Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/0e3d64-f290-4893-9a40-c9e141333d58/1/tT2fG8Pw2QttzR6fb9HlBhiOp8I.mft
File: tT2fG8Pw2QttzR6fb9HlBhiOp8I.mft (raw, json)
Hash identifier: t5m1m0n7IxB0P1AyQjUY1CFw+x/9moGUgqmOFdWol9U=
Subject key identifier: E0:29:AF:23:9A:32:1B:17:A5:28:65:A7:F6:E1:D7:18:87:AE:91:01
Authority key identifier: B5:3D:9F:1B:C3:F0:D9:0B:6D:CD:1E:9F:6F:D1:E5:06:18:8E:A7:C2
Certificate issuer: /CN=b53d9f1bc3f0d90b6dcd1e9f6fd1e506188ea7c2
Certificate serial: 01984A411277B9D4927E8E230B4DBC7E55D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tT2fG8Pw2QttzR6fb9HlBhiOp8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/0e3d64-f290-4893-9a40-c9e141333d58/1/tT2fG8Pw2QttzR6fb9HlBhiOp8I.mft
Manifest number: 08A2
Signing time: Sun 27 Jul 2025 05:00:35 +0000
Manifest this update: Sun 27 Jul 2025 05:00:35 +0000
Manifest next update: Mon 28 Jul 2025 05:00:35 +0000
Files and hashes: 1: P4_VmIDFfqYiDiPBdVVMzIA4LMY.roa (hash: fbL8P+MktK6PkeO1KtnH7o+BeC/FNslw8AAfJjr38OY=)
2: WKELc_W8mdXUUZ324MSWDeu1wXI.roa (hash: 0tteI0ps1fiC7XdrvhsFyeYnjz3rCzmXkLHL3vxN7GA=)
3: tT2fG8Pw2QttzR6fb9HlBhiOp8I.crl (hash: TwaoxwGaouxRfDjxoNsKAOaaoaFRqEoRhMSKCLsHPhE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/0e3d64-f290-4893-9a40-c9e141333d58/1/tT2fG8Pw2QttzR6fb9HlBhiOp8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/0e3d64-f290-4893-9a40-c9e141333d58/1/tT2fG8Pw2QttzR6fb9HlBhiOp8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/tT2fG8Pw2QttzR6fb9HlBhiOp8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:41:12:77:b9:d4:92:7e:8e:23:0b:4d:bc:7e:55:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b53d9f1bc3f0d90b6dcd1e9f6fd1e506188ea7c2
Validity
Not Before: Jul 27 05:00:35 2025 GMT
Not After : Jul 28 05:00:35 2025 GMT
Subject: CN=e029af239a321b17a52865a7f6e1d71887ae9101
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:31:d4:e1:d3:d7:27:54:11:62:3f:7c:e4:a5:
d1:ad:29:4c:d0:2c:14:6c:7b:7a:a9:44:8b:e3:16:
1a:4b:11:6c:f0:99:8d:43:e7:06:a5:48:20:d0:81:
e5:8b:29:70:47:44:39:7d:c3:4b:eb:54:fc:e1:cf:
1c:1c:06:10:6f:cf:43:50:9e:42:a3:e1:78:09:c6:
bf:44:7f:81:d9:da:5b:6e:fe:4f:a9:92:e0:42:c2:
88:19:16:24:56:4d:32:5f:ba:33:c3:dc:ac:bf:04:
04:4b:fe:87:30:35:3f:a3:3f:54:ac:6f:8e:de:ff:
5b:69:7c:1b:0d:28:36:db:61:db:b4:41:a6:7e:67:
c3:71:a1:cd:90:87:71:4a:d1:72:17:5e:12:e5:98:
b3:cf:90:54:0a:81:66:fa:f4:58:49:26:b2:c8:a3:
3d:99:e4:72:87:23:75:ea:14:42:8b:23:12:18:24:
b3:07:11:7d:9b:a4:93:aa:5d:70:30:94:d1:6b:03:
60:4a:74:e0:1b:b4:c4:fb:b4:8a:74:97:5d:5c:51:
40:12:33:d7:48:bc:3c:73:eb:fa:9f:2b:77:0c:f2:
6e:d5:9c:7f:4a:e3:dd:4c:70:e0:e9:67:5c:e5:fd:
c2:df:86:a3:ca:85:60:7c:96:c4:6b:3e:62:7a:8c:
04:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:29:AF:23:9A:32:1B:17:A5:28:65:A7:F6:E1:D7:18:87:AE:91:01
X509v3 Authority Key Identifier:
keyid:B5:3D:9F:1B:C3:F0:D9:0B:6D:CD:1E:9F:6F:D1:E5:06:18:8E:A7:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tT2fG8Pw2QttzR6fb9HlBhiOp8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/0e3d64-f290-4893-9a40-c9e141333d58/1/tT2fG8Pw2QttzR6fb9HlBhiOp8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/0e3d64-f290-4893-9a40-c9e141333d58/1/tT2fG8Pw2QttzR6fb9HlBhiOp8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:eb:2c:b1:f7:79:c0:a7:6a:98:2b:18:f5:68:f8:d5:fa:19:
a6:b0:a1:7e:07:23:bd:2d:71:00:a9:fc:d8:85:d1:15:1e:53:
ce:d7:0d:33:38:bf:da:56:85:17:05:b0:3a:09:02:34:f1:25:
c9:71:cf:a9:05:d2:85:ff:da:e0:fe:c2:06:c2:0d:d9:f7:66:
09:22:e5:1c:bb:78:0b:9c:29:0f:72:64:65:08:a2:01:7f:fe:
f9:a5:e1:7b:16:45:10:e4:97:56:76:fd:0d:05:4f:95:db:22:
05:43:e3:c2:58:af:72:e1:41:70:16:7c:bf:6a:4f:9b:61:1c:
56:33:60:3f:3d:f6:da:0e:5a:8c:17:d0:b4:a9:ce:a0:b1:0f:
61:1c:13:48:c1:b1:3b:79:5e:17:28:97:ab:23:47:b2:eb:cc:
f3:68:6c:f3:32:f8:71:c5:66:ab:ad:8c:ee:08:04:a6:93:a4:
8d:1f:d7:c0:f7:1b:27:45:87:5d:0b:14:fd:e9:64:d5:b9:a8:
3f:da:26:3e:14:d8:aa:a6:4b:27:74:0d:6f:3f:5a:91:d3:3a:
a6:9c:63:9e:16:d7:47:18:2f:ed:8b:81:a3:ad:82:57:b7:06:
af:23:39:52:69:4c:4d:ce:b2:e0:52:de:05:4b:df:e3:e0:5b:
63:65:b7:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:29:23 2025 by rpki-client