Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/171cea-3d78-4513-ad49-5a905af507c3/1/tu2bXLS2SGbDg97kV2v_P_h1JC0.mft
File: tu2bXLS2SGbDg97kV2v_P_h1JC0.mft (raw, json)
Hash identifier: kfeveIcBDEK2sxBU2IOllIYoGTMpoE5xxHeyLbO7eiA=
Subject key identifier: 98:A6:E5:E1:90:DF:D2:88:91:0E:E1:EC:30:CB:08:30:32:51:CC:00
Authority key identifier: B6:ED:9B:5C:B4:B6:48:66:C3:83:DE:E4:57:6B:FF:3F:F8:75:24:2D
Certificate issuer: /CN=b6ed9b5cb4b64866c383dee4576bff3ff875242d
Certificate serial: 01984E1E2F478064BA407633B482AB2ED6A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tu2bXLS2SGbDg97kV2v_P_h1JC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/171cea-3d78-4513-ad49-5a905af507c3/1/tu2bXLS2SGbDg97kV2v_P_h1JC0.mft
Manifest number: 0D7B
Signing time: Sun 27 Jul 2025 23:00:57 +0000
Manifest this update: Sun 27 Jul 2025 23:00:57 +0000
Manifest next update: Mon 28 Jul 2025 23:00:57 +0000
Files and hashes: 1: Cr7WIZXJqqSxx1MgWk3fJvY56gA.roa (hash: W0p2Ng/L4A+CUhGlPSgje47dkJ8+aMEjdUAnh4zo9Rc=)
2: tu2bXLS2SGbDg97kV2v_P_h1JC0.crl (hash: PxEu1/OGhTPblPqcXNb+u+DKh79LI5XdcI5vsQli1ow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/171cea-3d78-4513-ad49-5a905af507c3/1/tu2bXLS2SGbDg97kV2v_P_h1JC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/171cea-3d78-4513-ad49-5a905af507c3/1/tu2bXLS2SGbDg97kV2v_P_h1JC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/tu2bXLS2SGbDg97kV2v_P_h1JC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 18:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4e:1e:2f:47:80:64:ba:40:76:33:b4:82:ab:2e:d6:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6ed9b5cb4b64866c383dee4576bff3ff875242d
Validity
Not Before: Jul 27 23:00:57 2025 GMT
Not After : Jul 28 23:00:57 2025 GMT
Subject: CN=98a6e5e190dfd288910ee1ec30cb08303251cc00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:3d:4d:e5:da:d5:81:bd:bb:01:fc:f3:fd:9b:
a5:f5:69:2d:bb:55:ff:b9:4a:ab:35:37:d6:31:82:
34:c9:e6:6f:ed:74:d5:85:bc:ba:15:cb:1d:36:25:
71:33:32:0f:4c:71:d6:26:e1:90:e2:78:ec:3e:4e:
9c:09:79:53:b8:0b:3d:05:ba:96:58:65:7c:0b:c6:
2e:39:ec:f5:0a:fa:f1:e2:76:15:20:96:cf:da:8a:
ee:13:e3:4e:bc:74:52:ef:2d:d5:61:21:db:55:ee:
5b:8f:8c:45:fe:6b:cb:ba:0d:59:d2:59:b4:c2:4e:
fa:4f:a9:b1:5b:45:ae:d3:ca:78:4b:95:84:77:40:
0a:32:f4:4c:56:97:be:e9:81:21:ff:3c:19:6a:57:
37:05:ae:85:40:f9:b3:48:da:1b:ef:58:9b:f8:d0:
a6:a9:9e:77:0b:d1:28:37:23:d9:bb:44:20:e5:cd:
1f:21:53:35:f2:e5:dd:cb:16:26:73:4e:0f:0f:4f:
2c:76:6b:4a:93:63:ea:c4:7d:9e:c6:54:45:08:6d:
d9:e1:29:8f:37:28:4b:eb:96:46:a7:b0:d1:60:06:
33:56:ff:52:56:e6:79:7a:09:ae:86:6e:eb:46:0d:
64:2c:2f:cc:8e:9f:43:1c:64:40:88:87:af:84:fe:
af:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:A6:E5:E1:90:DF:D2:88:91:0E:E1:EC:30:CB:08:30:32:51:CC:00
X509v3 Authority Key Identifier:
keyid:B6:ED:9B:5C:B4:B6:48:66:C3:83:DE:E4:57:6B:FF:3F:F8:75:24:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tu2bXLS2SGbDg97kV2v_P_h1JC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/171cea-3d78-4513-ad49-5a905af507c3/1/tu2bXLS2SGbDg97kV2v_P_h1JC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/171cea-3d78-4513-ad49-5a905af507c3/1/tu2bXLS2SGbDg97kV2v_P_h1JC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:37:8b:58:5a:46:6e:13:cd:59:c9:41:5d:28:b8:eb:f3:bd:
a7:42:3c:f6:a8:b3:75:2e:35:28:74:bc:1c:4b:4c:8b:0e:73:
a7:89:82:cc:29:56:d0:dc:b3:0a:cc:14:24:52:80:f1:b4:b2:
71:5e:d6:a3:b1:5d:87:62:35:3f:4f:fb:c3:e5:d2:52:e0:54:
41:fe:f4:94:b0:da:a6:89:71:3d:4b:dd:28:e8:05:c5:ca:c2:
08:e1:76:cf:b5:2f:91:86:b0:ef:2f:fa:f6:fd:8a:70:3e:b2:
7f:a9:db:63:07:98:e5:3b:be:f1:24:55:2a:a6:70:4f:b4:51:
6c:48:fd:ef:f8:49:71:df:6a:a8:66:8f:30:d2:b0:3e:f6:d1:
4e:2c:4b:21:e7:07:d4:59:66:c4:e5:e7:98:02:49:70:c4:47:
4a:65:36:21:e3:92:e1:e1:f8:39:d6:05:93:22:ae:56:4b:98:
05:8f:53:d6:a3:d9:09:22:3c:b7:95:07:0d:4b:e0:65:da:bc:
6b:f7:16:44:8c:24:bc:4d:f4:ec:55:21:59:95:df:e3:a4:95:
9b:30:fc:1b:ec:33:15:46:65:68:55:b1:01:fc:93:b7:47:38:
05:4b:73:99:a9:dc:66:e5:ea:1b:7e:6d:dd:a4:74:9a:a3:10:
26:ac:f5:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 02:49:51 2025 by rpki-client