Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/6c0b54-b06e-4d44-8120-370b8688feaf/1/tUSbCOpqJn33NmpolcfJJMLxkm0.mft
File: tUSbCOpqJn33NmpolcfJJMLxkm0.mft (raw, json)
Hash identifier: jOzqihPBeGDP+Q/250Q5hmJisFkTc9Uazat/wk6VnAc=
Subject key identifier: 49:CA:D1:85:3C:9E:1B:73:C2:4D:00:EA:D0:4A:87:DF:E2:75:77:C6
Authority key identifier: B5:44:9B:08:EA:6A:26:7D:F7:36:6A:68:95:C7:C9:24:C2:F1:92:6D
Certificate issuer: /CN=b5449b08ea6a267df7366a6895c7c924c2f1926d
Certificate serial: 01988733C60E99ABC77F2C4A8C8E7B2D5A8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tUSbCOpqJn33NmpolcfJJMLxkm0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/6c0b54-b06e-4d44-8120-370b8688feaf/1/tUSbCOpqJn33NmpolcfJJMLxkm0.mft
Manifest number: 01C1
Signing time: Fri 08 Aug 2025 01:02:53 +0000
Manifest this update: Fri 08 Aug 2025 01:02:53 +0000
Manifest next update: Sat 09 Aug 2025 01:02:53 +0000
Files and hashes: 1: 12VZdcmHAZ40OHT9mrIrMjn0594.roa (hash: ET8sgbp54z2ReDcdD/bnaoyAnFdtN16gcR5nsUzXKcM=)
2: tUSbCOpqJn33NmpolcfJJMLxkm0.crl (hash: 1JvSMiG/zdHc22SnD4AzqihwpnF3YYW5DNpQ+BQddKY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/6c0b54-b06e-4d44-8120-370b8688feaf/1/tUSbCOpqJn33NmpolcfJJMLxkm0.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/6c0b54-b06e-4d44-8120-370b8688feaf/1/tUSbCOpqJn33NmpolcfJJMLxkm0.mft
rsync://rpki.ripe.net/repository/DEFAULT/tUSbCOpqJn33NmpolcfJJMLxkm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 01:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:87:33:c6:0e:99:ab:c7:7f:2c:4a:8c:8e:7b:2d:5a:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5449b08ea6a267df7366a6895c7c924c2f1926d
Validity
Not Before: Aug 8 01:02:53 2025 GMT
Not After : Aug 9 01:02:53 2025 GMT
Subject: CN=49cad1853c9e1b73c24d00ead04a87dfe27577c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e2:a1:92:21:d1:00:33:f9:0c:66:c8:ca:3f:
50:44:c6:90:3b:2c:c9:4d:c5:ea:60:64:35:8f:d0:
f2:8c:87:e0:34:ae:2c:0c:c3:79:0d:66:9b:93:12:
76:ef:22:ee:17:09:b5:c9:91:8c:65:12:fd:85:cb:
78:18:0f:00:fc:c7:55:cb:a9:21:68:9f:b7:71:bd:
91:46:c4:f5:dd:51:96:aa:ce:90:88:7c:84:23:0d:
a1:7a:3e:07:a9:17:bc:f8:fe:0b:0f:3a:77:b6:87:
c6:63:02:64:66:93:e3:c6:56:dd:63:4e:18:c0:bc:
6c:c8:c8:d0:88:d7:30:42:44:db:41:e5:f1:ff:cd:
a9:f1:17:e8:e8:dc:7f:2c:59:a2:eb:a2:7e:30:cb:
53:09:a0:96:0c:dc:83:73:8c:1d:4d:69:f0:18:a3:
e8:43:7d:7d:b0:41:93:f9:7f:83:53:d2:2a:9e:fd:
45:e2:35:91:85:d9:64:9b:0b:d7:19:f3:96:e8:77:
a4:0d:d0:ea:ed:01:2d:45:ab:36:b6:d6:c0:bb:b9:
84:1f:ed:6a:24:c7:77:4c:00:89:58:11:72:d1:79:
7b:cc:64:10:d2:5d:be:35:30:6e:3b:f9:57:2c:e3:
0c:1e:08:e0:a8:74:68:1a:b1:79:d2:05:e5:15:d8:
11:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:CA:D1:85:3C:9E:1B:73:C2:4D:00:EA:D0:4A:87:DF:E2:75:77:C6
X509v3 Authority Key Identifier:
keyid:B5:44:9B:08:EA:6A:26:7D:F7:36:6A:68:95:C7:C9:24:C2:F1:92:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tUSbCOpqJn33NmpolcfJJMLxkm0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6c0b54-b06e-4d44-8120-370b8688feaf/1/tUSbCOpqJn33NmpolcfJJMLxkm0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6c0b54-b06e-4d44-8120-370b8688feaf/1/tUSbCOpqJn33NmpolcfJJMLxkm0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:d1:a8:95:bc:44:36:e8:4a:87:3a:e7:f9:72:2d:54:fe:8a:
79:7a:fa:65:df:4e:06:4e:3d:6c:cf:47:4e:1e:ec:c8:11:3c:
04:37:68:f5:14:91:c1:5b:93:4d:a2:6d:25:b6:c3:e3:21:07:
62:2d:0a:aa:d8:f9:74:91:cd:e2:09:98:fb:6d:cf:96:df:a9:
7f:58:39:82:e7:c6:f0:b1:7c:3a:ab:35:bb:8a:81:b1:8d:c6:
d9:01:da:90:ae:90:ab:6b:6c:f5:0c:f5:f1:c9:d2:fa:56:e6:
1c:f7:1c:06:90:9c:34:06:e0:a8:7d:dc:2b:1d:e2:9e:07:b3:
95:7c:70:d0:9e:7a:49:12:c2:38:f0:32:ec:06:b7:66:53:92:
45:75:d0:f4:e1:31:d4:5a:5a:cf:d5:67:2a:18:b3:6e:97:6c:
71:d6:e3:9e:9e:0d:b2:33:64:40:5f:d2:a8:7b:98:2e:7f:39:
1a:91:bf:6c:c1:fd:59:77:1d:94:3b:fe:57:82:5f:f9:75:02:
40:3f:89:12:55:b0:01:9f:6d:91:ac:9d:47:cb:c5:68:b4:ef:
05:d0:23:9f:26:40:c3:4b:93:f5:31:bf:92:db:b8:b2:a0:cd:
9f:a9:41:0c:ca:33:14:96:45:3a:b1:26:6a:e3:db:ba:5d:96:
be:ac:52:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 10:21:59 2025 by rpki-client