Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/4652e8-5d20-42f6-a739-d54921604ecd/1/t0QwmQgmnlOLK0-pYzcMnsIHeng.mft
File: t0QwmQgmnlOLK0-pYzcMnsIHeng.mft (raw, json)
Hash identifier: YTzjHSTV9NF0BJ4d5C8FiVCjIHcyGg9S4vT9+UI9iRA=
Subject key identifier: 5D:BB:E1:24:6C:D8:43:E7:69:53:7A:B8:DB:82:C8:AD:A6:80:10:51
Authority key identifier: B7:44:30:99:08:26:9E:53:8B:2B:4F:A9:63:37:0C:9E:C2:07:7A:78
Certificate issuer: /CN=b744309908269e538b2b4fa963370c9ec2077a78
Certificate serial: 019894ED7AEA0527A8A6B50E5D4D916F7BDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t0QwmQgmnlOLK0-pYzcMnsIHeng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/4652e8-5d20-42f6-a739-d54921604ecd/1/t0QwmQgmnlOLK0-pYzcMnsIHeng.mft
Manifest number: 1079
Signing time: Sun 10 Aug 2025 17:00:47 +0000
Manifest this update: Sun 10 Aug 2025 17:00:47 +0000
Manifest next update: Mon 11 Aug 2025 17:00:47 +0000
Files and hashes: 1: YBLZGJHJKH4DoV9XrJh7KrLAY0g.roa (hash: L0o/zjJZLOmk6cpaT73kurdvyrzNoMlbhiuzTQLNAKg=)
2: t0QwmQgmnlOLK0-pYzcMnsIHeng.crl (hash: 9AO8/UW9J820hChk7nNvqe4ErG/ChnSfVGL3+atu/MU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/4652e8-5d20-42f6-a739-d54921604ecd/1/t0QwmQgmnlOLK0-pYzcMnsIHeng.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/4652e8-5d20-42f6-a739-d54921604ecd/1/t0QwmQgmnlOLK0-pYzcMnsIHeng.mft
rsync://rpki.ripe.net/repository/DEFAULT/t0QwmQgmnlOLK0-pYzcMnsIHeng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 17:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:94:ed:7a:ea:05:27:a8:a6:b5:0e:5d:4d:91:6f:7b:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b744309908269e538b2b4fa963370c9ec2077a78
Validity
Not Before: Aug 10 17:00:47 2025 GMT
Not After : Aug 11 17:00:47 2025 GMT
Subject: CN=5dbbe1246cd843e769537ab8db82c8ada6801051
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:74:3d:38:81:3f:77:8a:64:6b:fc:8f:b7:15:
13:4c:a1:9b:76:b9:3e:38:38:8d:71:ea:2c:22:9a:
41:a2:91:38:66:3a:10:41:5b:b4:3a:f1:eb:79:eb:
ad:6f:70:1c:d9:59:b4:5a:f5:76:29:54:ae:2c:f8:
72:5b:d3:6b:50:2d:59:45:0c:f3:26:c1:fb:53:53:
fa:7c:65:a5:2a:de:6a:de:65:b8:b8:36:dc:f0:24:
d0:d9:71:4e:fb:d8:a2:2c:76:b6:9b:50:e1:4e:27:
2b:3d:c5:64:c3:67:e4:ae:0e:1b:4e:e6:1f:d8:64:
c7:de:0a:f0:96:bb:78:4a:cc:56:5d:7e:81:1e:bc:
76:69:0b:ff:64:40:2c:15:9e:24:a2:fd:b2:17:db:
a9:23:e7:33:42:9b:65:42:ee:5f:3a:d9:c2:29:9f:
04:0d:55:68:0e:49:14:d2:ba:e4:96:56:34:32:6a:
ff:0f:e3:66:2d:12:be:ce:f8:26:5c:5f:f2:d9:2b:
3e:0f:09:d1:b5:66:52:6c:a2:94:0a:7f:53:97:2f:
b9:17:c7:44:fd:48:f0:45:88:d0:45:eb:1b:9d:fe:
76:58:f1:0d:29:24:0a:ff:2c:d1:82:90:9e:4b:6c:
ae:b9:07:3b:c7:9b:75:47:02:1e:ae:ca:3d:6d:e5:
9f:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:BB:E1:24:6C:D8:43:E7:69:53:7A:B8:DB:82:C8:AD:A6:80:10:51
X509v3 Authority Key Identifier:
keyid:B7:44:30:99:08:26:9E:53:8B:2B:4F:A9:63:37:0C:9E:C2:07:7A:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t0QwmQgmnlOLK0-pYzcMnsIHeng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4652e8-5d20-42f6-a739-d54921604ecd/1/t0QwmQgmnlOLK0-pYzcMnsIHeng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4652e8-5d20-42f6-a739-d54921604ecd/1/t0QwmQgmnlOLK0-pYzcMnsIHeng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:d4:1b:3b:f3:64:57:b3:34:77:19:bf:f6:fc:be:02:4f:7d:
25:ca:22:56:86:3d:68:f3:15:dd:89:22:ac:21:5c:ce:10:b9:
4a:f7:d0:cb:22:1f:76:33:11:05:a2:01:35:e4:15:ac:27:03:
fb:83:3a:d6:6f:2c:7f:70:13:8d:46:7b:74:4f:ed:37:a2:d7:
8a:77:6f:f7:e6:4a:fc:e9:00:5a:6c:bd:e7:ee:e4:4d:a5:98:
e5:73:5c:39:07:28:2e:12:4b:33:07:f1:14:d4:ee:79:6d:50:
0d:ea:55:92:32:eb:59:c6:97:dd:a4:ad:05:92:05:49:f2:d5:
78:18:87:8b:cc:40:0a:a3:7d:ef:07:1d:4b:e8:5e:81:02:14:
67:ee:ab:f4:67:b8:46:dd:71:d0:c0:c9:f9:b9:d5:a7:9a:76:
1f:16:26:0f:6b:ab:11:30:20:33:82:ca:79:e7:93:23:33:89:
ff:d9:3d:39:f9:07:09:0a:69:69:4a:ee:5d:ee:23:38:15:10:
77:37:74:c3:30:ad:19:47:3f:bc:99:6b:cc:17:89:b8:9b:42:
e9:0f:22:36:95:64:e7:40:b2:4f:f9:ce:1d:28:53:b9:ab:c1:
7a:9d:43:87:1a:53:f8:ab:cd:c3:4f:b6:45:fc:7a:e4:bc:97:
ac:30:a7:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 01:45:30 2025 by rpki-client