Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/533416-5192-4944-ab50-813c76ff40b4/1/tUXkNLukc3BtqDNv2gFrsuaLNiM.mft
File: tUXkNLukc3BtqDNv2gFrsuaLNiM.mft (raw, json)
Hash identifier: eHpgfib8rgeIGxLdpaMzeEf9V6p1GgFVbs2jiQ/dGTg=
Subject key identifier: 38:3B:03:C1:CD:EB:0E:29:B8:11:3F:CB:E7:45:A8:CB:8D:A2:AE:30
Authority key identifier: B5:45:E4:34:BB:A4:73:70:6D:A8:33:6F:DA:01:6B:B2:E6:8B:36:23
Certificate issuer: /CN=b545e434bba473706da8336fda016bb2e68b3623
Certificate serial: 01976D066F3C820033AC474F48BEA4E831B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tUXkNLukc3BtqDNv2gFrsuaLNiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/533416-5192-4944-ab50-813c76ff40b4/1/tUXkNLukc3BtqDNv2gFrsuaLNiM.mft
Manifest number: 158F
Signing time: Sat 14 Jun 2025 06:00:27 +0000
Manifest this update: Sat 14 Jun 2025 06:00:27 +0000
Manifest next update: Sun 15 Jun 2025 06:00:27 +0000
Files and hashes: 1: 8c1jWLNSWx4cTuK9ZEnAPJAmwwU.roa (hash: zNldb7jsDCF4ycQz0X2hLLJLeALZnhbBqN35ToOj1oI=)
2: tUXkNLukc3BtqDNv2gFrsuaLNiM.crl (hash: 8y3LYpZ6X2iAtxqmb8kCTl6t49eeuJYcmYNu4bGVChA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/533416-5192-4944-ab50-813c76ff40b4/1/tUXkNLukc3BtqDNv2gFrsuaLNiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/533416-5192-4944-ab50-813c76ff40b4/1/tUXkNLukc3BtqDNv2gFrsuaLNiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/tUXkNLukc3BtqDNv2gFrsuaLNiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:06:6f:3c:82:00:33:ac:47:4f:48:be:a4:e8:31:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b545e434bba473706da8336fda016bb2e68b3623
Validity
Not Before: Jun 14 06:00:27 2025 GMT
Not After : Jun 15 06:00:27 2025 GMT
Subject: CN=383b03c1cdeb0e29b8113fcbe745a8cb8da2ae30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1f:e0:f7:33:ba:1d:3e:ed:a6:e7:84:2d:cc:
6b:8c:69:99:68:1f:42:ca:6a:27:f3:ae:fb:68:1e:
f5:29:9e:8f:9b:0e:51:55:65:d9:a8:27:b2:74:ac:
ca:43:20:d6:43:73:1c:c0:ca:e5:b5:2e:5e:39:a0:
33:5a:da:b4:fd:e3:b6:27:33:e6:56:4d:d4:8a:f7:
32:e6:5e:04:8b:db:d2:61:31:c9:29:20:d9:5c:4a:
42:f4:2f:f1:32:d4:77:53:18:c2:8e:96:a4:cc:d6:
f9:cf:d2:18:a2:2d:1e:9d:f3:ce:f5:83:67:2f:d2:
2b:83:38:10:0e:8b:97:d1:3c:93:62:c6:8d:5d:27:
04:15:43:5c:52:55:57:10:d2:ba:04:43:3a:79:77:
47:1b:cc:20:94:91:9d:92:7c:b6:d8:7c:c4:92:96:
93:ea:ae:b6:8c:8e:58:25:55:4a:38:03:e6:b5:e9:
b6:58:2c:d6:71:00:99:fb:44:49:2e:c9:99:7c:b7:
9f:52:05:00:4b:e7:2c:b5:a1:df:80:1c:78:ab:82:
3c:77:44:83:c7:f6:56:a4:14:c9:bc:29:38:0a:6b:
29:05:2c:5c:0e:42:c8:21:72:fd:01:5d:0a:d9:a4:
f5:2a:e0:ee:0c:c1:7c:2e:7f:4e:41:ff:76:f2:34:
9e:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:3B:03:C1:CD:EB:0E:29:B8:11:3F:CB:E7:45:A8:CB:8D:A2:AE:30
X509v3 Authority Key Identifier:
keyid:B5:45:E4:34:BB:A4:73:70:6D:A8:33:6F:DA:01:6B:B2:E6:8B:36:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tUXkNLukc3BtqDNv2gFrsuaLNiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/533416-5192-4944-ab50-813c76ff40b4/1/tUXkNLukc3BtqDNv2gFrsuaLNiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/533416-5192-4944-ab50-813c76ff40b4/1/tUXkNLukc3BtqDNv2gFrsuaLNiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:5c:3f:e4:e9:2c:f9:b9:1c:69:32:36:b8:af:c3:bd:4d:76:
a9:08:ed:4e:1e:f3:a8:d5:2d:c3:3e:35:4c:eb:de:9b:5e:c9:
84:5a:4a:59:da:0f:ea:4e:06:e2:2c:0e:21:1e:d3:dd:f7:bb:
05:96:30:6d:1a:c5:32:74:90:e8:27:0a:e5:d0:fc:b5:cc:da:
6e:0d:c4:cb:d0:a3:84:0c:22:eb:70:14:13:36:e7:d2:5a:14:
83:d9:80:f0:9d:76:91:76:ba:cc:de:27:3a:f2:f5:13:ec:ef:
22:18:9e:51:a0:f2:3c:a8:96:3d:5e:17:5d:bd:30:43:40:93:
99:30:e3:22:92:2d:aa:bb:9d:db:77:d6:13:d0:dd:d3:39:86:
5b:7d:c8:aa:47:17:3f:6d:e6:a9:87:d0:92:90:02:70:07:34:
83:15:9f:e3:a5:2f:02:32:ff:dd:2e:a4:7c:8c:74:2b:7f:3e:
60:d4:d6:54:2d:89:8f:44:ec:d0:d3:7d:18:86:d9:72:73:f4:
a4:5e:42:9c:a5:d8:bc:6a:d3:58:73:00:8c:1b:6d:d2:7f:1b:
53:69:7c:96:f4:45:2a:8a:69:53:e9:91:ea:1c:a7:9a:6c:9f:
b8:98:79:84:39:23:bb:e9:1a:f1:2f:75:ed:c2:6a:82:86:c5:
c3:39:48:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:35:57 2025 by rpki-client