Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/55d584-19a1-47c0-95a6-bc8e0b69ac12/1/tEjWJqkg5C2s0OlI6Wal5LzDwRw.mft
File: tEjWJqkg5C2s0OlI6Wal5LzDwRw.mft (raw, json)
Hash identifier: YpLDRwRI4G19B3FHtcevFq8RoQuvRhRzUNOKHyjbctQ=
Subject key identifier: 23:1E:6B:F3:EF:76:6B:6F:95:60:73:FA:12:05:C8:D6:F0:49:7A:16
Authority key identifier: B4:48:D6:26:A9:20:E4:2D:AC:D0:E9:48:E9:66:A5:E4:BC:C3:C1:1C
Certificate issuer: /CN=b448d626a920e42dacd0e948e966a5e4bcc3c11c
Certificate serial: 01987A1B852E9F3BDE93F189B25582604582
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tEjWJqkg5C2s0OlI6Wal5LzDwRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/55d584-19a1-47c0-95a6-bc8e0b69ac12/1/tEjWJqkg5C2s0OlI6Wal5LzDwRw.mft
Manifest number: 1079
Signing time: Tue 05 Aug 2025 12:01:20 +0000
Manifest this update: Tue 05 Aug 2025 12:01:20 +0000
Manifest next update: Wed 06 Aug 2025 12:01:20 +0000
Files and hashes: 1: Tm8yT_3vBgLrxw1Lr4A3GN1Cjk4.roa (hash: cpwfuPoZQp9+xwJvstUEZKWWh0LDOj40EbCeSJBVSfw=)
2: tEjWJqkg5C2s0OlI6Wal5LzDwRw.crl (hash: I1BENOFIpPj5iAKEAotM3QMJPct++FuhpRCm8BkVJ9A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/55d584-19a1-47c0-95a6-bc8e0b69ac12/1/tEjWJqkg5C2s0OlI6Wal5LzDwRw.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/55d584-19a1-47c0-95a6-bc8e0b69ac12/1/tEjWJqkg5C2s0OlI6Wal5LzDwRw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tEjWJqkg5C2s0OlI6Wal5LzDwRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 12:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:1b:85:2e:9f:3b:de:93:f1:89:b2:55:82:60:45:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b448d626a920e42dacd0e948e966a5e4bcc3c11c
Validity
Not Before: Aug 5 12:01:20 2025 GMT
Not After : Aug 6 12:01:20 2025 GMT
Subject: CN=231e6bf3ef766b6f956073fa1205c8d6f0497a16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ee:8e:8b:fe:ff:58:15:84:40:47:5d:d9:5e:
72:87:89:54:4b:be:45:2c:d6:8a:e0:45:3d:77:84:
3b:7c:47:2b:6d:11:f3:c6:00:1e:d8:14:d7:83:88:
f9:62:44:bd:67:2f:8b:b1:11:c9:24:02:01:26:b0:
73:6a:df:15:d3:03:e3:52:2d:e2:86:7a:eb:ab:08:
8b:fd:c3:8b:17:46:35:62:0a:01:60:e9:e5:28:a4:
f3:1e:a7:b6:b4:5c:2a:bd:ff:e1:22:c8:5c:bb:02:
28:9c:e8:af:6d:1e:d5:36:bf:9c:69:31:dd:bf:2c:
ba:ff:c6:24:39:8f:a9:18:8b:4a:ce:4e:ca:9d:f1:
ab:81:12:25:48:e3:3e:54:50:b8:d8:dc:2e:ac:45:
db:6b:99:35:7d:74:e5:02:64:37:a4:a6:9e:04:da:
36:0f:2e:3e:45:19:b6:0c:88:59:2e:34:0b:93:bc:
19:7d:37:bb:fb:e4:d9:c7:bb:3a:11:36:01:97:18:
e6:7a:d2:e1:fd:b6:35:59:0a:de:44:80:d6:0f:cd:
9a:0d:93:c2:a1:9f:28:5e:63:21:32:7e:02:09:2b:
1e:db:bc:10:3a:df:67:c0:66:fb:b9:ac:fe:61:78:
3d:da:6b:dc:38:8f:9a:70:91:28:3b:d5:5c:a0:a0:
6f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:1E:6B:F3:EF:76:6B:6F:95:60:73:FA:12:05:C8:D6:F0:49:7A:16
X509v3 Authority Key Identifier:
keyid:B4:48:D6:26:A9:20:E4:2D:AC:D0:E9:48:E9:66:A5:E4:BC:C3:C1:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tEjWJqkg5C2s0OlI6Wal5LzDwRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/55d584-19a1-47c0-95a6-bc8e0b69ac12/1/tEjWJqkg5C2s0OlI6Wal5LzDwRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/55d584-19a1-47c0-95a6-bc8e0b69ac12/1/tEjWJqkg5C2s0OlI6Wal5LzDwRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:02:20:aa:d0:e0:ab:6f:cf:3c:21:e7:d8:14:68:77:7f:9d:
53:62:b1:83:f9:87:3a:16:2c:de:1e:8f:24:d9:48:85:5a:15:
dd:e8:4c:5f:c6:ba:40:da:5d:02:49:73:c9:2e:1b:a7:ee:2c:
fe:bb:00:66:c2:6d:fc:8c:9f:fe:0e:64:5e:14:9d:9c:89:cd:
b8:5a:24:4c:66:73:b5:f2:a8:0f:8b:6a:5f:b2:be:2d:57:6f:
11:4a:fe:bf:de:78:46:8f:ac:28:35:90:12:28:cf:37:b4:9e:
da:09:36:09:29:f5:05:25:1e:f3:d9:52:7d:83:8e:ce:78:03:
22:51:52:0b:66:c6:51:08:0e:cc:d9:9b:a6:52:79:70:67:a5:
37:e5:d6:9a:41:b0:74:6d:23:68:47:de:1b:81:ba:9d:0a:ee:
68:09:61:d7:d0:19:d4:dd:13:a8:17:0a:44:7e:0c:13:f0:b6:
9a:09:91:a2:a4:12:76:e4:bd:df:a1:3f:99:82:50:db:e7:16:
ed:c6:7f:9d:75:da:dc:b8:66:25:5e:15:d0:a9:5e:35:1b:c1:
d7:ec:5b:0c:86:1b:42:70:0a:52:10:6e:cf:b3:01:2b:ce:2b:
7f:92:61:f7:7d:02:fa:b2:b1:eb:f8:42:2f:9a:9c:86:0d:f1:
c8:fd:20:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:10:26 2025 by rpki-client