Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/851902-5050-46b2-b452-0599f0b2b09a/1/tMflb0aH6hstd2PQiI0QUCNbV0s.mft
File: tMflb0aH6hstd2PQiI0QUCNbV0s.mft (raw, json)
Hash identifier: yzAKApxs0eKXI9Vf4oU/YnoeUJgRuo4B3ADwZifOTnY=
Subject key identifier: 75:8B:21:0F:39:3F:FD:3B:7A:8F:22:00:7B:6A:36:9F:92:FD:2C:76
Authority key identifier: B4:C7:E5:6F:46:87:EA:1B:2D:77:63:D0:88:8D:10:50:23:5B:57:4B
Certificate issuer: /CN=b4c7e56f4687ea1b2d7763d0888d1050235b574b
Certificate serial: 01976EBDEDE0080DE73E4763F0024F00BE3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tMflb0aH6hstd2PQiI0QUCNbV0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/851902-5050-46b2-b452-0599f0b2b09a/1/tMflb0aH6hstd2PQiI0QUCNbV0s.mft
Manifest number: 1521
Signing time: Sat 14 Jun 2025 14:00:30 +0000
Manifest this update: Sat 14 Jun 2025 14:00:30 +0000
Manifest next update: Sun 15 Jun 2025 14:00:30 +0000
Files and hashes: 1: fVF1mzV7lYVHRMo8LnZ24vMBIsw.roa (hash: xj9vjyKVHbKjwLJzRwcUb2ujBs2KI8YOtyKmg5bMiko=)
2: tMflb0aH6hstd2PQiI0QUCNbV0s.crl (hash: 4PD2EefaAllcFgWlm513VswHljnZLeNHesMu3nIXb6s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/851902-5050-46b2-b452-0599f0b2b09a/1/tMflb0aH6hstd2PQiI0QUCNbV0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/851902-5050-46b2-b452-0599f0b2b09a/1/tMflb0aH6hstd2PQiI0QUCNbV0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/tMflb0aH6hstd2PQiI0QUCNbV0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:bd:ed:e0:08:0d:e7:3e:47:63:f0:02:4f:00:be:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4c7e56f4687ea1b2d7763d0888d1050235b574b
Validity
Not Before: Jun 14 14:00:30 2025 GMT
Not After : Jun 15 14:00:30 2025 GMT
Subject: CN=758b210f393ffd3b7a8f22007b6a369f92fd2c76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:32:8b:76:66:13:15:32:ce:27:19:bf:13:7d:
01:6d:39:7a:06:82:80:cc:8d:d7:5f:76:ae:04:3b:
10:51:85:58:df:98:05:42:58:74:d0:22:36:25:81:
1a:2f:5c:cb:66:8d:9c:33:cf:b3:62:e8:03:9f:b0:
89:d6:30:3a:f3:4a:c4:1a:42:52:48:8a:6d:07:ec:
cd:e4:f4:71:36:a1:e8:c3:1c:b6:44:ee:ad:40:7d:
f6:b4:54:91:06:e1:81:0d:16:a9:49:ce:2a:e9:3a:
b1:69:b6:85:cb:aa:3e:e1:95:f5:f4:d1:c8:4d:11:
3d:0a:65:bf:ca:15:5a:7d:a7:5d:cf:98:90:43:54:
b1:33:0c:ff:3d:5a:44:ef:a4:dd:da:e5:bf:e6:9b:
77:e6:cf:79:ed:57:39:cb:20:fa:48:3a:62:e5:f3:
52:c7:2f:5e:c0:0a:9b:eb:33:19:95:f4:dc:0c:1c:
00:cb:49:c7:c5:fb:33:8e:45:08:72:cd:b1:74:b2:
64:a4:b7:c9:04:7c:18:df:64:2e:7a:14:27:de:db:
d3:8d:5d:af:ec:9d:b4:76:48:cc:2b:d5:e5:ec:cd:
71:aa:43:2a:03:b5:95:07:1c:e4:30:52:d7:90:34:
6e:8e:f5:82:ae:51:77:2a:92:6d:47:be:72:09:a0:
d5:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:8B:21:0F:39:3F:FD:3B:7A:8F:22:00:7B:6A:36:9F:92:FD:2C:76
X509v3 Authority Key Identifier:
keyid:B4:C7:E5:6F:46:87:EA:1B:2D:77:63:D0:88:8D:10:50:23:5B:57:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tMflb0aH6hstd2PQiI0QUCNbV0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/851902-5050-46b2-b452-0599f0b2b09a/1/tMflb0aH6hstd2PQiI0QUCNbV0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/851902-5050-46b2-b452-0599f0b2b09a/1/tMflb0aH6hstd2PQiI0QUCNbV0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:cc:1c:a2:49:d9:fb:99:81:95:c5:68:a4:e5:9a:0e:ae:18:
ac:4f:dc:f8:f1:b3:dc:bb:32:37:6f:93:4d:e6:ae:96:e5:75:
e5:33:a0:7d:f8:1b:3a:96:60:de:a1:55:3f:19:86:a9:55:72:
aa:83:33:b5:b4:d3:06:3c:c3:7f:3d:20:be:7e:8a:70:6e:8b:
02:ee:e9:b6:6d:e5:d3:25:ef:ea:49:21:bb:0d:e0:80:8a:cf:
6f:a1:54:05:f0:aa:bf:59:89:e3:7a:47:f2:f5:78:8b:78:06:
15:ef:30:72:d9:82:c7:06:4a:c4:8d:63:1d:4c:a4:ab:7b:9c:
eb:1f:65:16:49:fa:2f:0d:99:d7:db:dc:35:1b:81:75:92:b5:
e2:75:33:c3:a0:28:5c:22:09:b4:3f:ea:2c:b2:01:c0:b6:eb:
e6:76:3f:29:b8:3a:5c:83:28:1c:32:7a:47:3c:0a:f1:71:04:
7a:89:ae:b6:d0:07:3e:b3:81:19:da:da:63:37:ce:05:da:73:
d0:0b:b8:96:d8:15:9c:ff:f4:75:c2:08:2c:11:88:43:8f:c3:
6b:57:e3:8e:38:ff:0c:13:c0:b0:69:e3:36:cc:de:11:bc:94:
bc:dc:b5:30:5c:e2:77:b7:11:63:09:9e:2f:78:11:c3:3e:a5:
9e:e4:58:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 20:05:18 2025 by rpki-client