Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/5992eb-4b82-4fd3-9121-fee137c890bc/1/tIoonrst1oBtYLjFrQNseY9mugY.mft
File: tIoonrst1oBtYLjFrQNseY9mugY.mft (raw, json)
Hash identifier: Sm1kijoQitgV18KOPubbdq8U/aRv33HhFHQtrcDepro=
Subject key identifier: BC:A9:A8:6A:DB:1C:53:47:A3:CA:4E:47:D9:27:C8:62:3A:EA:D6:24
Authority key identifier: B4:8A:28:9E:BB:2D:D6:80:6D:60:B8:C5:AD:03:6C:79:8F:66:BA:06
Certificate issuer: /CN=b48a289ebb2dd6806d60b8c5ad036c798f66ba06
Certificate serial: 01989D826C4ACF6DCF855EFF8961EA2E89E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tIoonrst1oBtYLjFrQNseY9mugY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/5992eb-4b82-4fd3-9121-fee137c890bc/1/tIoonrst1oBtYLjFrQNseY9mugY.mft
Manifest number: 04E7
Signing time: Tue 12 Aug 2025 09:00:26 +0000
Manifest this update: Tue 12 Aug 2025 09:00:26 +0000
Manifest next update: Wed 13 Aug 2025 09:00:26 +0000
Files and hashes: 1: nKxswHwUBE_XIOIyQ1Qpw5XOFvo.roa (hash: xZYcCOMTf00TiuBXWvG+qaD8S6ouJ5YlmrR2oW0i9z0=)
2: tIoonrst1oBtYLjFrQNseY9mugY.crl (hash: 8uXzgBdfdQmZvGVgQz0V1pCUOxFQx6ThJSPz5KrM/J4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/5992eb-4b82-4fd3-9121-fee137c890bc/1/tIoonrst1oBtYLjFrQNseY9mugY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/5992eb-4b82-4fd3-9121-fee137c890bc/1/tIoonrst1oBtYLjFrQNseY9mugY.mft
rsync://rpki.ripe.net/repository/DEFAULT/tIoonrst1oBtYLjFrQNseY9mugY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9d:82:6c:4a:cf:6d:cf:85:5e:ff:89:61:ea:2e:89:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b48a289ebb2dd6806d60b8c5ad036c798f66ba06
Validity
Not Before: Aug 12 09:00:26 2025 GMT
Not After : Aug 13 09:00:26 2025 GMT
Subject: CN=bca9a86adb1c5347a3ca4e47d927c8623aead624
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:54:46:03:f5:3f:d2:39:59:9d:97:3e:b6:5e:
01:10:9e:96:0a:3b:9c:bf:5c:40:06:c6:d7:da:bd:
7c:8c:2a:1b:98:2a:52:8b:6d:5d:37:e8:ab:f2:5f:
ca:0b:7f:39:58:cb:18:a4:af:1e:ee:a1:ec:ae:1a:
63:4b:3c:bb:af:f9:bc:08:98:16:97:1a:04:e5:b8:
f3:d9:33:ea:48:01:74:d3:ab:48:a1:2e:78:17:e3:
b1:a6:d9:7d:67:c2:e3:f8:6b:1d:93:cd:d6:41:ad:
02:4e:8b:43:d2:7e:9a:c2:87:ca:76:af:bd:08:ce:
eb:e5:a4:49:25:b1:c4:c0:99:97:d7:c2:1e:cd:a4:
5e:4a:36:00:89:b1:9b:7e:65:ff:3c:58:47:a7:14:
3f:88:4c:9e:53:d2:20:78:f7:61:b1:d2:79:88:52:
df:e9:1b:b7:5c:7a:00:a7:c2:f6:18:2a:d0:4a:f4:
4d:7e:b9:38:cc:34:3d:d9:0a:0a:04:32:67:e5:a0:
8c:70:b8:35:a0:e5:db:66:ae:b0:62:38:5f:84:1a:
3a:77:f7:3a:9e:67:76:73:11:69:9e:f3:a7:30:df:
66:b7:8f:ba:42:25:21:3a:69:52:cb:4d:c6:25:cd:
c9:fc:6a:02:2f:b2:5f:c8:e5:30:40:af:a4:f8:f0:
74:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:A9:A8:6A:DB:1C:53:47:A3:CA:4E:47:D9:27:C8:62:3A:EA:D6:24
X509v3 Authority Key Identifier:
keyid:B4:8A:28:9E:BB:2D:D6:80:6D:60:B8:C5:AD:03:6C:79:8F:66:BA:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tIoonrst1oBtYLjFrQNseY9mugY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/5992eb-4b82-4fd3-9121-fee137c890bc/1/tIoonrst1oBtYLjFrQNseY9mugY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/5992eb-4b82-4fd3-9121-fee137c890bc/1/tIoonrst1oBtYLjFrQNseY9mugY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:d4:99:6f:a6:87:60:f0:9a:59:76:c7:4c:3f:ec:97:56:f2:
11:93:34:00:5e:2e:25:f7:72:78:ca:2a:f0:ac:d0:45:64:5d:
d6:b9:85:9d:78:bf:1b:ff:95:ff:a6:f0:6d:52:e1:6c:b2:5c:
37:70:36:a9:8d:37:e1:e7:2b:b3:1e:09:c9:06:c5:b1:01:8c:
8a:bf:df:8b:19:c2:54:09:24:39:2e:e0:6f:de:18:a9:20:d6:
c8:0d:e6:a3:1d:2a:1e:70:d8:46:37:1d:23:8f:27:8e:bd:ff:
e6:70:6d:a2:32:15:46:01:04:78:5e:3d:7f:72:91:49:44:bf:
09:8b:f2:2c:de:4a:e5:d2:8e:e6:ea:2d:a3:10:53:16:ba:d2:
50:52:04:72:b1:84:79:a0:1d:79:7c:a4:f9:07:34:db:b1:8f:
45:b6:d5:61:f4:1e:88:42:20:3a:78:71:e4:57:4e:d7:43:a9:
37:67:0a:41:7d:56:4a:33:1f:cf:85:9d:e8:f6:03:a7:72:33:
a4:da:ba:dc:8c:62:e3:3f:0c:7f:fc:14:b6:ca:ca:20:82:8b:
2a:b5:0e:f2:b0:04:d8:05:1c:f1:6c:92:a0:7b:cb:6c:c1:4f:
30:1b:e4:47:ff:d3:4c:5a:4b:95:40:ce:b1:56:b4:d4:55:30:
da:fd:c9:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 18:54:03 2025 by rpki-client