Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/2f672b-236c-40fb-aaf6-08d0f4bd2c28/1/tXPS3ak-QgQJFj2lnnQU7pGi7vI.mft
File: tXPS3ak-QgQJFj2lnnQU7pGi7vI.mft (raw, json)
Hash identifier: Cj8rMNLr8Y4rLbJMSJjI28jRZ3JuxNeB4fwQstfDufg=
Subject key identifier: B7:27:4D:37:1E:3B:89:20:2C:65:D4:68:A1:1C:23:4A:A8:07:70:7B
Authority key identifier: B5:73:D2:DD:A9:3E:42:04:09:16:3D:A5:9E:74:14:EE:91:A2:EE:F2
Certificate issuer: /CN=b573d2dda93e420409163da59e7414ee91a2eef2
Certificate serial: 0198752C34C666A09723AAAA9FF99F85817C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tXPS3ak-QgQJFj2lnnQU7pGi7vI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/2f672b-236c-40fb-aaf6-08d0f4bd2c28/1/tXPS3ak-QgQJFj2lnnQU7pGi7vI.mft
Manifest number: B5
Signing time: Mon 04 Aug 2025 13:01:27 +0000
Manifest this update: Mon 04 Aug 2025 13:01:27 +0000
Manifest next update: Tue 05 Aug 2025 13:01:27 +0000
Files and hashes: 1: r2p_nfti9wP7acQGEaKHM_xZ5Y4.roa (hash: 8x452bR9h9FZkxCtz0Hac6JBkLr+TCy/u9myFaRh5zg=)
2: tXPS3ak-QgQJFj2lnnQU7pGi7vI.crl (hash: uy9SQpZDqGoe64IwRWjGNEmwmCGyD4wfBpTQrEDONxk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/2f672b-236c-40fb-aaf6-08d0f4bd2c28/1/tXPS3ak-QgQJFj2lnnQU7pGi7vI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/2f672b-236c-40fb-aaf6-08d0f4bd2c28/1/tXPS3ak-QgQJFj2lnnQU7pGi7vI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tXPS3ak-QgQJFj2lnnQU7pGi7vI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:2c:34:c6:66:a0:97:23:aa:aa:9f:f9:9f:85:81:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b573d2dda93e420409163da59e7414ee91a2eef2
Validity
Not Before: Aug 4 13:01:27 2025 GMT
Not After : Aug 5 13:01:27 2025 GMT
Subject: CN=b7274d371e3b89202c65d468a11c234aa807707b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:18:44:6c:98:7c:f1:19:0b:2d:db:f8:33:75:
6e:0c:24:49:a2:d0:a7:cd:d2:18:f7:65:a5:0b:4d:
23:2b:6e:5b:7e:bc:ec:a4:d0:81:4a:d8:38:ef:61:
bf:c2:d2:6c:aa:31:7f:49:b1:44:fb:b3:e1:00:e2:
3f:c0:a6:67:ad:89:45:80:48:91:d7:88:d8:ff:59:
c2:f9:b6:d6:ab:24:e0:6e:57:3d:d6:71:41:12:34:
d5:71:42:76:6d:93:5f:1f:b7:d7:07:c1:73:d0:8c:
1b:ec:03:42:4c:d9:69:f5:9e:10:76:46:a4:68:a2:
63:59:51:0a:80:35:c6:87:61:34:c7:c0:93:27:f4:
de:dd:ac:69:c4:f4:28:18:8a:5b:00:52:82:c5:4c:
1e:86:a3:02:a1:03:92:3a:5d:06:2b:dd:1c:26:c4:
07:0b:d7:16:7f:0d:4f:c1:97:6c:2a:3f:07:0c:3a:
2a:0f:41:ac:9e:cc:5e:3f:cf:20:d1:e0:5d:66:25:
e3:f8:73:44:8f:c9:c7:b4:5d:b7:30:51:ff:3f:f4:
0f:05:1a:53:a3:92:ae:5f:47:20:94:56:d1:7f:59:
1f:54:ce:35:58:34:51:86:9c:6d:12:ad:97:0b:c3:
ef:dc:f8:fa:92:ee:2b:4a:92:69:18:13:3a:89:a1:
0b:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:27:4D:37:1E:3B:89:20:2C:65:D4:68:A1:1C:23:4A:A8:07:70:7B
X509v3 Authority Key Identifier:
keyid:B5:73:D2:DD:A9:3E:42:04:09:16:3D:A5:9E:74:14:EE:91:A2:EE:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tXPS3ak-QgQJFj2lnnQU7pGi7vI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/2f672b-236c-40fb-aaf6-08d0f4bd2c28/1/tXPS3ak-QgQJFj2lnnQU7pGi7vI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/2f672b-236c-40fb-aaf6-08d0f4bd2c28/1/tXPS3ak-QgQJFj2lnnQU7pGi7vI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:2f:f6:dd:1f:e1:96:8a:71:32:a7:0b:b6:58:33:5a:9e:bf:
b8:da:60:a7:06:13:da:51:d6:ff:0a:a8:a1:18:9a:6d:07:45:
fb:dd:21:f8:47:13:13:ac:22:e0:ad:7e:c0:d3:64:a1:1d:0e:
47:f7:bc:1f:75:42:59:bb:3f:fa:c8:a2:41:3e:97:fd:07:d0:
0f:47:fb:9c:07:fa:58:ca:1f:5c:43:77:8a:6b:d4:a3:92:64:
81:b1:99:f5:3e:5e:5b:dd:c7:69:4d:b3:f7:b5:06:cd:03:a1:
45:a9:1b:a5:05:e7:88:9c:c5:c9:4b:e2:94:c1:67:37:79:b2:
2b:2e:ed:f5:3b:f1:90:b7:59:f6:c4:b8:1f:42:e0:8e:17:45:
b6:eb:a9:0d:67:12:bf:95:d5:32:8e:03:5b:de:c7:5e:fd:86:
c3:af:9e:e2:56:d8:d0:dd:e9:96:b8:9d:f4:7d:ee:ae:35:76:
bc:70:fc:12:00:62:1a:99:a2:92:a8:a1:af:a8:ee:ec:1b:3a:
75:b5:b2:d8:d6:8c:6d:de:61:1c:1f:4b:75:d9:7d:53:70:9b:
1d:14:72:00:4f:ff:fa:58:6d:21:d4:be:2b:90:6c:f7:76:f4:
4f:67:04:e1:a7:83:dc:9d:3c:a1:6a:8c:98:fa:0f:1d:5e:f8:
5c:65:92:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:09:32 2025 by rpki-client