Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/1d0171-3307-4531-a73a-146a69b6d8e4/1/taJj0Y61xUD3R4glu3LvrG8o-Cs.mft
File: taJj0Y61xUD3R4glu3LvrG8o-Cs.mft (raw, json)
Hash identifier: 5NVE449XnG4Z5+YCPn59k6WvAqGUDxNGXLfRzOUBy9c=
Subject key identifier: 65:91:B0:12:DB:1A:0F:C0:B2:71:C7:B6:32:1B:46:11:8C:AA:6D:98
Authority key identifier: B5:A2:63:D1:8E:B5:C5:40:F7:47:88:25:BB:72:EF:AC:6F:28:F8:2B
Certificate issuer: /CN=b5a263d18eb5c540f7478825bb72efac6f28f82b
Certificate serial: 0198D705E698B799B0B74BD701DFA33103ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/taJj0Y61xUD3R4glu3LvrG8o-Cs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/1d0171-3307-4531-a73a-146a69b6d8e4/1/taJj0Y61xUD3R4glu3LvrG8o-Cs.mft
Manifest number: 15DB
Signing time: Sat 23 Aug 2025 13:02:24 +0000
Manifest this update: Sat 23 Aug 2025 13:02:24 +0000
Manifest next update: Sun 24 Aug 2025 13:02:24 +0000
Files and hashes: 1: FxOU5mcs5zu6It7tyYPtggiNpMw.roa (hash: HYzosP3W6gjE2lC2/EeCUTPjqHpatsBGbz79rZD00GQ=)
2: taJj0Y61xUD3R4glu3LvrG8o-Cs.crl (hash: 4yDsycaQZH/768lD72MVLVGeg0Ce83zuQg+8NggZdzE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/1d0171-3307-4531-a73a-146a69b6d8e4/1/taJj0Y61xUD3R4glu3LvrG8o-Cs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/1d0171-3307-4531-a73a-146a69b6d8e4/1/taJj0Y61xUD3R4glu3LvrG8o-Cs.mft
rsync://rpki.ripe.net/repository/DEFAULT/taJj0Y61xUD3R4glu3LvrG8o-Cs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:e6:98:b7:99:b0:b7:4b:d7:01:df:a3:31:03:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5a263d18eb5c540f7478825bb72efac6f28f82b
Validity
Not Before: Aug 23 13:02:24 2025 GMT
Not After : Aug 24 13:02:24 2025 GMT
Subject: CN=6591b012db1a0fc0b271c7b6321b46118caa6d98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d2:5c:1d:ed:d0:5e:4a:96:32:f9:89:ec:e4:
e8:59:b4:c3:39:db:9e:0b:3a:b7:52:8a:23:0d:0c:
40:16:7e:1f:4d:a6:91:17:b9:25:5a:64:e6:6b:29:
9c:50:ef:9c:d5:21:1f:ea:e3:9a:b3:50:d5:30:9b:
6f:37:0b:4e:5c:39:5e:92:61:f1:af:82:70:48:89:
24:a3:61:b7:7d:d5:16:af:a6:ce:a8:4d:80:be:1c:
cb:67:5e:d5:3f:44:12:a0:73:e6:3f:10:62:f9:fb:
91:75:f2:77:3f:07:6c:54:bb:3a:48:fe:a0:27:8d:
0e:67:45:a4:a8:29:eb:fe:47:2a:17:a2:bd:bd:c5:
03:41:b6:8f:dd:30:97:cc:38:0a:81:a3:32:5c:84:
e4:4b:f7:69:ab:85:29:ff:06:f0:1b:bb:e5:0e:31:
ec:4e:5a:9b:24:a1:d8:12:7e:13:20:4f:64:85:ed:
1c:9c:a2:30:23:29:3c:b2:57:6e:7f:a2:60:9f:80:
bb:94:c7:73:28:31:5e:cb:eb:2a:85:68:b1:8d:ab:
f8:7c:2e:8d:4e:a5:93:30:0e:99:4c:21:94:52:ea:
78:70:a1:09:17:f8:88:dd:a8:55:e0:d3:4c:db:eb:
7b:e1:b1:12:22:77:d0:4b:59:47:db:4b:dd:81:0b:
06:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:91:B0:12:DB:1A:0F:C0:B2:71:C7:B6:32:1B:46:11:8C:AA:6D:98
X509v3 Authority Key Identifier:
keyid:B5:A2:63:D1:8E:B5:C5:40:F7:47:88:25:BB:72:EF:AC:6F:28:F8:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/taJj0Y61xUD3R4glu3LvrG8o-Cs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1d0171-3307-4531-a73a-146a69b6d8e4/1/taJj0Y61xUD3R4glu3LvrG8o-Cs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1d0171-3307-4531-a73a-146a69b6d8e4/1/taJj0Y61xUD3R4glu3LvrG8o-Cs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:72:56:2d:70:5b:da:47:22:e4:26:f5:04:df:67:8e:45:fe:
8e:6c:67:cd:93:f1:bd:1b:92:51:4c:30:af:37:1f:a0:30:c9:
7e:b0:ed:78:9c:87:64:f0:48:2e:73:84:69:f7:3d:09:18:7a:
ea:fe:c1:f2:e9:4f:c2:cf:45:c8:39:70:b9:64:5a:0c:e7:96:
b2:00:9a:16:f5:79:7e:a6:44:9c:29:a6:83:04:78:7e:fd:3f:
98:01:a3:d5:cc:1d:f1:71:83:80:b8:75:47:3c:50:3e:e8:db:
83:f8:4d:ed:3c:e2:2f:2f:e9:a5:fd:90:37:ec:d7:57:17:5b:
0b:02:88:5d:06:4c:a4:c2:9c:bf:1c:5a:c5:58:9c:58:95:ba:
e6:1d:f2:f2:65:d1:c7:10:40:62:39:d0:ce:14:f4:95:1e:ea:
b4:8c:61:6c:a7:72:e6:0f:f4:10:f4:10:d7:3f:05:cb:f3:7a:
9b:02:70:19:7a:f2:a5:6f:85:ac:49:05:ad:82:eb:c5:9a:6e:
2f:68:9b:fe:33:e2:ad:f7:99:a5:02:af:32:2d:26:36:9e:ce:
45:29:fc:b3:97:21:9e:c4:9e:65:33:b0:5f:e4:1c:ec:0e:aa:
71:c3:89:b3:0b:94:b9:57:be:ff:c8:fa:73:e0:fc:5c:7a:73:
bb:b6:37:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:48:30 2025 by rpki-client