Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/tJvYTaF5l8uyhq-QIqsuBboItEI.mft
File: tJvYTaF5l8uyhq-QIqsuBboItEI.mft (raw, json)
Hash identifier: nmK4hpS+s6+2RHk4XbHPa5W5jyyfZfyYH9xWw5T6qnc=
Subject key identifier: 5E:E2:B0:86:18:4C:52:DD:80:A1:62:14:DD:59:1F:E2:85:C3:14:77
Authority key identifier: B4:9B:D8:4D:A1:79:97:CB:B2:86:AF:90:22:AB:2E:05:BA:08:B4:42
Certificate issuer: /CN=b49bd84da17997cbb286af9022ab2e05ba08b442
Certificate serial: 019837284C4FAF36682FED9F1B0EB67147A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tJvYTaF5l8uyhq-QIqsuBboItEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/tJvYTaF5l8uyhq-QIqsuBboItEI.mft
Manifest number: 1157
Signing time: Wed 23 Jul 2025 12:00:44 +0000
Manifest this update: Wed 23 Jul 2025 12:00:44 +0000
Manifest next update: Thu 24 Jul 2025 12:00:44 +0000
Files and hashes: 1: 1-PqW8UmiSaov5LQilBVWMK5ZalY.roa (hash: TOVF5pxyQFktaD7ChGQ0pQzpTOW/D5b1AiH6KqbdxuQ=)
2: ZKaLH1RF9q1E6524_CLGwNAeKPU.roa (hash: NYm5o8T+AXl6BoN5iWRobD4OTRMc9uAM7u/9BRILK/4=)
3: ha1PymC_B_zTg0OwXLf43i7WRKI.roa (hash: z4Cqq5RFMdzMGYB6DSPs12v+LmKU0agJDhruZGZUpmY=)
4: tJvYTaF5l8uyhq-QIqsuBboItEI.crl (hash: tyVCjG/4adGD55BF6fhibJeY+dqM/XTosP053R6b34I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/tJvYTaF5l8uyhq-QIqsuBboItEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/tJvYTaF5l8uyhq-QIqsuBboItEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tJvYTaF5l8uyhq-QIqsuBboItEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 12:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:37:28:4c:4f:af:36:68:2f:ed:9f:1b:0e:b6:71:47:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b49bd84da17997cbb286af9022ab2e05ba08b442
Validity
Not Before: Jul 23 12:00:44 2025 GMT
Not After : Jul 24 12:00:44 2025 GMT
Subject: CN=5ee2b086184c52dd80a16214dd591fe285c31477
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:60:49:4a:60:3c:8a:b2:74:71:d5:26:77:fe:
74:bc:4a:4a:77:80:77:12:cd:91:9e:6a:71:f2:25:
d5:77:67:ce:27:ff:d9:0c:b1:c7:e5:f3:8a:19:12:
a9:3b:f7:53:cc:e5:b0:08:74:15:26:05:d6:39:c1:
0f:16:3a:5a:43:79:44:67:53:98:ba:db:cd:72:7d:
a3:2f:a8:44:3c:1a:41:d2:f8:39:d0:2a:61:d8:2e:
f9:90:c9:36:7b:27:d2:01:de:bf:24:2a:72:c1:84:
f2:83:75:33:8b:cb:95:dd:32:05:ee:c4:05:a8:79:
53:70:27:cb:57:cd:f5:18:7e:2c:30:f1:94:16:e0:
8d:57:dd:51:43:a6:5e:12:d5:96:fd:35:b7:4b:d9:
88:d0:21:8a:8a:0e:f9:84:6d:b8:38:05:8b:c9:50:
20:0f:ba:c5:9a:03:2b:a8:17:94:01:f7:a8:fe:3c:
7c:e8:06:c1:00:88:91:af:dc:a3:f3:0f:e4:ca:b7:
42:34:99:49:e7:5e:92:c8:76:74:b8:84:fb:f8:9b:
67:c9:4c:33:17:82:a3:46:08:36:a0:50:2b:25:12:
62:b7:8c:22:59:6d:92:6d:97:ef:eb:1e:0c:7c:74:
bc:65:62:ed:3d:5e:2c:5c:21:07:94:43:d9:c6:ad:
cb:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:E2:B0:86:18:4C:52:DD:80:A1:62:14:DD:59:1F:E2:85:C3:14:77
X509v3 Authority Key Identifier:
keyid:B4:9B:D8:4D:A1:79:97:CB:B2:86:AF:90:22:AB:2E:05:BA:08:B4:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tJvYTaF5l8uyhq-QIqsuBboItEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/tJvYTaF5l8uyhq-QIqsuBboItEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/tJvYTaF5l8uyhq-QIqsuBboItEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:2d:64:c0:9a:dd:59:36:08:33:25:2b:bb:91:bc:29:8a:89:
48:2f:55:97:a6:ec:ed:14:72:14:bf:70:e8:48:e8:91:ed:bb:
43:fc:5f:6f:db:85:3b:76:0f:f2:c0:51:43:a6:55:53:24:e1:
2c:0f:e2:c9:5a:40:5d:e8:6f:ab:f7:3f:a3:0d:af:08:5f:fa:
c2:9a:c7:14:fc:d9:63:dc:0c:bf:84:85:c8:16:44:a1:a4:95:
da:96:f8:85:b0:78:e0:e2:48:4d:9d:74:a8:36:d0:e2:0a:be:
7d:37:bc:60:15:78:fa:a2:4a:f8:5b:3d:a9:5f:31:9b:c9:21:
c5:be:bf:5d:9e:e1:a8:66:64:f0:cd:7b:f7:7f:a9:02:07:cf:
d7:4f:c4:83:af:14:1e:0b:ac:97:e8:f6:bb:67:69:b8:f7:dc:
31:c8:be:16:d0:54:2c:ad:51:83:ac:38:f9:59:c0:d9:ab:52:
56:04:3d:34:af:83:11:27:58:45:d4:ec:08:76:db:67:73:d8:
b9:e7:d0:ce:76:8d:9b:4a:da:19:3b:f8:4e:4e:c7:97:e6:40:
56:93:b3:df:68:bb:46:31:57:9d:0f:4b:ec:7a:5b:67:2f:dc:
78:76:1e:47:ab:22:e0:ce:25:42:33:45:f0:3a:9a:f3:fd:19:
6f:a7:65:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 18:03:19 2025 by rpki-client