Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/bf748d-c4ca-4fd1-a59d-4060f211f3c3/1/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.mft
File: tFOis_uD2Gx4BswGYNgpEZ2TdbQ.mft (raw, json)
Hash identifier: iSWI34HBrjzsL63yTR1GNUvfJqzvWezLRvdn8BFMCn8=
Subject key identifier: 04:D9:CF:B3:27:A6:36:B6:18:D4:C6:6C:86:72:1A:92:03:87:83:90
Authority key identifier: B4:53:A2:B3:FB:83:D8:6C:78:06:CC:06:60:D8:29:11:9D:93:75:B4
Certificate issuer: /CN=b453a2b3fb83d86c7806cc0660d829119d9375b4
Certificate serial: 01977E9F2DAD7F5FA09C8C9B90C39F6FBBC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/bf748d-c4ca-4fd1-a59d-4060f211f3c3/1/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.mft
Manifest number: 066F
Signing time: Tue 17 Jun 2025 16:00:50 +0000
Manifest this update: Tue 17 Jun 2025 16:00:50 +0000
Manifest next update: Wed 18 Jun 2025 16:00:50 +0000
Files and hashes: 1: G4FFwIyiIU29W95QZk9-MWiLljM.roa (hash: iDaSzS67wgh1om9NMNs4mTJZEfMH7AGf6ifeuTsPDRg=)
2: tFOis_uD2Gx4BswGYNgpEZ2TdbQ.crl (hash: 9kk1hgAlkZ4I4qiTfoO3H3EUsbyG74cDuCdoeWAur4g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/bf748d-c4ca-4fd1-a59d-4060f211f3c3/1/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/bf748d-c4ca-4fd1-a59d-4060f211f3c3/1/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 13:26:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7e:9f:2d:ad:7f:5f:a0:9c:8c:9b:90:c3:9f:6f:bb:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b453a2b3fb83d86c7806cc0660d829119d9375b4
Validity
Not Before: Jun 17 16:00:50 2025 GMT
Not After : Jun 18 16:00:50 2025 GMT
Subject: CN=04d9cfb327a636b618d4c66c86721a9203878390
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d3:68:e4:35:f1:2d:bc:3d:3c:b2:10:2b:67:
be:96:5b:a0:5c:d1:15:69:21:ca:dc:9e:5b:67:ef:
65:05:29:32:da:35:6e:47:9f:61:f3:56:40:7f:f6:
30:67:d9:f5:f9:bd:a3:20:68:f9:a3:b0:95:6f:bb:
c9:22:7f:67:8b:b4:db:a0:2d:14:d7:9e:ab:0d:63:
9b:36:aa:69:0c:c3:1d:84:c6:d2:0a:3e:83:e2:71:
ac:c5:00:76:ab:ed:b9:86:d3:64:32:c0:1a:3c:25:
8f:fb:8e:36:1a:a6:07:9b:ee:8a:24:77:3b:a1:0a:
05:e6:30:c1:28:3c:df:a1:76:a9:1a:f3:c8:e2:bd:
45:19:74:85:ae:37:cc:e1:d4:3b:7a:d0:67:95:94:
16:21:b7:55:50:2a:e0:57:75:24:29:d0:7d:56:ac:
59:4b:29:d8:08:05:70:c0:91:6e:8b:7f:6d:26:62:
6c:2a:67:89:ea:11:fc:da:65:c9:e6:4d:a6:75:f7:
e9:07:00:30:98:b7:c9:05:08:b1:56:0a:69:36:08:
47:84:b9:4b:7f:b6:10:c5:37:94:71:56:69:65:d4:
c5:7e:13:14:c7:e2:be:95:47:62:2f:db:4c:b5:25:
9d:d8:73:ce:1f:d6:3b:80:5c:63:98:28:e8:d8:0a:
97:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:D9:CF:B3:27:A6:36:B6:18:D4:C6:6C:86:72:1A:92:03:87:83:90
X509v3 Authority Key Identifier:
keyid:B4:53:A2:B3:FB:83:D8:6C:78:06:CC:06:60:D8:29:11:9D:93:75:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/bf748d-c4ca-4fd1-a59d-4060f211f3c3/1/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/bf748d-c4ca-4fd1-a59d-4060f211f3c3/1/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dc:2c:d0:af:1f:93:73:88:4e:15:ec:d9:9c:88:9f:5e:47:ec:
4e:ae:bd:f4:1e:1f:14:41:58:06:b9:d8:27:bb:b9:03:98:88:
c8:16:5b:24:a1:a3:51:e7:ce:ad:2b:8a:93:7f:36:6a:4c:d7:
61:ad:73:1b:f5:ab:e9:b0:ef:48:6c:17:61:60:31:2d:0d:c8:
2c:0c:7e:e1:e5:f1:94:17:28:29:2d:3b:95:9a:d2:6a:1f:ce:
b8:9d:30:ba:ef:fd:e4:b3:15:f2:6c:3e:4a:28:49:1f:ef:4d:
bd:27:f3:73:68:30:49:68:8a:af:e3:f4:78:ce:8f:c1:08:b1:
b6:49:70:81:45:42:0a:af:c6:6c:ca:1c:f5:ec:8b:94:a4:3a:
01:f3:c8:46:4e:b8:90:ef:0a:7b:21:9b:c4:3d:4d:e2:eb:c5:
ae:99:33:74:b6:d5:af:39:77:8c:74:66:b4:6e:c2:e1:92:ff:
0a:6b:9d:44:63:a0:08:09:33:29:2a:75:87:9a:86:60:c4:54:
dc:2c:fd:3b:74:b6:51:0c:8b:35:97:92:d2:10:4e:d7:fb:b5:
67:34:1e:67:03:f0:25:b0:a8:94:9d:64:2b:cd:7b:25:43:5c:
7a:c2:23:98:72:ca:20:8a:ac:87:ad:d1:2e:cd:e3:53:c4:7c:
33:44:3e:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 18:08:28 2025 by rpki-client