Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/1e5c88-c3fc-4e76-bc65-391fec267dae/1/tDlfbOqaAYpMyEgY5qo1INMiIYs.mft
File: tDlfbOqaAYpMyEgY5qo1INMiIYs.mft (raw, json)
Hash identifier: R1muzW7UWAUdpeOY8y2aZiN90QbgETxVlbx5P8VS4aU=
Subject key identifier: 29:F6:65:08:56:10:5E:25:33:19:5C:21:E9:7B:DA:D9:A7:C1:CA:AF
Authority key identifier: B4:39:5F:6C:EA:9A:01:8A:4C:C8:48:18:E6:AA:35:20:D3:22:21:8B
Certificate issuer: /CN=b4395f6cea9a018a4cc84818e6aa3520d322218b
Certificate serial: 01976961997B50CB9FAC80930AFF18398A2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDlfbOqaAYpMyEgY5qo1INMiIYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/1e5c88-c3fc-4e76-bc65-391fec267dae/1/tDlfbOqaAYpMyEgY5qo1INMiIYs.mft
Manifest number: 0C0F
Signing time: Fri 13 Jun 2025 13:01:33 +0000
Manifest this update: Fri 13 Jun 2025 13:01:33 +0000
Manifest next update: Sat 14 Jun 2025 13:01:33 +0000
Files and hashes: 1: UoFhfe1D4fv5504pD16hAMtOHqM.roa (hash: f5OjLqYpJfmM6P+Sc+etueFJmxpiBV6zei8gZZWeXpE=)
2: tDlfbOqaAYpMyEgY5qo1INMiIYs.crl (hash: d10OXW144sr9pJmqyjrk1rpFjeDa6JAsySSe3WRe9IY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/1e5c88-c3fc-4e76-bc65-391fec267dae/1/tDlfbOqaAYpMyEgY5qo1INMiIYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/1e5c88-c3fc-4e76-bc65-391fec267dae/1/tDlfbOqaAYpMyEgY5qo1INMiIYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDlfbOqaAYpMyEgY5qo1INMiIYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:61:99:7b:50:cb:9f:ac:80:93:0a:ff:18:39:8a:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4395f6cea9a018a4cc84818e6aa3520d322218b
Validity
Not Before: Jun 13 13:01:33 2025 GMT
Not After : Jun 14 13:01:33 2025 GMT
Subject: CN=29f6650856105e2533195c21e97bdad9a7c1caaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b1:a5:76:ca:c9:f5:c7:d2:69:36:31:b1:7e:
58:4e:2e:6f:61:a0:6b:3b:ce:3e:79:03:89:b4:c7:
b1:e7:f1:7f:35:8f:0b:34:5c:d5:f5:2b:cc:d8:8b:
fa:f0:c6:68:dd:e9:15:0b:f7:3d:8e:aa:66:05:27:
0e:bf:10:92:80:41:e2:d2:98:12:53:46:ca:ad:3d:
40:24:2f:bf:31:d6:e7:f2:e7:4a:74:4f:6c:de:62:
a7:9d:0f:7d:d6:ab:37:54:0f:e9:8a:99:35:2f:b7:
ed:dd:47:78:48:9d:56:11:62:2b:bd:8a:24:93:c5:
28:ff:f9:28:73:56:d8:56:d6:f6:17:8a:4c:bc:ff:
f7:11:fd:1a:54:af:3c:12:f0:65:02:42:68:e4:d0:
83:6c:bc:26:70:5c:35:ef:88:9b:33:5d:78:3c:0c:
e4:01:a2:a5:0c:30:cf:3f:e2:90:1c:0c:68:f5:a3:
e5:7f:aa:43:6e:78:22:7b:ee:40:af:ac:50:2f:48:
c7:f0:68:d3:fd:e3:d1:e3:65:be:7c:d8:dc:19:58:
2b:51:18:41:ca:af:b7:cd:69:ff:ac:6c:2b:74:e3:
a8:ae:43:ff:25:35:e9:b0:0d:c6:ae:0d:3d:9d:00:
a6:28:3f:8e:b5:b5:f2:c0:d1:56:7e:99:47:5f:89:
86:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:F6:65:08:56:10:5E:25:33:19:5C:21:E9:7B:DA:D9:A7:C1:CA:AF
X509v3 Authority Key Identifier:
keyid:B4:39:5F:6C:EA:9A:01:8A:4C:C8:48:18:E6:AA:35:20:D3:22:21:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDlfbOqaAYpMyEgY5qo1INMiIYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/1e5c88-c3fc-4e76-bc65-391fec267dae/1/tDlfbOqaAYpMyEgY5qo1INMiIYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/1e5c88-c3fc-4e76-bc65-391fec267dae/1/tDlfbOqaAYpMyEgY5qo1INMiIYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:99:da:78:2a:61:fd:30:3a:10:5b:85:3b:4d:97:69:f5:13:
9e:48:d2:3a:1b:f4:57:7a:8c:da:35:c7:b0:ab:0d:ab:6e:73:
7a:0a:57:2b:89:40:87:07:bf:5d:3e:17:95:86:d2:3d:5f:48:
ca:eb:37:99:09:ae:1c:9c:02:8c:84:5f:94:06:ef:64:ea:ce:
d1:0b:8e:df:af:77:c8:d7:4f:2c:b9:db:24:d9:1f:0d:5b:0b:
da:34:ea:71:e5:77:43:71:b9:08:2f:38:81:dd:87:07:db:5b:
e9:b5:bb:db:0d:a6:7b:d1:a3:5b:90:2f:c9:55:44:09:3b:6d:
20:cb:e6:63:2e:07:e3:67:2e:34:34:df:3a:74:98:45:99:63:
94:dd:94:38:f1:11:e8:34:57:3e:ca:70:0c:df:b4:c8:8e:fa:
c0:60:21:5b:2b:78:a4:60:7e:5b:29:dc:f5:e0:ce:6b:80:ed:
4f:64:16:7c:38:d2:be:09:22:96:fd:f7:d0:5e:ab:07:9e:9d:
df:2d:95:b4:b4:a0:4e:a2:df:5a:d3:65:51:ad:a6:06:80:32:
4a:17:77:ad:8c:0b:bf:db:84:a1:df:c0:cd:f2:60:0c:27:81:
51:35:27:79:2a:8c:1b:6a:10:8d:4f:3f:1d:b5:04:80:64:fa:
d4:b8:27:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:10:03 2025 by rpki-client