Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/7486fd-3f81-4540-aaaa-0b3ed25f66e9/1/tbU3kY3ZAlHrNlOOcYHOkzx--EU.mft
File: tbU3kY3ZAlHrNlOOcYHOkzx--EU.mft (raw, json)
Hash identifier: x7gcf6oNisd95NdmiD5LBN04dUvNuv8GevK6Siuhhmw=
Subject key identifier: 7C:AF:39:60:DB:FC:DE:7D:3F:34:CB:29:2C:1B:1D:3A:57:88:90:B2
Authority key identifier: B5:B5:37:91:8D:D9:02:51:EB:36:53:8E:71:81:CE:93:3C:7E:F8:45
Certificate issuer: /CN=b5b537918dd90251eb36538e7181ce933c7ef845
Certificate serial: 019887A0776423CBAD66789B0926DC6DB753
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tbU3kY3ZAlHrNlOOcYHOkzx--EU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/7486fd-3f81-4540-aaaa-0b3ed25f66e9/1/tbU3kY3ZAlHrNlOOcYHOkzx--EU.mft
Manifest number: 1623
Signing time: Fri 08 Aug 2025 03:01:37 +0000
Manifest this update: Fri 08 Aug 2025 03:01:37 +0000
Manifest next update: Sat 09 Aug 2025 03:01:37 +0000
Files and hashes: 1: tbU3kY3ZAlHrNlOOcYHOkzx--EU.crl (hash: v6OkjNC93phAvDdODh+tT3JSYT550jMDNqewyafLxn4=)
2: y75cXyuDLpcYexdmkwYwYU3Mg-w.roa (hash: x/UMSX0QI4HQrUWQqpp/rIJY0lp7ztidnsmz2QLBnXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/7486fd-3f81-4540-aaaa-0b3ed25f66e9/1/tbU3kY3ZAlHrNlOOcYHOkzx--EU.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/7486fd-3f81-4540-aaaa-0b3ed25f66e9/1/tbU3kY3ZAlHrNlOOcYHOkzx--EU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tbU3kY3ZAlHrNlOOcYHOkzx--EU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 03:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:87:a0:77:64:23:cb:ad:66:78:9b:09:26:dc:6d:b7:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5b537918dd90251eb36538e7181ce933c7ef845
Validity
Not Before: Aug 8 03:01:37 2025 GMT
Not After : Aug 9 03:01:37 2025 GMT
Subject: CN=7caf3960dbfcde7d3f34cb292c1b1d3a578890b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:77:12:5a:09:07:37:8a:c6:0a:96:f6:04:88:
ac:f3:d1:ed:86:20:45:9b:15:95:ba:91:18:65:f0:
f0:f6:54:6f:e7:21:ee:00:2a:a7:4b:05:12:eb:52:
04:d3:ff:33:ef:e1:5b:c3:e9:6c:53:c2:c7:f4:4e:
e5:10:08:73:48:7a:bb:c8:8b:eb:f6:e5:20:bd:f2:
b6:51:62:9d:f2:44:4f:02:06:5a:b0:0d:2b:bb:33:
2b:9d:43:fa:c9:37:10:6f:10:a0:01:bf:6d:bd:58:
2c:31:dc:b6:a1:7a:a8:5a:3f:7e:3c:86:26:5a:c7:
dc:ca:c2:ae:ed:0d:24:d3:ba:f3:56:5e:62:3d:98:
af:8e:10:dc:55:65:1e:bc:9e:73:cc:a4:8e:c7:1d:
72:85:5b:3c:c8:cf:79:af:8a:8d:67:e3:17:97:a9:
93:41:ff:3f:53:9f:d1:a8:64:4f:7d:37:b5:74:0e:
46:19:a8:c1:49:18:29:d4:44:85:b0:18:7f:ad:de:
5d:fb:91:f1:2c:29:3d:5e:5a:87:90:9c:5a:8b:1a:
fa:f3:f0:d3:c7:1b:b6:04:34:28:db:be:78:1d:e8:
b5:6a:57:1f:68:81:b0:24:ee:17:a3:bf:25:13:e4:
b3:03:45:93:2a:2a:4f:8f:20:d9:05:c2:21:3e:1b:
fa:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:AF:39:60:DB:FC:DE:7D:3F:34:CB:29:2C:1B:1D:3A:57:88:90:B2
X509v3 Authority Key Identifier:
keyid:B5:B5:37:91:8D:D9:02:51:EB:36:53:8E:71:81:CE:93:3C:7E:F8:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tbU3kY3ZAlHrNlOOcYHOkzx--EU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7486fd-3f81-4540-aaaa-0b3ed25f66e9/1/tbU3kY3ZAlHrNlOOcYHOkzx--EU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7486fd-3f81-4540-aaaa-0b3ed25f66e9/1/tbU3kY3ZAlHrNlOOcYHOkzx--EU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:f3:54:66:77:87:67:01:5d:72:57:59:e5:89:14:56:57:05:
8e:57:4f:41:53:cd:5c:25:1c:70:dd:5e:41:be:e9:b4:29:1d:
aa:e0:c2:17:99:16:8d:5d:46:56:28:a3:e8:0a:fd:d1:87:16:
41:92:83:29:9d:b7:cd:80:68:ba:8d:89:ff:35:00:9f:c1:6f:
76:5b:79:bb:8c:87:d0:27:f7:71:78:ca:b7:d4:df:34:a3:99:
dc:de:48:2b:c8:e9:e4:25:0f:20:06:1c:32:01:ec:cb:49:60:
56:ee:97:25:18:ec:c9:2b:ac:54:84:7c:ec:fc:03:df:63:43:
8f:cd:11:7e:70:0d:9d:2a:85:3d:56:2c:74:3c:87:6f:26:c3:
59:61:e3:48:fc:68:c1:02:ff:ae:03:b4:ab:ef:25:1b:9a:89:
7f:40:d2:52:c1:dd:da:4c:c3:e5:42:65:d7:9b:29:36:e9:58:
93:6b:d4:11:d4:df:ef:65:5a:60:18:43:cf:8d:a3:c6:79:9d:
f1:28:60:77:67:ca:b7:0d:61:5d:c7:23:30:50:bb:a7:95:02:
ae:e3:96:8d:bc:de:af:80:30:a8:84:b5:1c:04:16:3d:b2:6b:
27:7a:e0:85:7c:d1:12:a6:3d:91:39:28:54:fd:42:b9:34:a3:
f4:71:6a:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 12:52:06 2025 by rpki-client