
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/7434e1-7413-4f6a-a29c-cdc81db77531/1/tIvY7E4wHJ57CkO-8PPd06RTFVo.mft
File: tIvY7E4wHJ57CkO-8PPd06RTFVo.mft (raw, json)
Hash identifier: qnwf3xRPcT+kZYqNXj+7iXADdscZJ4GhqD5KHSo/LRI=
Subject key identifier: C4:0A:0F:72:5B:F3:61:AD:3A:B8:7E:54:68:A4:1C:6E:2F:A6:5C:E9
Authority key identifier: B4:8B:D8:EC:4E:30:1C:9E:7B:0A:43:BE:F0:F3:DD:D3:A4:53:15:5A
Certificate issuer: /CN=b48bd8ec4e301c9e7b0a43bef0f3ddd3a453155a
Certificate serial: 019872CF8D13004EDFB6719EE4E9BF441507
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tIvY7E4wHJ57CkO-8PPd06RTFVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/7434e1-7413-4f6a-a29c-cdc81db77531/1/tIvY7E4wHJ57CkO-8PPd06RTFVo.mft
Manifest number: 02D7
Signing time: Mon 04 Aug 2025 02:01:01 +0000
Manifest this update: Mon 04 Aug 2025 02:01:01 +0000
Manifest next update: Tue 05 Aug 2025 02:01:01 +0000
Files and hashes: 1: RB7HUixrp2_fRnv8EOUDAJuY_s8.roa (hash: 8tnZtAu3C6mP5DEQfehN4BPaOTowIhr+JO1L2V82k9E=)
2: tIvY7E4wHJ57CkO-8PPd06RTFVo.crl (hash: mcKDj6CYNs3CHjljRp4D6aJ1tHgw0qr16WU0H1nB0jU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/7434e1-7413-4f6a-a29c-cdc81db77531/1/tIvY7E4wHJ57CkO-8PPd06RTFVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/7434e1-7413-4f6a-a29c-cdc81db77531/1/tIvY7E4wHJ57CkO-8PPd06RTFVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/tIvY7E4wHJ57CkO-8PPd06RTFVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:8d:13:00:4e:df:b6:71:9e:e4:e9:bf:44:15:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b48bd8ec4e301c9e7b0a43bef0f3ddd3a453155a
Validity
Not Before: Aug 4 02:01:01 2025 GMT
Not After : Aug 5 02:01:01 2025 GMT
Subject: CN=c40a0f725bf361ad3ab87e5468a41c6e2fa65ce9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:48:bd:2f:62:67:fe:8f:7f:22:2d:91:cd:f0:
28:62:51:18:e6:ab:2d:a7:10:a0:05:f2:a1:72:96:
e4:b3:3d:23:49:35:ef:4f:00:af:0d:33:0d:73:d5:
7c:55:e4:59:0a:0b:e7:d6:03:5c:c5:ef:fa:7d:e2:
6f:d9:15:7e:e8:e9:d1:37:13:55:80:dd:5e:98:0d:
ff:57:a4:7a:92:a2:40:e0:67:7b:b9:01:89:76:ab:
76:41:b4:39:bd:12:9e:71:4f:d9:0d:90:86:09:9d:
16:f4:7f:53:93:88:66:65:c0:18:68:82:ce:7c:e0:
02:84:9a:22:4a:11:f9:05:dc:f0:17:22:ba:d1:7b:
22:50:ff:1e:fc:e4:63:6c:45:65:cb:c2:8d:a4:3c:
3b:86:41:ba:62:ea:d9:44:13:18:82:cf:0d:9f:2c:
c5:b3:98:50:6d:e8:a3:0e:e7:98:0f:ad:6c:2b:4d:
3d:64:79:73:64:8d:7e:d0:2a:44:82:70:3d:67:f1:
9a:40:cf:53:3d:fb:7f:16:b4:bd:71:1a:d9:27:7b:
5b:e4:90:b1:0a:46:50:5d:7e:f8:43:33:91:7e:96:
a9:7e:1c:16:8f:4d:dd:6c:f0:f3:5f:5b:54:1e:92:
14:2e:98:88:64:a5:27:db:08:5c:9b:16:1e:75:66:
59:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:0A:0F:72:5B:F3:61:AD:3A:B8:7E:54:68:A4:1C:6E:2F:A6:5C:E9
X509v3 Authority Key Identifier:
keyid:B4:8B:D8:EC:4E:30:1C:9E:7B:0A:43:BE:F0:F3:DD:D3:A4:53:15:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tIvY7E4wHJ57CkO-8PPd06RTFVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7434e1-7413-4f6a-a29c-cdc81db77531/1/tIvY7E4wHJ57CkO-8PPd06RTFVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7434e1-7413-4f6a-a29c-cdc81db77531/1/tIvY7E4wHJ57CkO-8PPd06RTFVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:a6:35:8d:ac:06:b7:ec:3e:e7:4a:a8:43:88:2a:23:8a:7d:
6a:c1:4f:b2:bd:a8:05:07:d7:04:89:84:fd:ad:3b:38:17:67:
06:c0:51:23:5f:32:cc:9c:fb:14:e6:12:22:76:28:2d:d2:55:
16:f8:82:e8:ef:d7:83:4b:ad:ab:93:69:1c:22:6c:34:88:99:
dd:74:8c:ae:1a:38:a0:30:dc:ec:b3:4a:b1:27:93:68:bb:b0:
65:a8:d0:18:c0:5c:74:a4:2a:7d:75:90:f7:34:da:a4:10:e5:
91:e1:0c:27:f1:ba:41:c8:d9:5e:12:d8:f9:f7:12:20:70:8a:
a3:1b:56:ba:58:f0:a1:a8:5e:63:14:48:88:6f:a2:17:6c:0d:
4e:69:70:2d:21:02:0b:fa:0f:37:d8:e6:2c:83:3e:4f:6b:52:
0b:ef:24:4a:2e:7f:6c:31:56:62:60:7a:4e:6c:e6:62:44:80:
d7:a3:6a:e6:bf:22:2a:17:1f:b1:f4:27:1a:40:2c:fa:66:01:
d5:16:1a:3c:23:a5:01:07:bc:2c:1b:8e:ce:d0:df:5f:7f:e6:
c0:70:0d:95:c4:5a:7c:d7:2c:d9:43:40:f8:e7:ca:58:61:5a:
9d:d0:4b:ff:b2:6a:b5:5a:b1:5b:20:58:d3:19:7d:17:22:ed:
38:0a:f1:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:09:03 2025 by rpki-client