Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/d282be-7ca5-400f-be84-cfab10d30693/1/tTRCGKSIC1AMAzMh52vXi088Flg.mft
File: tTRCGKSIC1AMAzMh52vXi088Flg.mft (raw, json)
Hash identifier: nuZMwkYgUjaRF0JtOwJpnGBpG886CIjBG2yb5sUkQHo=
Subject key identifier: 7E:28:B3:6A:02:E4:36:4D:83:73:60:8C:85:EF:01:01:D9:65:0A:B2
Authority key identifier: B5:34:42:18:A4:88:0B:50:0C:03:33:21:E7:6B:D7:8B:4F:3C:16:58
Certificate issuer: /CN=b5344218a4880b500c033321e76bd78b4f3c1658
Certificate serial: 01987D8ACD66B2F91EB36083D70DEFA06F22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tTRCGKSIC1AMAzMh52vXi088Flg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/d282be-7ca5-400f-be84-cfab10d30693/1/tTRCGKSIC1AMAzMh52vXi088Flg.mft
Manifest number: 1621
Signing time: Wed 06 Aug 2025 04:01:45 +0000
Manifest this update: Wed 06 Aug 2025 04:01:45 +0000
Manifest next update: Thu 07 Aug 2025 04:01:45 +0000
Files and hashes: 1: 8Pm542mxmtNx79Ipw8aJ3MUUUlw.roa (hash: wUyn8TfNac0yPrEyoAGwGRLxadfovmjunsKwqoO4Tic=)
2: MK5kvHBNAAlnKRq0I1CvZhVF9Ng.roa (hash: ku7EY/yVBZoDpf18kdWwR04OCaLbQDYij0LYSvbt0Ho=)
3: tTRCGKSIC1AMAzMh52vXi088Flg.crl (hash: eAGtpVbBQyeyhW1WIgsE+KfFbgI6SGSYnNTCIaPnpk4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/d282be-7ca5-400f-be84-cfab10d30693/1/tTRCGKSIC1AMAzMh52vXi088Flg.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/d282be-7ca5-400f-be84-cfab10d30693/1/tTRCGKSIC1AMAzMh52vXi088Flg.mft
rsync://rpki.ripe.net/repository/DEFAULT/tTRCGKSIC1AMAzMh52vXi088Flg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 04:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:8a:cd:66:b2:f9:1e:b3:60:83:d7:0d:ef:a0:6f:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5344218a4880b500c033321e76bd78b4f3c1658
Validity
Not Before: Aug 6 04:01:45 2025 GMT
Not After : Aug 7 04:01:45 2025 GMT
Subject: CN=7e28b36a02e4364d8373608c85ef0101d9650ab2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:59:fd:9b:2c:da:22:87:e9:e7:7b:37:3b:cf:
f2:28:8a:70:1c:1e:40:05:b4:e5:99:fd:f3:63:86:
cc:70:bc:ae:0a:f3:3b:0d:bd:2e:34:e3:fc:41:24:
a0:d2:08:c6:11:2a:2a:03:78:6a:60:96:75:dc:26:
14:11:02:ad:d1:a2:01:18:08:0c:0e:eb:1e:6d:02:
52:a8:dc:79:8b:ee:53:bc:09:32:95:6d:8d:63:27:
de:d1:c3:ea:3a:2c:3e:6c:7e:00:23:08:7b:f4:c5:
5b:6b:7b:90:c7:31:cb:b9:b2:cb:bc:47:9d:26:11:
4e:6c:9a:8c:19:75:3c:05:08:03:53:8c:69:dd:0f:
17:95:b2:1a:99:8a:88:93:46:df:c2:5a:4e:ca:2c:
7e:12:46:7a:b2:5c:19:57:5e:a9:82:87:95:85:38:
f0:48:e2:d2:a1:5b:9a:3e:f1:95:49:94:35:26:af:
b6:b6:28:3d:03:91:78:cd:2c:20:11:49:29:77:f8:
80:53:87:46:99:ec:3f:e7:65:91:1f:83:05:73:ea:
f9:05:b4:ad:af:98:07:35:3a:49:e0:68:12:f8:0e:
05:e6:33:80:2f:12:d7:a0:64:77:97:3f:8f:6a:12:
b8:3d:aa:3d:1c:81:8f:a9:0c:4c:26:81:3f:66:a1:
3b:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:28:B3:6A:02:E4:36:4D:83:73:60:8C:85:EF:01:01:D9:65:0A:B2
X509v3 Authority Key Identifier:
keyid:B5:34:42:18:A4:88:0B:50:0C:03:33:21:E7:6B:D7:8B:4F:3C:16:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tTRCGKSIC1AMAzMh52vXi088Flg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/d282be-7ca5-400f-be84-cfab10d30693/1/tTRCGKSIC1AMAzMh52vXi088Flg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/d282be-7ca5-400f-be84-cfab10d30693/1/tTRCGKSIC1AMAzMh52vXi088Flg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:bb:24:63:60:44:8c:69:54:79:6c:2f:5f:9b:32:0e:b2:6e:
6b:5d:99:5b:47:51:39:73:dc:25:00:53:3c:ed:cd:d2:01:1e:
1d:ab:8c:b6:ca:9b:19:3b:6f:47:dd:27:2e:c0:06:45:96:e4:
b3:9b:73:05:92:05:e1:cf:7f:57:16:c0:97:0b:fa:bd:ca:d9:
f9:25:03:d8:6e:37:69:d6:3d:31:42:69:1b:c0:30:b6:24:8c:
23:b1:d1:d9:6b:27:55:f4:d8:5e:79:82:8e:ba:ae:a2:21:2f:
b2:dc:a0:82:03:3a:4a:ed:32:89:e9:8a:f5:9e:99:b5:fd:87:
34:98:09:2a:79:c7:dc:88:ea:7d:83:c4:37:63:95:f3:60:78:
24:77:eb:b4:85:a5:4c:06:0d:64:b0:2e:ff:41:8b:e9:fa:02:
ea:4c:7d:04:96:1a:cd:d2:34:40:02:44:b2:8f:6b:2f:51:e3:
14:81:bf:fc:0b:c0:db:c7:6d:7b:c1:26:96:d7:a7:75:57:d7:
c3:ac:bf:f6:4b:81:08:6e:9b:f4:ba:e8:bc:d3:15:1a:a4:af:
38:c8:31:02:e8:92:45:8b:12:9d:25:3e:24:6b:32:21:83:ef:
31:77:81:46:9c:f6:d1:04:6d:0d:bc:10:06:7d:77:91:37:2c:
28:17:a4:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:14:04 2025 by rpki-client