Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/ba784d-746e-49e7-a408-4abaf53a50af/1/tczdiD9t0RTs9vcnFqhGNPZ6yXc.mft
File: tczdiD9t0RTs9vcnFqhGNPZ6yXc.mft (raw, json)
Hash identifier: aQzvTXJ2fIoHY/Guh+MIAAPHW+wApPMrenHkDYfH2EA=
Subject key identifier: FE:81:C7:AF:B6:71:9A:90:59:EC:E4:19:E8:8B:14:AF:12:23:B2:1B
Authority key identifier: B5:CC:DD:88:3F:6D:D1:14:EC:F6:F7:27:16:A8:46:34:F6:7A:C9:77
Certificate issuer: /CN=b5ccdd883f6dd114ecf6f72716a84634f67ac977
Certificate serial: 01987DF7C527E3B215B68C78EFF6E887642B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tczdiD9t0RTs9vcnFqhGNPZ6yXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/ba784d-746e-49e7-a408-4abaf53a50af/1/tczdiD9t0RTs9vcnFqhGNPZ6yXc.mft
Manifest number: 0C4D
Signing time: Wed 06 Aug 2025 06:00:46 +0000
Manifest this update: Wed 06 Aug 2025 06:00:46 +0000
Manifest next update: Thu 07 Aug 2025 06:00:46 +0000
Files and hashes: 1: 6mSAzptlMtavroiRBEbzErufO08.roa (hash: lJ5Bp/WretmXqwZLM24/DP1Oy5iyysz4o7F+olg5yZQ=)
2: tczdiD9t0RTs9vcnFqhGNPZ6yXc.crl (hash: azoevMZLwa7uzRwp8uKNLphHwhcWEezm5v2l/2c8P7g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/ba784d-746e-49e7-a408-4abaf53a50af/1/tczdiD9t0RTs9vcnFqhGNPZ6yXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/ba784d-746e-49e7-a408-4abaf53a50af/1/tczdiD9t0RTs9vcnFqhGNPZ6yXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/tczdiD9t0RTs9vcnFqhGNPZ6yXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 06:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:f7:c5:27:e3:b2:15:b6:8c:78:ef:f6:e8:87:64:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5ccdd883f6dd114ecf6f72716a84634f67ac977
Validity
Not Before: Aug 6 06:00:46 2025 GMT
Not After : Aug 7 06:00:46 2025 GMT
Subject: CN=fe81c7afb6719a9059ece419e88b14af1223b21b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ee:01:4e:05:21:7c:2d:fb:13:48:2b:f1:1b:
45:9e:66:f2:58:39:48:60:ec:54:0a:79:0b:54:de:
12:2a:2a:43:8a:b2:71:c4:4d:e6:6e:15:2f:eb:81:
6b:4e:61:ae:6c:fc:ac:f5:49:cf:21:c3:2c:04:93:
62:7a:c2:13:a7:a6:29:d0:fb:1d:9d:24:70:0e:f6:
a6:39:63:73:dd:eb:95:39:b5:df:97:94:e4:d2:5f:
f8:71:1e:77:5a:a7:9f:30:3d:5e:f5:e7:54:be:69:
f9:56:86:33:f5:f3:d7:2e:4d:77:a8:98:d6:ae:09:
26:28:fb:89:c6:4a:02:eb:00:a1:50:b4:18:22:64:
a0:89:50:34:ca:79:00:47:5e:e5:f3:7a:c2:c9:46:
9a:39:4a:f5:cb:2c:fe:28:a4:63:1b:7c:62:f9:1a:
b7:27:48:ce:1f:b3:11:ac:e2:05:d2:c9:b7:2b:dc:
89:84:24:a4:1e:87:b7:d5:af:9c:24:b3:67:60:fe:
28:ed:dc:e7:0b:b3:f9:a8:11:a0:0c:08:e5:b8:70:
1c:10:c9:11:18:1c:59:a3:f8:5a:5c:e6:93:f1:52:
e4:1e:30:8c:e3:92:2e:36:0a:04:00:2e:09:b3:d2:
5c:a0:15:19:34:1a:e6:89:bf:24:c7:23:fe:22:5b:
32:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:81:C7:AF:B6:71:9A:90:59:EC:E4:19:E8:8B:14:AF:12:23:B2:1B
X509v3 Authority Key Identifier:
keyid:B5:CC:DD:88:3F:6D:D1:14:EC:F6:F7:27:16:A8:46:34:F6:7A:C9:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tczdiD9t0RTs9vcnFqhGNPZ6yXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/ba784d-746e-49e7-a408-4abaf53a50af/1/tczdiD9t0RTs9vcnFqhGNPZ6yXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/ba784d-746e-49e7-a408-4abaf53a50af/1/tczdiD9t0RTs9vcnFqhGNPZ6yXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:45:d5:5b:97:52:15:b2:78:33:a3:fc:48:a7:17:a8:5f:1c:
ef:80:43:69:48:ce:8a:ce:be:a4:82:67:e5:e0:07:62:cc:b8:
76:98:da:47:1a:d2:49:04:f8:43:72:7b:82:40:4c:4c:02:b2:
47:b4:20:85:52:6b:50:53:26:be:c3:a6:62:e2:84:3b:0a:e6:
83:6a:86:e4:d6:d8:1d:5d:9e:07:33:ae:17:b6:e7:b4:8a:43:
e3:76:1c:8d:8d:77:42:99:51:cd:27:71:f1:a3:6d:7c:bc:62:
d6:8c:f2:61:67:76:bc:12:cd:1e:ce:49:77:fa:6f:7d:ec:89:
56:0c:89:2e:08:8d:24:d0:05:27:6c:ba:4e:32:84:93:b2:e0:
d1:4d:18:68:60:1e:0e:72:84:1f:14:af:83:a2:0a:90:4e:8e:
cb:7f:36:c2:cc:61:3a:2d:9b:a4:72:94:0d:44:4e:28:b8:09:
a3:1c:c7:ed:ac:02:27:e5:41:33:6c:aa:0c:12:52:0d:54:12:
96:8d:98:c3:c4:19:20:8b:d3:ee:4a:47:ba:58:a3:d3:df:13:
ef:7a:3d:4a:ee:27:d4:5b:22:6a:8f:53:e7:be:22:3e:f1:87:
ca:23:71:8c:76:da:7c:ba:17:0f:df:70:1c:1e:7b:8a:0a:09:
fc:3c:4d:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:10:03 2025 by rpki-client