Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/264934-2a7f-428b-afe5-81d214edf298/1/tN1tZY4UVx6Dn3gT2jHyIXQigY4.mft
File: tN1tZY4UVx6Dn3gT2jHyIXQigY4.mft (raw, json)
Hash identifier: RK3g734SfCgu7kR9OhtzZnCiDs/DbxyhRtI7qP19ay0=
Subject key identifier: 77:F8:95:F6:E9:70:3F:A4:3B:37:F8:D8:A1:2C:03:D0:A7:70:A9:05
Authority key identifier: B4:DD:6D:65:8E:14:57:1E:83:9F:78:13:DA:31:F2:21:74:22:81:8E
Certificate issuer: /CN=b4dd6d658e14571e839f7813da31f2217422818e
Certificate serial: 01983570BA3CBFE1FDB31AEE5355D4474FC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tN1tZY4UVx6Dn3gT2jHyIXQigY4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/264934-2a7f-428b-afe5-81d214edf298/1/tN1tZY4UVx6Dn3gT2jHyIXQigY4.mft
Manifest number: 15F7
Signing time: Wed 23 Jul 2025 04:00:36 +0000
Manifest this update: Wed 23 Jul 2025 04:00:36 +0000
Manifest next update: Thu 24 Jul 2025 04:00:36 +0000
Files and hashes: 1: i7TTR0PMX6DAq8x2EEX7tvYEy2w.roa (hash: iWmz0ZT2uDCkIA/K5JDubPnWXPlf7zxHizjmswntW2Y=)
2: tN1tZY4UVx6Dn3gT2jHyIXQigY4.crl (hash: 7SRE6Oh4QQejIDFNgrkt5VF7Hr9cmH+sd4/68hXUlw8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/264934-2a7f-428b-afe5-81d214edf298/1/tN1tZY4UVx6Dn3gT2jHyIXQigY4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/264934-2a7f-428b-afe5-81d214edf298/1/tN1tZY4UVx6Dn3gT2jHyIXQigY4.mft
rsync://rpki.ripe.net/repository/DEFAULT/tN1tZY4UVx6Dn3gT2jHyIXQigY4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 04:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:35:70:ba:3c:bf:e1:fd:b3:1a:ee:53:55:d4:47:4f:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4dd6d658e14571e839f7813da31f2217422818e
Validity
Not Before: Jul 23 04:00:36 2025 GMT
Not After : Jul 24 04:00:36 2025 GMT
Subject: CN=77f895f6e9703fa43b37f8d8a12c03d0a770a905
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:b7:81:d3:75:2b:72:82:72:6e:99:bb:ab:b8:
f6:c5:41:13:c0:7e:1a:9e:c7:ef:42:ed:0a:fb:1d:
e8:77:38:30:4e:86:51:b2:69:4e:0e:7f:92:27:f6:
48:79:62:b0:ea:7d:22:9d:ab:2b:12:31:a8:01:11:
75:1a:bc:2f:a7:1c:da:77:fe:56:cd:20:49:d6:ad:
c3:b3:9a:bc:36:5e:7c:05:46:70:4c:6a:c5:f4:d0:
9a:7d:d5:83:a6:32:25:54:65:ad:e2:ee:85:0c:10:
b4:6d:7b:d4:89:13:ca:ee:1d:e4:c6:8c:99:d3:14:
43:04:13:2f:cd:1c:a2:17:f1:f5:50:63:ef:f7:fe:
a3:4c:48:2c:97:ff:5a:34:7f:dd:63:a4:f7:ac:a2:
34:51:ab:05:1a:ea:8d:b5:18:69:63:95:11:5d:22:
91:88:8a:f7:c8:46:5e:e0:b2:5a:73:a2:12:15:4f:
0a:b0:ea:4c:e8:36:91:fc:c7:f8:ac:cf:fd:62:38:
71:1a:08:e6:0e:a0:4c:e7:de:2d:0e:2d:28:e4:ca:
79:66:fb:15:e4:40:f9:49:b2:1a:4a:fd:81:e6:ad:
81:96:45:09:8e:19:c6:65:17:92:94:d8:25:a6:85:
86:01:f7:e0:51:35:f2:52:e5:7e:28:06:ca:ea:77:
56:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:F8:95:F6:E9:70:3F:A4:3B:37:F8:D8:A1:2C:03:D0:A7:70:A9:05
X509v3 Authority Key Identifier:
keyid:B4:DD:6D:65:8E:14:57:1E:83:9F:78:13:DA:31:F2:21:74:22:81:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tN1tZY4UVx6Dn3gT2jHyIXQigY4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/264934-2a7f-428b-afe5-81d214edf298/1/tN1tZY4UVx6Dn3gT2jHyIXQigY4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/264934-2a7f-428b-afe5-81d214edf298/1/tN1tZY4UVx6Dn3gT2jHyIXQigY4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:c2:83:cf:ed:91:53:fd:da:65:ca:2d:d2:a1:05:91:b2:4a:
99:02:ed:9c:4b:16:4a:51:cf:e6:af:25:f6:9d:f5:89:dc:89:
70:87:22:7c:9b:bc:e2:ee:ba:75:d9:4a:af:b2:31:34:18:1e:
e2:da:1d:b1:89:c9:38:6b:a6:de:5d:fe:98:8e:31:60:75:6d:
d2:8c:a8:84:69:9b:cb:6d:3e:13:33:52:e0:95:43:2c:53:0e:
d2:4b:2f:19:65:1b:3b:3f:ca:8a:02:f9:42:c4:18:d7:44:7a:
95:81:ea:b1:a9:a7:5c:9f:58:47:c2:69:10:ec:df:d1:c4:8a:
57:a5:e8:b6:a9:13:a0:ea:bb:67:41:f3:28:94:dc:ab:e5:f3:
e6:73:4c:6b:b0:c0:27:c8:c3:22:29:cc:5d:75:97:7c:2a:d8:
da:73:d3:59:1f:21:01:cd:82:b5:26:29:25:81:35:18:66:50:
f2:5b:62:6d:9b:4a:ee:28:7c:2f:5f:c3:59:b8:3a:a6:88:b5:
44:14:2f:8f:e2:0b:c0:25:dd:e8:85:44:ca:20:5b:21:5e:b4:
a4:09:c6:5a:26:e1:e5:64:90:be:35:37:f7:b9:be:e6:18:3d:
72:8e:2f:f5:1c:a9:11:cf:e0:19:55:a6:d1:26:dd:d7:4a:c5:
37:0b:8d:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 12:19:48 2025 by rpki-client