Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/18c8d5-089a-470e-906d-dc4e7988a28a/1/tBuxzdW4a-d4BoidLhsgKswnsiU.mft
File: tBuxzdW4a-d4BoidLhsgKswnsiU.mft (raw, json)
Hash identifier: BRmq0JQQoVNLtT2P+o0QeyutoasOoDobcNwGT8YQr5A=
Subject key identifier: 0A:60:B2:F0:9A:54:51:CA:A9:7D:26:44:43:1E:9E:73:81:EE:E0:CE
Authority key identifier: B4:1B:B1:CD:D5:B8:6B:E7:78:06:88:9D:2E:1B:20:2A:CC:27:B2:25
Certificate issuer: /CN=b41bb1cdd5b86be77806889d2e1b202acc27b225
Certificate serial: 0197790B1BBFA2A09FA41FC0CEFCFC49F21F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tBuxzdW4a-d4BoidLhsgKswnsiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/18c8d5-089a-470e-906d-dc4e7988a28a/1/tBuxzdW4a-d4BoidLhsgKswnsiU.mft
Manifest number: 0263
Signing time: Mon 16 Jun 2025 14:01:00 +0000
Manifest this update: Mon 16 Jun 2025 14:01:00 +0000
Manifest next update: Tue 17 Jun 2025 14:01:00 +0000
Files and hashes: 1: 7E7gyymF8j2toEenFO04AQuZbVQ.roa (hash: HKny0hIiEORMsHrCnF3pLBTGlpUFzpGxVsMxMmuOnho=)
2: tBuxzdW4a-d4BoidLhsgKswnsiU.crl (hash: OTLRLKWK3v8YmMRS7F0KL+imVjG6agP9xlML3gVt6wE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/18c8d5-089a-470e-906d-dc4e7988a28a/1/tBuxzdW4a-d4BoidLhsgKswnsiU.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/18c8d5-089a-470e-906d-dc4e7988a28a/1/tBuxzdW4a-d4BoidLhsgKswnsiU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tBuxzdW4a-d4BoidLhsgKswnsiU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 14:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:79:0b:1b:bf:a2:a0:9f:a4:1f:c0:ce:fc:fc:49:f2:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b41bb1cdd5b86be77806889d2e1b202acc27b225
Validity
Not Before: Jun 16 14:01:00 2025 GMT
Not After : Jun 17 14:01:00 2025 GMT
Subject: CN=0a60b2f09a5451caa97d2644431e9e7381eee0ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:31:c0:b9:88:8c:21:5c:63:a2:ea:9b:93:30:
9d:d6:6b:f9:5b:fc:02:ce:0c:71:00:3f:d3:cc:89:
55:eb:61:59:50:bf:96:29:3a:8c:25:02:28:31:33:
11:0c:07:be:9f:02:17:8e:bd:30:ce:43:e0:ec:fd:
01:32:5c:17:2c:46:d6:b8:b0:2c:5a:18:f3:4e:b5:
65:2b:3d:66:9f:ae:cf:63:5d:a2:3d:8e:ae:97:29:
5f:7a:66:6a:b5:3d:14:bf:1e:ca:fa:16:1b:87:5d:
49:c8:3a:77:b3:61:f7:5c:2d:7a:4e:c0:95:b2:3f:
64:50:f0:6a:5d:93:74:fc:dd:46:95:1b:11:6b:0f:
32:d6:de:88:b6:8f:7e:eb:70:59:ce:36:08:fb:a5:
1d:25:0f:8b:7a:8e:06:48:a4:9c:49:be:0d:19:62:
59:9d:02:58:67:f4:f1:f1:d0:9b:0b:65:ae:a6:a9:
8f:d9:e6:5b:3e:bf:e4:5c:f6:53:16:bd:11:fe:e4:
26:7f:e2:fe:98:d1:24:84:64:85:16:59:1e:9d:8a:
0c:f4:55:28:1a:97:3e:c6:0e:a9:f5:94:09:d9:dc:
e2:60:56:3d:47:2e:3f:35:86:29:d0:cb:10:ea:52:
03:ac:32:ea:f8:ac:23:b5:09:cb:a0:41:47:b9:f5:
09:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:60:B2:F0:9A:54:51:CA:A9:7D:26:44:43:1E:9E:73:81:EE:E0:CE
X509v3 Authority Key Identifier:
keyid:B4:1B:B1:CD:D5:B8:6B:E7:78:06:88:9D:2E:1B:20:2A:CC:27:B2:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tBuxzdW4a-d4BoidLhsgKswnsiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/18c8d5-089a-470e-906d-dc4e7988a28a/1/tBuxzdW4a-d4BoidLhsgKswnsiU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/18c8d5-089a-470e-906d-dc4e7988a28a/1/tBuxzdW4a-d4BoidLhsgKswnsiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:0f:5b:8c:ef:cd:67:f4:9a:5b:5e:af:92:a0:95:0f:72:15:
0b:b8:86:ee:ba:be:64:9b:eb:16:cf:04:ca:98:d5:17:c6:c3:
ad:fc:f5:01:20:45:73:3f:80:2d:71:2a:49:59:59:b3:98:0e:
ed:62:53:3c:62:b8:c6:03:a1:cc:d9:59:65:71:c1:6f:4b:ff:
e4:b3:4a:1c:bb:61:99:d7:fe:a3:1b:87:c8:76:57:4d:37:ce:
eb:7f:ce:68:f4:b1:8a:cd:78:e7:a3:17:41:ff:67:95:a1:e5:
42:88:1c:b0:a9:d2:ee:f3:3b:96:91:ca:1c:92:12:60:54:10:
e6:a0:dd:08:60:b5:dc:ee:cd:72:cb:9f:18:14:2c:c1:d3:29:
17:76:3f:97:16:d0:8a:99:2e:ac:15:79:52:e1:76:82:ca:d3:
79:53:6e:20:8e:41:b1:d9:79:2d:dd:05:80:cb:e4:43:f8:25:
59:b3:a4:5e:37:ce:8a:d5:c6:56:48:eb:48:3c:02:fe:bd:9a:
e5:59:7b:00:80:3b:da:53:b6:b9:2f:2d:fa:b4:a2:50:ae:fa:
b4:80:3a:48:d4:99:fd:c0:7a:d3:55:f6:94:de:0a:b3:51:bf:
5c:c1:80:fd:6d:72:c8:11:91:4c:78:40:16:c0:a8:b8:ad:6f:
25:b9:63:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 19:16:31 2025 by rpki-client