Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/b17ca4-2e2e-415a-adde-77257e04765f/1/TuBDL1Qp2GHXdDv8MdetAZYopes.mft
File: TuBDL1Qp2GHXdDv8MdetAZYopes.mft (raw, json)
Hash identifier: 0PRKj4ZJOIPtSbVNmacNtg3gdOn780AlsBHmz3NlzJU=
Subject key identifier: 69:89:C7:58:48:BA:71:BF:A8:3C:02:7E:93:68:CD:DE:F6:47:D6:60
Authority key identifier: 4E:E0:43:2F:54:29:D8:61:D7:74:3B:FC:31:D7:AD:01:96:28:A5:EB
Certificate issuer: /CN=4ee0432f5429d861d7743bfc31d7ad019628a5eb
Certificate serial: 019872CFD415A6F976E6554D63445A0F8655
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TuBDL1Qp2GHXdDv8MdetAZYopes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/b17ca4-2e2e-415a-adde-77257e04765f/1/TuBDL1Qp2GHXdDv8MdetAZYopes.mft
Manifest number: 1616
Signing time: Mon 04 Aug 2025 02:01:19 +0000
Manifest this update: Mon 04 Aug 2025 02:01:19 +0000
Manifest next update: Tue 05 Aug 2025 02:01:19 +0000
Files and hashes: 1: TuBDL1Qp2GHXdDv8MdetAZYopes.crl (hash: 6rtGYJHTpNor9ahWYxn6HwUK+1BxxKsSOqk2NPGevHs=)
2: V-oDOUzOLBq0RjtBmicPhW9GyFQ.roa (hash: iuJ5R7a61uv63vftS3TPCits4UE3OCvlD1Io0BilMuI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/b17ca4-2e2e-415a-adde-77257e04765f/1/TuBDL1Qp2GHXdDv8MdetAZYopes.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/b17ca4-2e2e-415a-adde-77257e04765f/1/TuBDL1Qp2GHXdDv8MdetAZYopes.mft
rsync://rpki.ripe.net/repository/DEFAULT/TuBDL1Qp2GHXdDv8MdetAZYopes.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:d4:15:a6:f9:76:e6:55:4d:63:44:5a:0f:86:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ee0432f5429d861d7743bfc31d7ad019628a5eb
Validity
Not Before: Aug 4 02:01:19 2025 GMT
Not After : Aug 5 02:01:19 2025 GMT
Subject: CN=6989c75848ba71bfa83c027e9368cddef647d660
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:cc:2e:e2:c6:8f:4c:38:da:5e:c6:9a:00:e0:
13:cc:3d:4c:c9:79:cb:f6:21:75:32:a8:c8:53:2a:
4b:06:d0:a5:0a:90:9c:71:6d:64:1c:0a:0d:ac:3d:
e6:fe:39:a2:68:7a:b8:e8:2d:a9:3d:3f:dc:79:ca:
75:db:ab:7d:06:bd:19:11:ad:a9:2a:26:f2:b2:4b:
7e:8b:8d:c9:12:64:41:4b:26:43:2a:21:d8:b9:69:
5c:c0:4c:16:f4:4c:fe:47:e6:7e:af:03:d1:e4:d4:
c0:ad:d6:39:b6:61:47:79:cb:0b:ca:bc:2e:98:7c:
01:ae:2f:33:f8:63:4f:fd:48:84:5b:80:c0:02:49:
2e:96:1a:9d:52:c9:ab:ee:31:40:b6:78:88:a4:56:
16:21:86:fa:cf:9b:3a:1b:ee:5a:80:83:fc:fd:e3:
4e:55:d1:9b:94:2d:07:eb:43:67:6a:2f:e0:f2:c7:
1a:dd:61:30:ab:63:8a:f2:6c:14:3d:0a:12:98:d2:
96:50:0f:a7:1b:91:7a:23:06:ee:6b:67:ad:6a:88:
59:2d:d6:1d:2c:ad:c8:5c:55:a8:55:43:93:78:21:
57:ab:62:74:7a:f4:af:2b:2c:62:b3:5f:95:c9:94:
7c:ac:56:d1:6a:b5:d7:8f:f8:bc:55:6f:48:82:fe:
98:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:89:C7:58:48:BA:71:BF:A8:3C:02:7E:93:68:CD:DE:F6:47:D6:60
X509v3 Authority Key Identifier:
keyid:4E:E0:43:2F:54:29:D8:61:D7:74:3B:FC:31:D7:AD:01:96:28:A5:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuBDL1Qp2GHXdDv8MdetAZYopes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b17ca4-2e2e-415a-adde-77257e04765f/1/TuBDL1Qp2GHXdDv8MdetAZYopes.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b17ca4-2e2e-415a-adde-77257e04765f/1/TuBDL1Qp2GHXdDv8MdetAZYopes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:25:f4:fb:01:d4:17:c6:16:66:b2:c3:c3:db:4c:35:f7:b5:
f4:6f:0b:24:1a:f1:0a:58:12:98:22:9d:89:0d:68:44:9e:fa:
0a:d2:7d:85:af:e0:2f:60:bf:28:4d:73:7a:a7:20:a0:d5:a3:
4a:f0:95:22:a1:81:dc:45:29:a9:f2:d0:02:0c:6a:66:e9:68:
49:f8:ea:fa:0d:01:4b:f3:83:d2:4d:7e:10:12:e5:99:24:18:
f1:8b:a0:64:17:6a:0d:d2:ff:02:9c:ab:8d:97:16:1f:2d:6e:
9d:50:9e:86:b9:38:d9:5a:1f:67:37:a7:35:ea:2a:50:f7:09:
3f:8d:c3:e3:49:b2:a1:ac:84:68:10:de:10:c6:b3:ce:35:a0:
c5:22:3b:e8:a4:1f:0c:31:1a:38:03:71:23:76:7b:cb:a5:39:
ba:bb:47:18:34:9a:9e:da:c9:18:c7:2c:ae:8e:1f:69:21:94:
42:77:ee:47:1a:a3:30:56:a0:44:9d:8b:fb:77:5a:24:3a:30:
ec:80:a6:ae:db:31:c8:06:f1:20:d1:d3:75:85:f6:77:8d:f4:
44:2e:65:6d:25:5f:4a:36:c9:87:2f:81:d0:5c:1b:1f:f9:fe:
e8:e6:be:3e:07:bc:e7:c7:b0:2e:23:4c:fb:c4:6d:79:17:b7:
91:d9:83:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:10:52 2025 by rpki-client