Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/8b5d2a-4bc4-406f-97d5-ba3947c9b22b/1/tYUi2sa83oxIEzNZkTKhYgDmpb4.mft
File: tYUi2sa83oxIEzNZkTKhYgDmpb4.mft (raw, json)
Hash identifier: r7PManWe4Tm0YVAIbJMScMLB9zZFFxgRxsXqRqV8z/k=
Subject key identifier: C8:5A:7B:51:24:FE:20:C3:E6:F1:67:60:D7:5D:E2:67:A7:73:B4:A0
Authority key identifier: B5:85:22:DA:C6:BC:DE:8C:48:13:33:59:91:32:A1:62:00:E6:A5:BE
Certificate issuer: /CN=b58522dac6bcde8c481333599132a16200e6a5be
Certificate serial: 0197711A5899228BCC0FC495FA66066E1CFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tYUi2sa83oxIEzNZkTKhYgDmpb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/8b5d2a-4bc4-406f-97d5-ba3947c9b22b/1/tYUi2sa83oxIEzNZkTKhYgDmpb4.mft
Manifest number: 08EB
Signing time: Sun 15 Jun 2025 01:00:41 +0000
Manifest this update: Sun 15 Jun 2025 01:00:41 +0000
Manifest next update: Mon 16 Jun 2025 01:00:41 +0000
Files and hashes: 1: 5moGvKAoN95-3rdirRXOwCahhvs.roa (hash: SkhAzMm5Jb5vcIiM14h4SYz3DQTRyqaR2eF+qq4Rdl0=)
2: RuuQV8FVAOprAh_8jcQjyKszeBc.roa (hash: kX89cdA0JPKtfSqgIarOumMCZ1cTxgD0uR8aSG1ObUs=)
3: tYUi2sa83oxIEzNZkTKhYgDmpb4.crl (hash: hcyjVrPizHa0BbmbmmeypSq1EPbYx/G1MqHv6B7s4xo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/8b5d2a-4bc4-406f-97d5-ba3947c9b22b/1/tYUi2sa83oxIEzNZkTKhYgDmpb4.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/8b5d2a-4bc4-406f-97d5-ba3947c9b22b/1/tYUi2sa83oxIEzNZkTKhYgDmpb4.mft
rsync://rpki.ripe.net/repository/DEFAULT/tYUi2sa83oxIEzNZkTKhYgDmpb4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 01:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:1a:58:99:22:8b:cc:0f:c4:95:fa:66:06:6e:1c:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b58522dac6bcde8c481333599132a16200e6a5be
Validity
Not Before: Jun 15 01:00:41 2025 GMT
Not After : Jun 16 01:00:41 2025 GMT
Subject: CN=c85a7b5124fe20c3e6f16760d75de267a773b4a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:4f:d0:a8:dc:82:d5:ec:11:f2:32:c4:8b:f6:
a8:64:59:a5:c6:cd:9b:ec:d5:c8:fb:8a:92:9a:7d:
5f:b5:33:24:d3:0d:6c:4b:43:4c:c2:48:ac:33:9f:
65:40:b5:37:5f:de:44:85:fe:f2:d7:42:0e:84:12:
5c:e2:78:b4:15:25:df:57:01:d1:e2:35:42:26:3c:
5f:a5:8d:d0:e6:98:e8:21:0a:2d:69:66:a1:af:fd:
ea:5c:bf:62:43:e4:ec:44:23:2c:ca:1c:9a:5f:9b:
44:ca:a0:79:5e:ee:3c:a6:71:d0:4b:ea:9d:43:b9:
6c:a9:36:8a:b8:9c:82:c1:c6:ec:ec:78:0b:77:02:
51:ef:30:fa:d4:12:74:34:56:35:83:27:7e:45:fc:
e5:92:eb:3f:8b:26:f6:86:ce:c9:92:43:14:73:c6:
0f:a4:56:3a:9a:42:b9:cb:49:36:76:31:3e:75:91:
3a:ab:0e:bd:54:64:ba:cb:16:70:35:be:ba:25:27:
54:76:cb:47:f1:19:58:4d:e1:4b:b7:aa:eb:c5:d2:
d0:b8:32:33:e5:dc:c1:2c:8d:66:29:95:9c:db:06:
54:a0:ba:1c:84:32:5e:5f:80:83:11:a6:89:bb:64:
74:82:ee:2b:a8:ec:8e:01:b4:ee:51:25:f1:38:10:
c0:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:5A:7B:51:24:FE:20:C3:E6:F1:67:60:D7:5D:E2:67:A7:73:B4:A0
X509v3 Authority Key Identifier:
keyid:B5:85:22:DA:C6:BC:DE:8C:48:13:33:59:91:32:A1:62:00:E6:A5:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tYUi2sa83oxIEzNZkTKhYgDmpb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8b5d2a-4bc4-406f-97d5-ba3947c9b22b/1/tYUi2sa83oxIEzNZkTKhYgDmpb4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8b5d2a-4bc4-406f-97d5-ba3947c9b22b/1/tYUi2sa83oxIEzNZkTKhYgDmpb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:9d:04:df:2b:c2:e3:56:62:f3:25:ca:50:99:4e:7e:b6:16:
01:80:b8:97:51:a9:81:58:75:3f:d1:7d:c6:02:0f:cc:71:0d:
dd:8c:7c:69:b1:57:73:60:16:15:cc:c6:0a:73:ce:c1:37:51:
36:51:62:5a:65:63:b0:7d:34:0e:bf:88:23:98:95:33:ce:aa:
87:e7:3d:2f:fb:79:de:f5:d2:1e:a1:d0:f8:ac:ac:ab:11:28:
48:10:af:f1:8b:69:80:ec:29:63:7a:d7:20:9e:7e:58:1c:69:
0d:5b:58:71:8c:1e:0d:9b:bc:eb:97:e9:c6:34:e8:c3:09:5c:
50:c3:4d:b9:35:5b:4b:c4:dc:4c:14:d3:d4:45:cb:83:d0:dd:
7c:45:44:ef:94:f3:06:de:84:4d:21:ec:2d:0e:c9:9a:4d:ed:
6f:59:a6:ff:99:c9:cc:f2:57:a1:ff:3d:d2:82:54:dc:61:d6:
db:e7:1a:92:13:46:19:81:52:97:1b:f6:b1:e1:48:53:3d:44:
23:5c:e3:60:2b:5f:39:06:9f:b8:95:0a:b7:98:c3:fd:98:a0:
a5:c5:26:e3:24:bb:1c:91:12:a1:d8:09:6a:d3:21:43:ff:3d:
2a:36:6d:fb:dd:76:ca:c2:0b:17:c3:50:71:69:17:21:51:7f:
57:6c:b1:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 11:43:42 2025 by rpki-client