Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/ac82ec-0e31-461e-a205-1f6010a30ebb/1/tQ32Wi_LmxF6hTprVoVLBxjsM0M.mft
File: tQ32Wi_LmxF6hTprVoVLBxjsM0M.mft (raw, json)
Hash identifier: i6nwdMLny235Tf4V7qpSKqeoirSeTofSZKTm8MwzDt4=
Subject key identifier: 6B:2B:AC:B9:FB:E1:3D:FF:3C:6E:51:47:D7:EF:71:8D:88:9A:0E:06
Authority key identifier: B5:0D:F6:5A:2F:CB:9B:11:7A:85:3A:6B:56:85:4B:07:18:EC:33:43
Certificate issuer: /CN=b50df65a2fcb9b117a853a6b56854b0718ec3343
Certificate serial: 019875D05E5CC02B9DECFB1430719BA512A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tQ32Wi_LmxF6hTprVoVLBxjsM0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/ac82ec-0e31-461e-a205-1f6010a30ebb/1/tQ32Wi_LmxF6hTprVoVLBxjsM0M.mft
Manifest number: 090B
Signing time: Mon 04 Aug 2025 16:00:46 +0000
Manifest this update: Mon 04 Aug 2025 16:00:46 +0000
Manifest next update: Tue 05 Aug 2025 16:00:46 +0000
Files and hashes: 1: tQ32Wi_LmxF6hTprVoVLBxjsM0M.crl (hash: UVrn5lH0MltEftdjvKZUSaXk7N5HFW+wUh/7Dwh9CiE=)
2: zBqyJEl1ZTI7fL6gM2motFXrSRM.roa (hash: OkJW2+OnAMScP2GdhvLfFrfdk7h2e43pg36iU6eHej4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/ac82ec-0e31-461e-a205-1f6010a30ebb/1/tQ32Wi_LmxF6hTprVoVLBxjsM0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/ac82ec-0e31-461e-a205-1f6010a30ebb/1/tQ32Wi_LmxF6hTprVoVLBxjsM0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/tQ32Wi_LmxF6hTprVoVLBxjsM0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:d0:5e:5c:c0:2b:9d:ec:fb:14:30:71:9b:a5:12:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b50df65a2fcb9b117a853a6b56854b0718ec3343
Validity
Not Before: Aug 4 16:00:46 2025 GMT
Not After : Aug 5 16:00:46 2025 GMT
Subject: CN=6b2bacb9fbe13dff3c6e5147d7ef718d889a0e06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:76:da:c3:dc:68:c3:91:0e:64:3a:39:62:2d:
6d:34:55:ac:7e:04:a4:9c:35:af:17:19:10:75:e0:
92:ea:e3:7e:b4:da:4f:b5:b0:ab:4e:4d:00:25:e6:
9a:79:5d:d7:71:34:6d:b8:1e:49:2a:81:36:8f:3c:
28:9c:be:93:93:fb:68:2d:5b:d2:af:6e:6c:86:b2:
cf:fe:96:16:4d:b9:57:73:c5:4f:a2:8c:e9:e4:11:
7b:cd:44:63:a7:51:33:4d:fd:30:88:2f:0b:f6:22:
4d:74:07:71:de:54:fa:eb:4e:68:a0:0e:3f:4d:51:
38:49:b7:ff:28:03:e7:14:ab:4d:11:fe:10:96:e0:
15:02:13:27:40:22:15:a1:c6:c8:eb:dd:e0:54:1b:
c2:42:35:a5:ec:e0:2f:4b:87:52:06:1a:0f:a4:0c:
4b:7a:79:a2:eb:7b:06:7f:90:36:cb:ab:cb:e5:46:
ae:8d:a8:8b:a1:cb:61:d9:64:4b:1c:91:d6:39:f9:
2f:17:dd:00:03:b7:82:a1:06:5b:ca:a4:73:78:55:
27:05:b9:30:89:c8:83:2b:80:a3:74:f3:3d:0a:eb:
41:b5:d0:b0:26:24:5d:c7:e6:58:b6:3d:55:1e:b9:
af:c7:7a:8f:ea:64:b6:db:48:58:e1:f0:45:08:44:
d6:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:2B:AC:B9:FB:E1:3D:FF:3C:6E:51:47:D7:EF:71:8D:88:9A:0E:06
X509v3 Authority Key Identifier:
keyid:B5:0D:F6:5A:2F:CB:9B:11:7A:85:3A:6B:56:85:4B:07:18:EC:33:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tQ32Wi_LmxF6hTprVoVLBxjsM0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/ac82ec-0e31-461e-a205-1f6010a30ebb/1/tQ32Wi_LmxF6hTprVoVLBxjsM0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/ac82ec-0e31-461e-a205-1f6010a30ebb/1/tQ32Wi_LmxF6hTprVoVLBxjsM0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:b7:89:e8:75:1c:75:14:8a:40:fe:e6:87:3d:fa:6a:54:06:
06:6d:4c:a8:0a:0c:78:5e:e5:d7:e9:f4:aa:a5:97:92:a1:a3:
bf:17:7f:f5:b3:06:9d:29:a7:fa:13:ad:6b:35:08:bc:f1:ac:
b7:d7:52:cf:8d:cb:70:97:be:03:a0:12:3a:8c:2e:54:5b:23:
39:96:ba:ee:c3:38:82:a8:70:5e:72:d8:3c:e0:bd:3e:25:22:
7c:b2:48:7f:60:3c:8b:4e:73:3a:13:b6:27:9c:71:b3:44:05:
4c:db:c5:17:fc:99:bd:8e:2c:d0:6f:05:08:a0:0b:38:ab:4a:
f0:65:2c:15:41:88:8e:35:17:f5:77:11:1b:e1:6b:4a:00:ab:
5e:d6:62:7d:93:86:40:d3:e7:a1:0d:e5:62:70:f5:8c:d9:fc:
91:de:4d:e2:0d:1f:49:58:42:d4:be:b6:e7:25:86:1f:e1:89:
b2:d0:21:4e:7a:06:77:8b:e6:ee:24:29:98:2f:5b:3b:84:c7:
64:d3:85:75:1a:41:94:8f:7d:53:c6:18:bd:71:f4:39:ae:4d:
2f:19:50:ec:b3:7d:8a:5d:05:db:69:80:2b:a0:ad:cb:4d:03:
57:ff:34:ef:db:13:dc:cf:9a:2a:5a:81:f3:b8:fd:6a:02:93:
52:f8:5b:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:59:14 2025 by rpki-client