Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/e56d41-5bb8-4a91-a4f0-f86dcaad8c49/1/tHMWeROvc-T2N0FwxPlF-LDdfWQ.mft
File: tHMWeROvc-T2N0FwxPlF-LDdfWQ.mft (raw, json)
Hash identifier: RHzk87p0goVXRqG/VhTAHrkDmFBKLhaoRoXSUpwi0VQ=
Subject key identifier: F2:0C:E3:5C:4C:11:C5:33:B1:3F:89:A5:5A:4B:8F:E7:1E:2A:D7:C4
Authority key identifier: B4:73:16:79:13:AF:73:E4:F6:37:41:70:C4:F9:45:F8:B0:DD:7D:64
Certificate issuer: /CN=b473167913af73e4f6374170c4f945f8b0dd7d64
Certificate serial: 01987306556C9D7869CD4C460B9DE16827E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tHMWeROvc-T2N0FwxPlF-LDdfWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/e56d41-5bb8-4a91-a4f0-f86dcaad8c49/1/tHMWeROvc-T2N0FwxPlF-LDdfWQ.mft
Manifest number: 0C7B
Signing time: Mon 04 Aug 2025 03:00:51 +0000
Manifest this update: Mon 04 Aug 2025 03:00:51 +0000
Manifest next update: Tue 05 Aug 2025 03:00:51 +0000
Files and hashes: 1: J0ZgfR5U6lkaUqXFqkaevK5zE7Y.roa (hash: /1drMWi8WHeYZMzayKCKRAt2zHYV3mIjXjepj/lhD8k=)
2: tHMWeROvc-T2N0FwxPlF-LDdfWQ.crl (hash: gM4IAzp8TrF0nN5OWYHx6/j7szPte8MnYCEJHBncVyQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/e56d41-5bb8-4a91-a4f0-f86dcaad8c49/1/tHMWeROvc-T2N0FwxPlF-LDdfWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/e56d41-5bb8-4a91-a4f0-f86dcaad8c49/1/tHMWeROvc-T2N0FwxPlF-LDdfWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/tHMWeROvc-T2N0FwxPlF-LDdfWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:06:55:6c:9d:78:69:cd:4c:46:0b:9d:e1:68:27:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b473167913af73e4f6374170c4f945f8b0dd7d64
Validity
Not Before: Aug 4 03:00:51 2025 GMT
Not After : Aug 5 03:00:51 2025 GMT
Subject: CN=f20ce35c4c11c533b13f89a55a4b8fe71e2ad7c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:7b:f8:11:2a:bd:df:c7:a4:60:42:71:f5:43:
25:65:79:9f:fb:6e:0e:14:41:86:0c:58:cb:24:66:
8d:f4:c7:64:d8:3f:16:e0:f6:48:a2:2f:32:b0:68:
11:28:6b:e3:04:fd:9a:a3:f3:a9:b0:26:1a:00:fa:
f7:bd:bd:97:26:a2:5d:72:e8:81:ac:2a:5d:15:08:
6f:0b:5c:97:52:bf:92:e7:4e:5e:0c:cd:e0:be:61:
bb:c4:9f:e6:70:92:79:e3:74:b5:08:a4:8e:6e:d8:
f0:51:6b:16:c7:67:80:02:fb:41:64:b4:41:50:87:
c3:02:ef:31:21:c0:dc:45:5e:52:d7:a6:68:16:a5:
b8:39:8e:5e:df:18:6a:26:fe:09:21:93:2c:30:2e:
52:90:9a:8f:62:b4:a4:0c:d2:ba:b2:f3:a2:be:c7:
46:2c:1c:26:f2:09:d8:2c:80:27:fd:6f:14:4b:76:
a6:41:66:b3:90:9d:45:69:4d:13:78:a1:56:7a:95:
e3:cd:aa:e7:43:01:f3:14:cd:9a:f0:47:61:bf:b8:
87:82:c9:42:3e:ca:d4:27:be:65:cf:3c:68:13:eb:
4f:cc:f0:2a:c9:03:bd:58:92:39:10:50:3f:e8:e2:
12:aa:a1:16:93:f9:ed:a6:ac:3a:ac:11:f6:1e:bc:
b2:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:0C:E3:5C:4C:11:C5:33:B1:3F:89:A5:5A:4B:8F:E7:1E:2A:D7:C4
X509v3 Authority Key Identifier:
keyid:B4:73:16:79:13:AF:73:E4:F6:37:41:70:C4:F9:45:F8:B0:DD:7D:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tHMWeROvc-T2N0FwxPlF-LDdfWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/e56d41-5bb8-4a91-a4f0-f86dcaad8c49/1/tHMWeROvc-T2N0FwxPlF-LDdfWQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/e56d41-5bb8-4a91-a4f0-f86dcaad8c49/1/tHMWeROvc-T2N0FwxPlF-LDdfWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:02:c0:f8:7b:1a:ca:f5:e0:26:38:97:63:5b:61:b4:02:d7:
df:9e:94:b1:e8:a2:d0:10:93:85:2e:31:ea:96:7e:79:35:e5:
3b:f2:6b:59:8e:70:cf:d4:a0:b5:2b:69:7e:5c:8a:a1:de:cd:
91:ea:74:32:ab:6a:6c:07:6c:18:4b:f2:8c:fa:9c:4b:c7:b8:
34:14:c1:d0:bf:75:e1:8c:c8:8e:a6:f6:b4:9c:9d:da:09:81:
3a:c0:df:f5:4a:2f:df:a2:45:bd:02:b3:5c:a3:ce:76:5c:c5:
ec:47:dd:dd:7a:ca:04:da:84:66:4d:e9:bc:52:a7:06:39:19:
28:20:4f:2e:dc:87:cf:6d:79:da:3e:85:81:9e:ce:68:10:0a:
cc:30:e7:8d:e4:3d:62:c5:35:14:ae:91:09:eb:8b:11:85:e9:
ec:94:f6:ca:cb:74:1a:2d:06:05:34:26:b0:a1:fa:32:a8:77:
61:e0:2e:16:d9:97:ef:f6:24:99:b5:5e:1d:49:38:83:52:bf:
55:83:3e:b0:4e:f0:21:80:0f:30:8f:45:db:99:0e:e7:5d:1d:
05:72:b5:43:97:76:8c:4d:f5:ac:c2:c8:3e:d9:4b:a3:5e:ae:
8a:bf:bc:51:09:b5:57:8b:99:55:b0:5a:1c:1d:d1:5e:ea:59:
17:9c:b8:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:00:06 2025 by rpki-client