Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/c7bb18-df0b-450b-bd11-870828808f88/1/tSF6hPcV6kjlzDeDsTjOjH5wOYw.mft
File: tSF6hPcV6kjlzDeDsTjOjH5wOYw.mft (raw, json)
Hash identifier: WEANQ6bcIR8tv25BEjtyRK2Hj75/YRZ4DbuFgu17wHc=
Subject key identifier: DB:B4:B7:1F:C0:8D:D5:99:2F:3C:7A:70:07:A8:CF:85:CE:E3:19:3F
Authority key identifier: B5:21:7A:84:F7:15:EA:48:E5:CC:37:83:B1:38:CE:8C:7E:70:39:8C
Certificate issuer: /CN=b5217a84f715ea48e5cc3783b138ce8c7e70398c
Certificate serial: 019896A696E25AD0DC623259C63F749AF6B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tSF6hPcV6kjlzDeDsTjOjH5wOYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/c7bb18-df0b-450b-bd11-870828808f88/1/tSF6hPcV6kjlzDeDsTjOjH5wOYw.mft
Manifest number: 0BEE
Signing time: Mon 11 Aug 2025 01:02:36 +0000
Manifest this update: Mon 11 Aug 2025 01:02:36 +0000
Manifest next update: Tue 12 Aug 2025 01:02:36 +0000
Files and hashes: 1: sEcAqep2NyLTkuYW41YUgHA9f4w.roa (hash: 3/7vZf5AuYQ6PDHss1zXReAWYubN+OUgtUWtMk8fZcY=)
2: tSF6hPcV6kjlzDeDsTjOjH5wOYw.crl (hash: x0Q9PMvgmhT9Lm7f5veR24/MrBPrOrg4E6Yh7Pnptdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/c7bb18-df0b-450b-bd11-870828808f88/1/tSF6hPcV6kjlzDeDsTjOjH5wOYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/c7bb18-df0b-450b-bd11-870828808f88/1/tSF6hPcV6kjlzDeDsTjOjH5wOYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tSF6hPcV6kjlzDeDsTjOjH5wOYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 01:02:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:a6:96:e2:5a:d0:dc:62:32:59:c6:3f:74:9a:f6:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5217a84f715ea48e5cc3783b138ce8c7e70398c
Validity
Not Before: Aug 11 01:02:36 2025 GMT
Not After : Aug 12 01:02:36 2025 GMT
Subject: CN=dbb4b71fc08dd5992f3c7a7007a8cf85cee3193f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:df:a6:29:33:99:d6:50:1a:9a:aa:46:7e:60:
35:a0:6e:5d:62:31:1e:74:97:96:e8:9b:29:55:d1:
d5:87:cb:87:e7:63:fa:30:72:15:f7:b8:ac:b7:88:
21:21:d8:6d:77:5b:c1:a2:3e:74:89:c8:30:7a:76:
4a:39:09:f1:01:4d:fe:48:7b:a6:09:c5:34:e3:fc:
ed:ab:75:7d:4b:24:31:97:bf:ab:ee:a1:42:50:19:
f5:91:47:77:f1:1b:15:d5:ca:e5:df:63:14:16:59:
96:ab:5b:64:6f:f4:87:b8:0a:22:a2:b1:1a:fb:23:
65:78:70:d4:8e:c7:ce:d6:29:f1:94:7d:43:45:06:
94:1c:4e:ae:ec:c8:d8:09:d2:97:4a:4d:5c:16:fe:
ae:a8:3b:0d:6b:78:0a:07:32:26:a0:ef:76:f8:77:
86:58:b0:bd:7c:ca:5c:27:3b:d6:1e:1e:19:87:dd:
79:1b:0f:22:e2:29:6a:a7:6b:be:a9:69:de:db:f1:
43:fe:e2:53:e7:01:99:85:f9:42:51:00:ac:91:ca:
bd:22:9d:c2:6b:05:29:20:73:d1:18:35:3a:0a:90:
57:ac:3d:32:7f:73:7a:84:63:2f:af:5e:b6:99:46:
9c:7c:94:c6:d0:95:58:e4:d7:24:e9:94:9f:65:3e:
2b:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:B4:B7:1F:C0:8D:D5:99:2F:3C:7A:70:07:A8:CF:85:CE:E3:19:3F
X509v3 Authority Key Identifier:
keyid:B5:21:7A:84:F7:15:EA:48:E5:CC:37:83:B1:38:CE:8C:7E:70:39:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tSF6hPcV6kjlzDeDsTjOjH5wOYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c7bb18-df0b-450b-bd11-870828808f88/1/tSF6hPcV6kjlzDeDsTjOjH5wOYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c7bb18-df0b-450b-bd11-870828808f88/1/tSF6hPcV6kjlzDeDsTjOjH5wOYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:37:cb:f2:a1:80:27:de:03:f4:6d:e5:48:8a:34:6f:b2:bc:
16:4e:ba:9c:30:a9:a6:ce:39:77:2c:7a:4e:73:fb:e0:f4:97:
ce:7a:e8:aa:1c:e9:85:9d:31:d4:1e:4f:e4:b7:05:50:22:19:
4a:b6:d7:ec:79:18:68:a3:58:d9:d4:5c:5d:0e:7b:01:80:a7:
9c:9d:31:06:88:bd:65:93:67:d8:99:6d:76:7e:10:22:5a:ac:
78:fa:a9:4d:8e:b9:b9:66:f4:4c:ad:ec:59:9d:39:91:df:65:
aa:48:e8:94:f2:fb:11:10:50:4a:31:79:3c:8c:90:14:85:c1:
2a:f0:84:74:1b:9f:6e:a9:8b:82:02:a1:ea:d9:5b:ca:c9:7b:
82:fb:e5:86:ba:64:d9:dc:2b:48:ed:bd:05:76:ab:23:85:9d:
b3:e5:83:29:0d:11:ba:ef:14:d9:9d:33:38:15:34:42:50:db:
96:1c:69:a4:e8:33:91:55:ba:1c:89:e2:5a:05:1a:46:d0:73:
84:38:a3:c1:0e:43:96:72:68:a2:e5:7d:19:0c:c9:ff:fe:ab:
b0:33:2f:89:9b:5a:d3:35:ac:70:31:13:b1:9a:ce:97:b0:2b:
21:be:a4:5d:63:31:62:6a:88:75:dd:21:37:32:35:7e:c2:67:
16:f4:24:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:10:09 2025 by rpki-client