
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/c49c08-92ab-4cb1-809b-4ec7b5efae37/1/tVNDqiHHSjn81Rg_T99V3EZ56D0.mft
File: tVNDqiHHSjn81Rg_T99V3EZ56D0.mft (raw, json)
Hash identifier: ldemt21QJX0j90smULV/py7QstNBiPRm9LOnvjr030A=
Subject key identifier: E6:75:E5:D4:84:05:E6:58:DE:5E:52:46:51:EF:91:F9:4C:10:C8:3A
Authority key identifier: B5:53:43:AA:21:C7:4A:39:FC:D5:18:3F:4F:DF:55:DC:46:79:E8:3D
Certificate issuer: /CN=b55343aa21c74a39fcd5183f4fdf55dc4679e83d
Certificate serial: 019769CF18B9C198E7F7A979060C05A54B21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVNDqiHHSjn81Rg_T99V3EZ56D0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/c49c08-92ab-4cb1-809b-4ec7b5efae37/1/tVNDqiHHSjn81Rg_T99V3EZ56D0.mft
Manifest number: C5
Signing time: Fri 13 Jun 2025 15:01:09 +0000
Manifest this update: Fri 13 Jun 2025 15:01:09 +0000
Manifest next update: Sat 14 Jun 2025 15:01:09 +0000
Files and hashes: 1: RXmLcd13ajoTVlcEirVukYVayjY.roa (hash: VMYnLhwMDYwO9ah7mzCKDLgq1vs8pRSHkOzi/+9nkdg=)
2: tVNDqiHHSjn81Rg_T99V3EZ56D0.crl (hash: 6NfNEcejfEEK0ZFU4rLyOdLfeqCoXueEYc/KPSI1a90=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/c49c08-92ab-4cb1-809b-4ec7b5efae37/1/tVNDqiHHSjn81Rg_T99V3EZ56D0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/c49c08-92ab-4cb1-809b-4ec7b5efae37/1/tVNDqiHHSjn81Rg_T99V3EZ56D0.mft
rsync://rpki.ripe.net/repository/DEFAULT/tVNDqiHHSjn81Rg_T99V3EZ56D0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:cf:18:b9:c1:98:e7:f7:a9:79:06:0c:05:a5:4b:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b55343aa21c74a39fcd5183f4fdf55dc4679e83d
Validity
Not Before: Jun 13 15:01:09 2025 GMT
Not After : Jun 14 15:01:09 2025 GMT
Subject: CN=e675e5d48405e658de5e524651ef91f94c10c83a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:4a:95:75:fe:0c:de:73:ba:85:3f:81:41:c1:
98:c5:ad:83:2e:de:bf:7b:61:ed:86:53:90:cb:00:
17:19:cd:0e:c1:e3:16:31:dc:3e:f2:cd:da:58:0e:
ab:5b:1e:74:03:9d:89:e7:60:21:70:f4:54:ba:8e:
a1:1b:5f:aa:50:03:12:83:da:e1:66:b4:1e:41:cc:
44:6b:12:b4:9b:7c:b6:73:62:b7:8c:cc:2d:09:cf:
f2:40:54:19:2f:ba:d8:18:15:d0:3e:8e:00:ec:07:
10:b2:cc:f7:83:a6:b2:ac:76:40:1a:89:90:ef:1c:
18:3b:0e:c1:b8:08:03:a6:fb:d9:d0:c0:ad:99:7a:
9a:ea:b2:02:13:36:ad:3a:23:e4:52:13:7b:e1:58:
fa:37:62:09:22:74:a1:ba:83:39:30:4d:bc:56:82:
ec:3c:56:02:34:42:1b:ab:80:3f:8d:5a:71:b1:38:
17:f3:09:e4:11:7c:84:31:52:98:eb:25:b2:42:a0:
dc:c3:e7:b8:22:ff:6d:e8:4f:1d:a1:a0:27:8e:be:
d5:0e:21:30:44:60:4e:45:82:2d:0a:b1:ec:1e:1a:
b1:5e:7a:d6:78:e3:c6:57:90:ee:98:da:fc:5a:6c:
c0:c6:7b:1f:6d:f8:55:54:34:49:f3:40:70:0f:db:
8d:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:75:E5:D4:84:05:E6:58:DE:5E:52:46:51:EF:91:F9:4C:10:C8:3A
X509v3 Authority Key Identifier:
keyid:B5:53:43:AA:21:C7:4A:39:FC:D5:18:3F:4F:DF:55:DC:46:79:E8:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVNDqiHHSjn81Rg_T99V3EZ56D0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c49c08-92ab-4cb1-809b-4ec7b5efae37/1/tVNDqiHHSjn81Rg_T99V3EZ56D0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c49c08-92ab-4cb1-809b-4ec7b5efae37/1/tVNDqiHHSjn81Rg_T99V3EZ56D0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:b4:ab:0d:db:a0:9e:4e:42:1a:cb:84:e6:54:88:e5:7a:af:
4f:f5:d4:7b:48:ec:f8:14:c5:9a:6a:e8:e2:ad:9f:f6:cb:6e:
3b:7f:19:fe:ab:45:c5:68:37:e7:b0:fb:b1:3e:26:fb:71:33:
1c:38:f0:c8:f8:c6:bc:5f:3a:0f:cc:b8:8a:cb:af:54:20:f4:
3c:a1:ca:b3:86:16:29:b4:88:c5:22:6e:e7:53:e1:ab:c8:bd:
bb:26:87:55:da:e8:1c:d9:0c:ab:8d:d3:84:99:ab:61:96:1f:
9d:8c:24:45:34:db:dd:98:11:4b:dd:29:ca:f9:91:0d:3c:54:
57:8a:93:c0:69:c6:d7:71:50:f4:88:a1:11:08:c3:91:aa:c4:
81:c3:c1:68:0e:ce:88:55:ab:46:35:e8:30:51:b1:8a:29:48:
da:4c:5d:1c:57:a7:b2:4f:1a:8f:10:2e:0e:27:2b:25:9e:d1:
18:2f:4d:2b:c1:20:8a:c9:66:95:85:64:b2:d6:11:ea:74:f0:
ee:92:28:51:8f:ac:35:2d:d6:8d:0f:d6:9c:38:29:12:54:1d:
f4:8a:95:5d:87:b6:1c:ae:25:35:fb:d6:2c:61:0d:54:7e:1e:
f1:d8:ff:b7:35:31:db:68:05:d0:fc:05:6c:8a:ba:34:8f:ca:
72:b0:3e:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:07:50 2025 by rpki-client