Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/74271c-69a7-4a86-966d-2a1451e7e3c1/1/tEOzSG3ngm_WsOKuwCZZe2IHs3M.mft
File: tEOzSG3ngm_WsOKuwCZZe2IHs3M.mft (raw, json)
Hash identifier: y/VJ+39Q+9V/6L8uydms+HFZiNAlWiEFPbho9qzRd00=
Subject key identifier: 84:4B:B0:26:9C:3B:34:C2:D8:85:0C:33:CA:EE:AD:57:D3:6D:F1:C1
Authority key identifier: B4:43:B3:48:6D:E7:82:6F:D6:B0:E2:AE:C0:26:59:7B:62:07:B3:73
Certificate issuer: /CN=b443b3486de7826fd6b0e2aec026597b6207b373
Certificate serial: 01984AAEBB196BCCC51A220A403A21066226
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tEOzSG3ngm_WsOKuwCZZe2IHs3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/74271c-69a7-4a86-966d-2a1451e7e3c1/1/tEOzSG3ngm_WsOKuwCZZe2IHs3M.mft
Manifest number: 0665
Signing time: Sun 27 Jul 2025 07:00:21 +0000
Manifest this update: Sun 27 Jul 2025 07:00:21 +0000
Manifest next update: Mon 28 Jul 2025 07:00:21 +0000
Files and hashes: 1: tEOzSG3ngm_WsOKuwCZZe2IHs3M.crl (hash: MXCLxhNFWf1GWE8x6vTDgRnGaOPzHyCbPWvGUCaCx6w=)
2: wT4e9Ao8jFQGwyLrCGIT4nZjT4c.roa (hash: pBWXcPqjDxvwQjU9omFEQSPm1JUMryg0VPK+ErbtywE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/74271c-69a7-4a86-966d-2a1451e7e3c1/1/tEOzSG3ngm_WsOKuwCZZe2IHs3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/74271c-69a7-4a86-966d-2a1451e7e3c1/1/tEOzSG3ngm_WsOKuwCZZe2IHs3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/tEOzSG3ngm_WsOKuwCZZe2IHs3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:ae:bb:19:6b:cc:c5:1a:22:0a:40:3a:21:06:62:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b443b3486de7826fd6b0e2aec026597b6207b373
Validity
Not Before: Jul 27 07:00:21 2025 GMT
Not After : Jul 28 07:00:21 2025 GMT
Subject: CN=844bb0269c3b34c2d8850c33caeead57d36df1c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a4:a8:92:39:1f:22:6b:83:ec:dc:5b:e2:a5:
68:0c:6f:53:ef:d9:f8:3b:08:ac:38:3c:1b:c4:be:
45:2b:c6:fe:61:03:00:b8:95:f2:71:1e:9b:78:18:
5f:c7:dd:1a:62:34:aa:ae:4e:61:9e:91:64:f7:72:
c4:14:fb:00:75:ef:21:e5:28:a4:87:18:d6:41:4e:
59:21:a2:7d:c3:bc:11:63:61:c5:43:ce:46:12:95:
05:96:e8:bd:00:0e:94:2e:95:e7:6d:bf:a3:f6:65:
df:e0:70:5b:aa:83:c1:02:a6:fa:f5:52:3b:d9:d5:
38:59:f4:85:fb:fe:53:39:b9:b6:2a:a3:82:08:9f:
41:7c:9c:4f:2a:e0:e1:6f:7e:2e:31:a8:74:d1:14:
7e:1f:20:c6:87:15:93:3a:6c:d5:4f:3c:d5:5a:5c:
51:97:14:01:b6:28:14:db:73:88:ad:93:ed:02:cd:
2a:7d:58:78:10:5b:58:a4:91:bb:8a:11:95:6b:63:
07:38:67:16:34:0a:ee:bd:3e:3e:a5:6d:65:6c:16:
e9:26:30:9b:20:14:97:9b:80:41:a7:7c:89:7a:2a:
19:36:0f:5c:02:c7:d3:0d:59:01:38:a3:b0:01:4a:
21:9e:8a:be:49:32:ac:32:4f:1a:cd:ad:62:ab:ac:
fe:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:4B:B0:26:9C:3B:34:C2:D8:85:0C:33:CA:EE:AD:57:D3:6D:F1:C1
X509v3 Authority Key Identifier:
keyid:B4:43:B3:48:6D:E7:82:6F:D6:B0:E2:AE:C0:26:59:7B:62:07:B3:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tEOzSG3ngm_WsOKuwCZZe2IHs3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/74271c-69a7-4a86-966d-2a1451e7e3c1/1/tEOzSG3ngm_WsOKuwCZZe2IHs3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/74271c-69a7-4a86-966d-2a1451e7e3c1/1/tEOzSG3ngm_WsOKuwCZZe2IHs3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:57:d2:e8:16:8b:83:6e:76:f8:23:3b:cd:32:f9:3d:ba:b2:
bd:94:0b:4b:8e:5f:97:25:fc:4d:7b:52:88:1c:17:a3:72:b6:
f1:95:bf:36:b0:c2:91:96:8a:c3:4c:c4:be:f0:88:9c:fc:b4:
7d:4b:b2:ff:b7:c7:14:3e:57:b7:05:ce:fc:a0:ed:a6:eb:3d:
9a:cc:a6:a0:d6:df:f9:94:bc:9a:3f:40:65:21:13:f6:6b:95:
53:a2:c9:76:d0:88:f0:1c:84:49:85:4f:07:38:5a:5d:cc:42:
2c:c5:06:63:88:06:49:2c:3c:6a:ad:d0:ec:e8:6d:6b:91:5b:
34:83:8e:35:d4:8f:75:f9:10:5b:28:a1:f6:ab:17:44:0f:c5:
4d:dd:e9:e7:26:25:9e:bf:d1:25:62:cd:6d:9d:25:a4:74:2f:
cf:88:de:62:7a:35:2b:72:19:0f:e7:aa:ef:88:98:df:20:20:
d8:56:82:d0:3d:84:f2:17:70:1e:c4:2d:a8:69:14:46:7e:cc:
ce:8c:15:8b:1d:03:76:f0:61:95:4c:37:c5:19:4e:13:31:57:
27:f9:73:56:69:fb:a7:9a:a7:90:5c:54:ce:c3:bf:e9:ff:38:
80:ab:d4:d5:bd:0a:9d:c0:5c:f4:c1:c1:70:c6:71:7b:d6:b1:
ee:ec:9d:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:34:13 2025 by rpki-client