
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/ecb45e-2db6-4b54-bc91-0596296f12de/1/tF5iJw0g-UZ6avx4lj28-4D79So.mft
File: tF5iJw0g-UZ6avx4lj28-4D79So.mft (raw, json)
Hash identifier: K5qpy1aFjWXUhoJ1x5mOGZq1A4RL9d3ZDxg6IxvM6jw=
Subject key identifier: 75:B3:FE:69:91:4B:5B:1B:2D:91:E5:71:DD:6E:C2:F2:8A:09:9C:33
Authority key identifier: B4:5E:62:27:0D:20:F9:46:7A:6A:FC:78:96:3D:BC:FB:80:FB:F5:2A
Certificate issuer: /CN=b45e62270d20f9467a6afc78963dbcfb80fbf52a
Certificate serial: 01988EEC18CF59B1575F2ACF7B498B9940CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tF5iJw0g-UZ6avx4lj28-4D79So.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/ecb45e-2db6-4b54-bc91-0596296f12de/1/tF5iJw0g-UZ6avx4lj28-4D79So.mft
Manifest number: 0DA4
Signing time: Sat 09 Aug 2025 13:01:34 +0000
Manifest this update: Sat 09 Aug 2025 13:01:34 +0000
Manifest next update: Sun 10 Aug 2025 13:01:34 +0000
Files and hashes: 1: tF5iJw0g-UZ6avx4lj28-4D79So.crl (hash: JhbDgtmcy8dbxw0Xz1Xik+IRNnjEQQOlpCFkxA1jusQ=)
2: uvCFX9itk7RPxPZl6lvvghFjg1E.roa (hash: P3N8o135VPbcqFaS3kCnXkMSVi3GCBY96T9QuQyMyig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/ecb45e-2db6-4b54-bc91-0596296f12de/1/tF5iJw0g-UZ6avx4lj28-4D79So.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/ecb45e-2db6-4b54-bc91-0596296f12de/1/tF5iJw0g-UZ6avx4lj28-4D79So.mft
rsync://rpki.ripe.net/repository/DEFAULT/tF5iJw0g-UZ6avx4lj28-4D79So.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 13:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:ec:18:cf:59:b1:57:5f:2a:cf:7b:49:8b:99:40:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b45e62270d20f9467a6afc78963dbcfb80fbf52a
Validity
Not Before: Aug 9 13:01:34 2025 GMT
Not After : Aug 10 13:01:34 2025 GMT
Subject: CN=75b3fe69914b5b1b2d91e571dd6ec2f28a099c33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:dc:57:d6:2c:f9:1c:16:6a:31:a3:40:d2:27:
4a:54:a1:3b:f5:87:9d:33:cc:42:3f:d8:3b:ef:0a:
d3:32:dc:c0:2f:a8:9e:5a:32:b9:0a:47:ab:c6:12:
7a:2f:30:13:83:8c:0e:61:4f:f2:a8:d0:2a:50:60:
45:a8:7b:35:1e:8a:bd:0b:1b:5d:b9:47:a1:5e:c5:
fb:2b:e3:79:76:82:20:a7:8a:6e:eb:0e:f4:ee:dc:
a4:8e:1a:73:d4:88:fd:70:aa:44:1e:b6:7f:0c:f1:
49:41:80:2c:f2:84:3a:79:cf:4f:8b:0e:ac:8b:22:
a6:76:30:ea:ea:d0:bb:d6:00:13:5c:4d:7d:70:7a:
5f:06:43:2a:b3:c6:61:ab:7f:31:cf:73:67:be:0b:
43:d2:85:c9:19:3e:70:36:71:33:ea:22:41:06:35:
82:56:83:11:e1:f7:cb:33:30:c0:f7:af:ab:83:a3:
0e:0c:be:55:db:25:64:4b:28:2b:6e:90:7e:09:9d:
30:00:38:0b:65:f7:9c:b1:73:7a:9f:6b:98:37:39:
2a:a6:00:e2:9b:c9:0b:8b:3e:0e:66:e0:01:c1:46:
93:1d:56:21:c5:13:4d:9f:f8:66:3a:7d:3e:9b:9f:
de:55:5f:a5:b6:30:9a:d4:28:45:d9:fa:de:74:05:
a5:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:B3:FE:69:91:4B:5B:1B:2D:91:E5:71:DD:6E:C2:F2:8A:09:9C:33
X509v3 Authority Key Identifier:
keyid:B4:5E:62:27:0D:20:F9:46:7A:6A:FC:78:96:3D:BC:FB:80:FB:F5:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tF5iJw0g-UZ6avx4lj28-4D79So.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/ecb45e-2db6-4b54-bc91-0596296f12de/1/tF5iJw0g-UZ6avx4lj28-4D79So.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/ecb45e-2db6-4b54-bc91-0596296f12de/1/tF5iJw0g-UZ6avx4lj28-4D79So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:7b:17:69:d5:4f:df:7b:00:4b:a7:ea:0f:90:1a:2a:eb:2f:
f3:b8:e2:3f:73:62:b7:da:f3:6b:77:3a:7b:f2:ad:9c:0c:e4:
31:08:31:c5:d4:79:64:ec:ef:a9:50:e4:b3:91:0a:f0:05:b4:
56:01:62:78:11:10:d5:92:09:9a:86:1c:a3:07:99:1a:d1:dc:
78:b5:42:45:ea:c0:77:b0:83:e6:32:fc:76:6f:01:b3:ae:ed:
7a:bc:22:aa:eb:5e:95:c1:89:5d:88:67:2a:e7:82:6a:f2:06:
4b:e8:96:5c:0c:a6:55:97:5a:09:b1:81:8e:6f:76:4d:a9:db:
b6:30:c8:0f:65:6a:02:af:0b:39:f6:4a:b6:4e:a4:12:6d:22:
31:e1:34:8d:8c:99:1d:b2:f7:4d:9e:7b:ae:b6:db:5c:51:70:
5e:83:f0:e9:1e:6a:3c:be:92:a6:02:75:db:4e:b8:e8:cb:f4:
b0:b3:23:9b:26:cb:39:c3:e1:d7:f5:f2:dc:8d:52:57:5d:c1:
9e:8b:c3:6e:81:c7:da:b1:6b:71:fe:bf:74:83:aa:42:28:f7:
35:04:8f:95:90:19:38:d7:cb:c5:1d:b0:f8:b0:52:71:82:d1:
c9:67:9d:81:b8:a2:82:39:f1:ba:5b:1b:cf:e4:a6:5b:a4:3d:
34:86:0c:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:38:24 2025 by rpki-client