Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/9a4cce-fd12-4707-be95-0a246ab05946/1/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.mft
File: tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.mft (raw, json)
Hash identifier: dLKLpe05jnqHf30qXzLQgFC0MnjpTontGnLSFoMHlXE=
Subject key identifier: 87:54:24:4C:74:FB:16:08:7A:76:3D:3A:33:45:5A:8C:DD:74:08:E3
Authority key identifier: B5:22:78:75:99:F1:79:8E:24:5F:99:3F:8C:B8:18:2F:99:CF:D1:04
Certificate issuer: /CN=b522787599f1798e245f993f8cb8182f99cfd104
Certificate serial: 0197B6D72F66BB43E2BF58551BD74A4CD8CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/9a4cce-fd12-4707-be95-0a246ab05946/1/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.mft
Manifest number: 0D32
Signing time: Sat 28 Jun 2025 14:00:45 +0000
Manifest this update: Sat 28 Jun 2025 14:00:45 +0000
Manifest next update: Sun 29 Jun 2025 14:00:45 +0000
Files and hashes: 1: 2o-thtsUmdvMYHtv9qjNUTl4ar8.roa (hash: lFf88qPAFyfJ0i5OxU8GOvf0pF7V0Wi7poD5MDkBh2U=)
2: tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.crl (hash: OCz+/+ORX/tk1bUdCDYODZ98OyUkwGpW5VzgjeOEF+E=)
3: xzr06xbQWPKGyePi4W8ezv0xyXU.roa (hash: r6Ttugun2Irp6PGhhAikFJmsuU2fRdTtE284A/50Ue4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/9a4cce-fd12-4707-be95-0a246ab05946/1/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/9a4cce-fd12-4707-be95-0a246ab05946/1/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:2f:66:bb:43:e2:bf:58:55:1b:d7:4a:4c:d8:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b522787599f1798e245f993f8cb8182f99cfd104
Validity
Not Before: Jun 28 14:00:45 2025 GMT
Not After : Jun 29 14:00:45 2025 GMT
Subject: CN=8754244c74fb16087a763d3a33455a8cdd7408e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8e:c4:f4:d7:6c:2f:5b:98:4a:ed:ab:17:4e:
fb:e2:a4:a7:b7:9d:b0:f7:f6:b0:3f:17:5d:a2:7c:
2a:aa:49:4f:9a:b6:b1:d2:35:4b:85:c0:9c:56:3f:
b4:2a:e7:73:a7:95:f2:41:e2:bc:31:44:6e:4b:2a:
66:28:c4:b1:cb:f3:18:68:bf:c3:10:88:0c:6e:25:
d6:d5:82:be:37:22:fa:b8:ec:e7:8f:4c:be:48:99:
07:37:1c:90:97:2a:40:73:9e:d6:22:db:85:68:3b:
fe:aa:ef:d0:88:09:d1:78:39:e6:f0:1f:27:16:6d:
69:95:b8:b6:8f:29:f0:d2:94:64:61:40:87:63:c1:
ab:1c:85:84:3c:d4:bf:bc:aa:93:d3:d9:15:ba:b6:
6c:ee:9c:af:10:51:9a:00:b6:5d:67:c0:e4:1d:63:
3a:c1:1e:de:89:16:c4:ac:b0:ec:03:ed:e3:50:1d:
72:85:e0:ff:a6:f5:a3:7c:3e:14:35:55:5a:58:2b:
98:df:ae:0b:83:ba:e4:4d:bc:93:52:14:ff:4c:0e:
1b:ee:6d:0c:7c:22:50:bd:30:56:77:bc:70:b4:55:
3f:bf:7f:af:29:40:81:52:36:a8:d7:ba:57:76:09:
ea:27:96:0f:32:1e:bc:bf:43:1f:68:27:74:66:a9:
1e:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:54:24:4C:74:FB:16:08:7A:76:3D:3A:33:45:5A:8C:DD:74:08:E3
X509v3 Authority Key Identifier:
keyid:B5:22:78:75:99:F1:79:8E:24:5F:99:3F:8C:B8:18:2F:99:CF:D1:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/9a4cce-fd12-4707-be95-0a246ab05946/1/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/9a4cce-fd12-4707-be95-0a246ab05946/1/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:1d:56:78:a6:1f:e7:ee:00:30:bb:18:eb:bd:4b:6e:49:94:
35:e2:fd:be:8a:63:9b:fa:2b:c2:aa:87:c0:d0:b9:f3:2b:cd:
1c:8b:d1:71:99:27:d7:2c:34:5e:54:6f:ee:2b:b6:bf:31:43:
0c:50:f2:7a:a7:60:ab:15:9a:7f:cb:9c:ce:78:78:d7:2b:52:
e2:7f:28:56:e1:e3:8f:a7:6f:ca:58:9b:28:ab:b0:13:24:a3:
c8:01:9d:b8:66:78:d9:e8:2d:d4:93:31:7c:93:13:98:30:71:
69:48:4f:63:1c:fe:ef:7f:d3:48:5c:7f:61:07:79:99:f9:25:
49:27:bd:46:45:88:8f:cc:42:9d:5e:b4:04:4e:f9:84:20:0a:
5e:9b:b3:65:41:a1:d8:c7:7d:70:cf:50:11:d2:38:66:33:a1:
55:ab:fd:d8:d0:8d:85:8a:a4:e3:eb:84:33:6a:a4:a0:29:8e:
8e:16:c0:87:11:07:c0:28:84:14:a5:ff:26:2c:ef:e6:00:be:
ed:f1:a8:f2:26:a2:57:d7:51:ee:2f:54:1b:07:fe:43:0e:b8:
29:82:d9:80:2e:ac:81:de:ee:60:41:28:7e:82:3d:7d:96:d6:
63:2c:9c:09:ff:9d:a7:cb:7d:28:b9:fe:9b:47:d2:f4:a9:c5:
29:15:58:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:55:41 2025 by rpki-client