Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/dcd512-0cb7-49a0-a618-6fbb19483287/1/t060sgvFlKwro6pa7zDnTiXhVuE.mft
File: t060sgvFlKwro6pa7zDnTiXhVuE.mft (raw, json)
Hash identifier: tRaeYd6hUVZ9a88n5lpDWB0cQF7CbLKC/vJU4Vp9EU0=
Subject key identifier: BC:D2:97:B9:C8:91:D5:BF:83:EA:6A:CF:AC:93:5A:CF:BA:BE:52:2F
Authority key identifier: B7:4E:B4:B2:0B:C5:94:AC:2B:A3:AA:5A:EF:30:E7:4E:25:E1:56:E1
Certificate issuer: /CN=b74eb4b20bc594ac2ba3aa5aef30e74e25e156e1
Certificate serial: 01977CB10354691F64E8FE428E5AC63E435C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t060sgvFlKwro6pa7zDnTiXhVuE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/dcd512-0cb7-49a0-a618-6fbb19483287/1/t060sgvFlKwro6pa7zDnTiXhVuE.mft
Manifest number: 0A37
Signing time: Tue 17 Jun 2025 07:01:04 +0000
Manifest this update: Tue 17 Jun 2025 07:01:04 +0000
Manifest next update: Wed 18 Jun 2025 07:01:04 +0000
Files and hashes: 1: 96zfb_as6Uu1dQBioEPRjkMoH0A.roa (hash: ZbDgERbOZ82dnNJrpA+vEp4hFeMsEzejOuHoVOcv55k=)
2: t060sgvFlKwro6pa7zDnTiXhVuE.crl (hash: R2qcpd7YnSZBYorrlLPoxrtLOZo2UR9QRu1P89r0/Lc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/dcd512-0cb7-49a0-a618-6fbb19483287/1/t060sgvFlKwro6pa7zDnTiXhVuE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/dcd512-0cb7-49a0-a618-6fbb19483287/1/t060sgvFlKwro6pa7zDnTiXhVuE.mft
rsync://rpki.ripe.net/repository/DEFAULT/t060sgvFlKwro6pa7zDnTiXhVuE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 07:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7c:b1:03:54:69:1f:64:e8:fe:42:8e:5a:c6:3e:43:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b74eb4b20bc594ac2ba3aa5aef30e74e25e156e1
Validity
Not Before: Jun 17 07:01:04 2025 GMT
Not After : Jun 18 07:01:04 2025 GMT
Subject: CN=bcd297b9c891d5bf83ea6acfac935acfbabe522f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:9e:12:d4:c8:a5:af:ff:0d:13:5c:41:a1:2c:
19:a7:62:ac:28:3d:30:ef:47:54:4b:59:bc:89:ad:
cd:70:b8:ea:fc:4a:7e:15:65:fa:7a:ec:8f:87:f6:
23:a2:b8:68:14:5d:55:3e:57:1d:2e:42:c4:02:d7:
79:9c:c7:46:d9:b2:58:2f:c3:4d:56:2e:3a:0a:43:
d3:a9:74:46:5c:86:7f:d4:70:7a:a7:c2:14:f7:f6:
4a:eb:93:c3:20:be:6c:28:ad:12:ce:47:c3:91:30:
78:36:db:51:1d:a3:97:09:41:ff:47:7d:68:e5:31:
76:ec:c8:47:e7:5b:c3:cc:c9:05:9c:50:1e:6b:0b:
59:92:eb:f9:b0:52:83:8b:12:cf:90:24:45:53:31:
47:3b:28:5d:60:29:ef:6d:c3:3b:22:dd:d7:4d:3d:
8a:c4:24:68:21:3c:cb:0b:d2:ce:74:d1:f6:8b:5f:
a3:f3:bd:d2:16:39:06:e7:4e:75:ea:c4:98:7a:70:
a8:19:88:75:dc:2f:00:65:50:75:17:d9:05:66:2d:
9f:46:ea:c9:68:2d:6d:23:3c:ad:00:71:12:fd:54:
34:5d:24:51:5d:e5:68:82:8c:d6:d2:81:df:f5:21:
a7:28:f4:67:c4:cb:a4:e2:6f:85:22:f0:68:7a:3b:
2a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:D2:97:B9:C8:91:D5:BF:83:EA:6A:CF:AC:93:5A:CF:BA:BE:52:2F
X509v3 Authority Key Identifier:
keyid:B7:4E:B4:B2:0B:C5:94:AC:2B:A3:AA:5A:EF:30:E7:4E:25:E1:56:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t060sgvFlKwro6pa7zDnTiXhVuE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/dcd512-0cb7-49a0-a618-6fbb19483287/1/t060sgvFlKwro6pa7zDnTiXhVuE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/dcd512-0cb7-49a0-a618-6fbb19483287/1/t060sgvFlKwro6pa7zDnTiXhVuE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:66:9c:7b:5b:d0:25:e2:83:f7:6e:7d:6e:ed:32:88:5c:8a:
4a:79:8c:78:02:32:bc:37:33:68:f6:5a:98:90:9d:8c:24:cb:
4f:e7:10:ef:71:a3:dd:3b:72:47:39:20:7f:0a:20:ab:b7:b8:
bf:ba:be:6a:61:a5:71:41:58:a6:d9:52:b4:b3:74:e0:b4:c1:
ed:03:06:00:97:85:93:eb:9b:7a:a1:c6:49:a8:75:f5:38:98:
05:de:b9:58:60:61:02:b3:3d:80:e5:82:22:e3:f6:6c:fe:0f:
5c:2e:8b:86:1a:c8:5e:b2:28:9e:51:4b:a7:b5:20:97:d0:d1:
7a:51:ff:14:dd:6d:72:02:4c:29:e0:09:e2:49:62:7f:d3:28:
87:07:de:f2:6e:5a:f6:26:da:6a:f0:82:4f:7f:29:fe:74:0b:
7d:2d:98:e1:67:a7:66:7c:e5:48:7c:45:1f:d6:01:23:63:31:
51:50:26:6b:24:6e:da:59:75:58:6e:19:02:a4:7e:5a:84:d0:
c7:b4:d6:34:f1:47:77:8c:09:6e:53:26:c8:e8:30:ba:5f:80:
cb:43:ea:18:a2:d0:2d:b9:d3:d9:cd:25:74:d5:4a:86:df:23:
1b:3b:af:84:52:b1:44:b2:27:fd:43:eb:b0:2c:7b:4b:23:8f:
dd:96:05:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 13:12:31 2025 by rpki-client