Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/e2510d-e573-45d3-9d20-754b60c5b568/1/tTuhjVzrjnlMgTnOAqeRuFAYJe8.mft
File: tTuhjVzrjnlMgTnOAqeRuFAYJe8.mft (raw, json)
Hash identifier: wjaQ1ULOGb9s5w649WCijRV4PbzqxAVQmgi8HjaUmsY=
Subject key identifier: C7:DC:71:70:CD:01:EC:98:47:B6:95:C7:E9:12:CB:23:C5:5D:DE:87
Authority key identifier: B5:3B:A1:8D:5C:EB:8E:79:4C:81:39:CE:02:A7:91:B8:50:18:25:EF
Certificate issuer: /CN=b53ba18d5ceb8e794c8139ce02a791b8501825ef
Certificate serial: 01976F9A147C7DABBEAD9D339FC433C47544
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tTuhjVzrjnlMgTnOAqeRuFAYJe8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/e2510d-e573-45d3-9d20-754b60c5b568/1/tTuhjVzrjnlMgTnOAqeRuFAYJe8.mft
Manifest number: 0CB7
Signing time: Sat 14 Jun 2025 18:00:58 +0000
Manifest this update: Sat 14 Jun 2025 18:00:58 +0000
Manifest next update: Sun 15 Jun 2025 18:00:58 +0000
Files and hashes: 1: 9FStBrS0NlZ9f0JDPC2m90a8BCY.roa (hash: xw+KW2Ni2Cd+C3tg5Q5Vf8DrtdT917ZQWwgX4LJaEm4=)
2: NcymNU3Ex55jeE07rsjVQP17Yc4.roa (hash: rqRVyPcE0vuZ2ea448N6H2EJDC40DdbDXkISgXkK53E=)
3: XUHwJb1I3gkKMlf7v2dTxFe6360.roa (hash: Gm/rvLP3jZuTC48xJtdoJ5/c1V7BDKST3JSzW3p7S08=)
4: tTuhjVzrjnlMgTnOAqeRuFAYJe8.crl (hash: d3KkY+uTbbRYhoi3/g3zn4VUPQ/mukJGMX+Hd9MtTlM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/e2510d-e573-45d3-9d20-754b60c5b568/1/tTuhjVzrjnlMgTnOAqeRuFAYJe8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/e2510d-e573-45d3-9d20-754b60c5b568/1/tTuhjVzrjnlMgTnOAqeRuFAYJe8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tTuhjVzrjnlMgTnOAqeRuFAYJe8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 18:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:9a:14:7c:7d:ab:be:ad:9d:33:9f:c4:33:c4:75:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b53ba18d5ceb8e794c8139ce02a791b8501825ef
Validity
Not Before: Jun 14 18:00:58 2025 GMT
Not After : Jun 15 18:00:58 2025 GMT
Subject: CN=c7dc7170cd01ec9847b695c7e912cb23c55dde87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:40:0a:d4:08:cf:0c:6d:f9:ae:6a:41:c1:2a:
f9:06:80:9d:dd:1b:02:07:76:07:0b:95:64:d9:71:
a0:9a:ae:c0:75:22:d7:b7:9c:82:e9:39:cd:37:6f:
d9:28:f1:8e:1e:cb:75:09:a3:18:4a:cc:64:07:00:
e0:56:e0:59:3c:bd:d5:2b:0c:61:77:ad:24:ed:fe:
4d:68:86:8e:09:01:f5:88:df:38:00:dd:80:35:99:
8c:f9:9d:fd:b0:0c:37:fa:7d:12:ad:e5:7d:c0:20:
55:20:73:91:f0:cc:f6:84:82:e7:75:1e:ff:bd:2d:
8e:ec:52:81:dc:7e:77:08:9c:8d:e2:e9:ea:d3:8a:
01:32:d2:ce:5e:8c:2f:b9:ff:6e:d1:1b:9e:8c:1a:
68:0e:12:17:3d:b0:3f:72:62:28:86:bb:56:e8:f2:
6c:ea:b3:0d:68:48:80:7c:d6:f7:d1:cd:79:0c:e1:
5d:95:cd:60:b3:92:36:71:8a:76:ea:46:fc:bd:64:
11:0a:1f:ae:62:a7:10:87:8b:a3:45:7c:c2:a2:8c:
66:d9:4e:de:20:61:28:27:8d:41:ee:44:91:cd:c9:
0f:06:bd:42:23:7f:66:45:55:63:56:09:9d:05:a4:
5a:e9:c9:f7:c4:55:52:ff:f4:08:12:b8:17:b1:b8:
eb:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:DC:71:70:CD:01:EC:98:47:B6:95:C7:E9:12:CB:23:C5:5D:DE:87
X509v3 Authority Key Identifier:
keyid:B5:3B:A1:8D:5C:EB:8E:79:4C:81:39:CE:02:A7:91:B8:50:18:25:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tTuhjVzrjnlMgTnOAqeRuFAYJe8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/e2510d-e573-45d3-9d20-754b60c5b568/1/tTuhjVzrjnlMgTnOAqeRuFAYJe8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/e2510d-e573-45d3-9d20-754b60c5b568/1/tTuhjVzrjnlMgTnOAqeRuFAYJe8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:42:08:71:bc:01:da:42:2b:a2:74:1d:02:c7:df:79:72:25:
be:78:f0:52:87:0d:63:28:b4:b3:aa:d2:cb:bd:43:3a:4e:4d:
66:4f:d5:64:7a:3e:1b:99:32:50:50:5e:d6:01:91:3f:2c:5e:
4b:74:ed:4d:c3:5a:60:b9:de:58:6a:00:24:6f:7f:07:ac:22:
3b:4e:ff:8c:50:cd:3d:5d:78:bc:e8:4d:41:84:d8:78:ee:be:
c6:fd:39:0a:91:90:85:93:7c:a2:55:35:a2:65:0e:06:80:30:
3a:0a:2d:98:ce:eb:19:bf:53:97:aa:41:30:d9:a8:f3:3b:16:
cf:04:ea:c1:31:9c:9a:48:29:7e:35:75:ef:2f:57:f9:0e:d2:
0b:c6:12:c9:03:e8:09:8a:74:6a:5e:05:13:52:77:0a:1f:fc:
c2:77:87:0a:6e:dc:a3:ac:a2:96:6d:df:41:b6:37:50:cc:fe:
65:51:26:73:da:1d:e2:11:2d:b8:ce:40:41:49:5b:71:63:34:
d5:1d:e5:24:a5:15:6c:d5:bc:b7:b6:fa:95:a1:97:79:a4:bb:
81:52:76:5d:04:1c:f1:6e:a4:c4:64:28:01:e3:ae:ed:55:fb:
c7:14:2c:52:7a:93:15:39:c8:bb:ba:f5:dd:74:bc:08:c7:e7:
25:cb:5a:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 04:01:49 2025 by rpki-client