Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/tXZXfSAIXEwi_IARyNGpP2MhHA8.mft
File: tXZXfSAIXEwi_IARyNGpP2MhHA8.mft (raw, json)
Hash identifier: oFN16w+bDgxFUZ95v1fFPcKldoEU9PTerbRV2Uex71w=
Subject key identifier: 61:30:C1:6F:44:17:1F:95:72:38:BC:47:E0:18:97:1B:E3:1D:C1:AB
Authority key identifier: B5:76:57:7D:20:08:5C:4C:22:FC:80:11:C8:D1:A9:3F:63:21:1C:0F
Certificate issuer: /CN=b576577d20085c4c22fc8011c8d1a93f63211c0f
Certificate serial: 01987A88D73A517912780D8231A33E18ABEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tXZXfSAIXEwi_IARyNGpP2MhHA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/tXZXfSAIXEwi_IARyNGpP2MhHA8.mft
Manifest number: 0140
Signing time: Tue 05 Aug 2025 14:00:44 +0000
Manifest this update: Tue 05 Aug 2025 14:00:44 +0000
Manifest next update: Wed 06 Aug 2025 14:00:44 +0000
Files and hashes: 1: 0NGpBZClfqdkwT-g1SQX2TG7Voo.roa (hash: SbCdNlkd4RVvBhJ9C9nlFY+4pjkHAYs+BVh1BZ1ld+c=)
2: FrJWtoZemJx4JKpSKfeY_d7A8KU.roa (hash: mn6H512YQAxp8Xgyg/tGQdGcCEfihV9UXWWT70uzA50=)
3: tXZXfSAIXEwi_IARyNGpP2MhHA8.crl (hash: 1ByVjLMJdcm05sZ9IEwLChdpgZsQtRzXBQl4wqcAeqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/tXZXfSAIXEwi_IARyNGpP2MhHA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/tXZXfSAIXEwi_IARyNGpP2MhHA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tXZXfSAIXEwi_IARyNGpP2MhHA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:88:d7:3a:51:79:12:78:0d:82:31:a3:3e:18:ab:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b576577d20085c4c22fc8011c8d1a93f63211c0f
Validity
Not Before: Aug 5 14:00:44 2025 GMT
Not After : Aug 6 14:00:44 2025 GMT
Subject: CN=6130c16f44171f957238bc47e018971be31dc1ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:50:17:62:34:28:b1:7f:f2:9f:ed:7b:2b:52:
4f:17:9e:b4:31:30:3b:fe:a7:1e:d2:06:1d:8e:e9:
2e:07:b0:fa:1c:9a:14:cb:95:b6:e7:09:74:f6:e3:
f6:2e:e0:47:97:a5:6a:e8:11:78:34:4a:34:a4:f5:
61:3f:16:d2:ca:fe:5a:ab:f5:ee:a8:f2:bd:83:92:
d3:5c:ec:bd:6d:39:8b:8d:88:13:b2:35:e7:68:42:
ee:cd:40:e9:bb:92:b2:dd:80:f5:c1:7e:ba:8f:bd:
3b:08:bc:45:91:77:24:6b:87:20:01:bc:26:a6:7a:
47:d6:37:95:50:0f:21:43:09:e4:18:62:39:f0:f4:
56:38:30:82:0e:0a:22:e3:9c:0f:d5:a3:6f:77:6c:
d5:4c:8e:35:f9:13:50:c4:5f:c1:4e:f1:38:78:33:
e9:a6:db:4e:ab:4d:f8:c5:b2:7d:df:5f:db:31:77:
71:31:8e:1f:6a:d4:2f:4b:12:40:bc:2d:23:3e:b0:
6c:0c:5f:fa:9b:23:73:2d:64:14:e8:94:a9:5d:50:
de:8c:ed:4e:e0:02:2f:eb:bd:e3:e6:58:4e:85:37:
27:fa:3a:0d:be:e2:b8:2f:74:c5:95:a8:dc:de:6e:
92:9f:95:d4:4e:1e:da:af:51:45:d0:fb:4c:9f:2b:
7c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:30:C1:6F:44:17:1F:95:72:38:BC:47:E0:18:97:1B:E3:1D:C1:AB
X509v3 Authority Key Identifier:
keyid:B5:76:57:7D:20:08:5C:4C:22:FC:80:11:C8:D1:A9:3F:63:21:1C:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tXZXfSAIXEwi_IARyNGpP2MhHA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/tXZXfSAIXEwi_IARyNGpP2MhHA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/tXZXfSAIXEwi_IARyNGpP2MhHA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:62:0b:ab:59:23:a2:cf:53:07:b4:80:62:1b:bb:7b:53:62:
c1:3b:01:4a:94:3e:e3:a5:b2:00:5b:a4:cd:77:bb:18:89:a7:
f6:74:df:3a:cc:a2:dd:f6:a0:b0:78:b5:75:62:4d:ca:65:ff:
7c:c0:82:dd:27:9f:80:eb:a1:58:e0:25:0c:fb:65:1d:26:70:
2f:7c:08:6d:27:5e:f1:b6:e9:68:57:0f:d9:49:dd:e5:81:bd:
60:dd:fd:8c:0a:30:3b:e6:3e:3e:8b:20:bc:08:66:b0:6a:fb:
fe:69:6f:aa:61:cc:0f:79:12:5a:a1:d4:b1:e1:9f:db:8d:db:
68:e1:7b:87:c4:a3:05:da:d3:4c:cc:51:87:16:da:0a:6f:47:
08:03:df:ae:26:31:a8:fe:75:88:a8:13:0a:c6:96:89:8d:6d:
41:5f:c4:71:49:5d:51:5e:4f:22:e6:56:43:9c:30:cd:53:93:
8d:84:69:c7:cb:8f:35:d3:6e:4c:59:5a:aa:13:40:db:9f:a8:
0b:10:c0:14:27:ed:17:0f:2f:db:fa:07:71:ac:eb:f6:f5:5e:
ff:d6:54:67:43:06:8a:bc:82:28:a1:6c:83:7a:ad:d5:ac:5a:
bc:82:d5:b4:6f:c1:e5:1f:60:d2:e5:a6:d3:64:f7:82:9d:e8:
98:8c:b7:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 22:55:47 2025 by rpki-client