525
Certificate serial: 0197B6A06CFF73BE5D56775E4AAC6CACA954
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tE-FORdNAL-ov95JBD9IXDpYdSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/f75596-7790-432c-88cd-333e53cfa021/1/tE-FORdNAL-ov95JBD9IXDpYdSU.mft
Manifest number: 15B3
Signing time: Sat 28 Jun 2025 13:00:56 +0000
Manifest this update: Sat 28 Jun 2025 13:00:56 +0000
Manifest next update: Sun 29 Jun 2025 13:00:56 +0000
Files and hashes: 1: tE-FORdNAL-ov95JBD9IXDpYdSU.crl (hash: vTdNoX6f0zgRW9OvRPx24pYTpcNzgklvs3ifwaFu/dQ=)
2: xUV-1OBQ9tZ_Xv0-wwfyT7s6w0s.roa (hash: kyqwYkE6bzY0EYwjT0bnHVarYHy1IZctjgwIpdkE7zI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/f75596-7790-432c-88cd-333e53cfa021/1/tE-FORdNAL-ov95JBD9IXDpYdSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/f75596-7790-432c-88cd-333e53cfa021/1/tE-FORdNAL-ov95JBD9IXDpYdSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tE-FORdNAL-ov95JBD9IXDpYdSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:6c:ff:73:be:5d:56:77:5e:4a:ac:6c:ac:a9:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b44f8539174d00bfa8bfde49043f485c3a587525
Validity
Not Before: Jun 28 13:00:56 2025 GMT
Not After : Jun 29 13:00:56 2025 GMT
Subject: CN=514e869ed252f97209a4f1a71f97c1575f965118
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:7d:00:73:8d:c7:44:b4:05:f5:40:d7:68:94:
79:19:cb:a0:e3:bd:66:9e:31:85:f9:ba:05:e0:e1:
5f:76:20:ab:6f:5d:71:a7:42:74:b5:d1:9f:ec:ec:
b2:ba:02:3c:a9:df:3c:de:a3:7c:c3:f1:13:e4:df:
1d:1e:c2:f2:9d:9e:f6:b3:ca:56:f0:a9:78:ea:e5:
3e:72:5f:8b:06:98:11:d3:30:08:a1:33:1f:54:d6:
bd:50:0f:6a:8a:88:cf:32:5f:ea:ea:a6:3e:90:0d:
f2:04:36:7d:87:e3:0f:da:a2:a0:a8:c2:e0:0b:e0:
4e:32:d9:8e:2b:16:58:8c:a5:1b:73:1f:57:80:a4:
c2:65:19:89:ee:54:3f:33:c7:11:1e:52:c6:8c:56:
33:92:b7:cf:45:a4:f8:c7:ce:29:9a:51:60:09:77:
bc:23:24:9d:30:7c:25:71:52:cc:d4:13:5d:f3:74:
84:2f:fd:94:14:a4:13:6c:53:85:9f:9c:8d:dc:68:
3c:11:35:a4:cc:aa:f3:8f:a5:5e:e3:2e:5b:ea:e5:
2e:e0:85:65:b5:5f:f4:35:9e:ec:14:dc:45:25:63:
93:c2:38:58:33:f9:b3:8f:d0:67:85:3c:38:04:ee:
68:27:b9:ac:21:2c:52:6f:90:84:1e:0a:ef:5c:3d:
34:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:4E:86:9E:D2:52:F9:72:09:A4:F1:A7:1F:97:C1:57:5F:96:51:18
X509v3 Authority Key Identifier:
keyid:B4:4F:85:39:17:4D:00:BF:A8:BF:DE:49:04:3F:48:5C:3A:58:75:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tE-FORdNAL-ov95JBD9IXDpYdSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f75596-7790-432c-88cd-333e53cfa021/1/tE-FORdNAL-ov95JBD9IXDpYdSU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f75596-7790-432c-88cd-333e53cfa021/1/tE-FORdNAL-ov95JBD9IXDpYdSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:cf:03:b3:cb:80:08:7f:28:37:cf:93:45:f3:a2:9d:09:3b:
8a:9d:4f:94:51:1b:99:ea:9b:4a:f2:69:f7:21:69:2d:1a:0e:
1d:45:f7:7a:3e:9e:e5:ff:ef:79:0b:cb:28:f3:da:32:ef:6c:
75:d6:64:8a:4a:0a:82:27:be:6a:b7:10:36:15:2e:20:3a:9e:
35:41:9f:09:c4:7c:c9:00:d7:33:af:c9:49:de:c6:44:a2:ec:
4f:7c:49:93:56:01:77:29:eb:e7:4d:c8:f6:36:07:cf:7b:89:
6d:43:fd:37:73:37:15:52:86:c5:de:6b:bc:52:c1:e6:81:a4:
79:b6:f4:22:c8:0b:bd:1d:80:1e:f7:21:32:0b:3e:f2:ef:e0:
f1:97:55:52:50:c6:57:1d:9d:00:bf:90:07:d6:ae:0c:48:99:
1c:13:b3:bb:39:5d:ca:45:03:25:c3:21:bd:c0:06:73:d7:69:
31:ba:08:03:fb:79:f6:b7:45:85:09:0d:bd:c2:d6:28:d2:5e:
1a:07:84:f9:25:f9:65:b9:97:e7:06:56:ab:fe:70:b7:15:90:
a5:d0:27:63:e3:c4:5a:c5:d4:19:b4:f8:14:33:5c:cf:25:0d:
03:32:9e:8f:51:be:3d:fe:b9:63:78:20:c9:66:80:00:d2:85:
82:7a:82:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:00:11 2025 by rpki-client