Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/5454ad-6cf3-4ee5-a4b9-0464e945f1cc/1/tDuXodIfY3tUkTDwhXpoHMf2iEw.mft
File: tDuXodIfY3tUkTDwhXpoHMf2iEw.mft (raw, json)
Hash identifier: YwEkp7X4ede0CsxNik4R25Jcgh/tmq3EkXTlTWL+Kxk=
Subject key identifier: D0:11:04:79:CC:37:B6:9A:61:DA:69:B9:D4:58:23:7D:32:85:85:DA
Authority key identifier: B4:3B:97:A1:D2:1F:63:7B:54:91:30:F0:85:7A:68:1C:C7:F6:88:4C
Certificate issuer: /CN=b43b97a1d21f637b549130f0857a681cc7f6884c
Certificate serial: 01984589D88FD4487B266BEDC7ABECED3DF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDuXodIfY3tUkTDwhXpoHMf2iEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/5454ad-6cf3-4ee5-a4b9-0464e945f1cc/1/tDuXodIfY3tUkTDwhXpoHMf2iEw.mft
Manifest number: 15FF
Signing time: Sat 26 Jul 2025 07:01:58 +0000
Manifest this update: Sat 26 Jul 2025 07:01:58 +0000
Manifest next update: Sun 27 Jul 2025 07:01:58 +0000
Files and hashes: 1: 3-CNHKGdJXMpTXntAh-s3qj--cM.roa (hash: 2BpPHYt1k/l10pBcIexz0ktK+xFvs5F87gVofFcEgls=)
2: tDuXodIfY3tUkTDwhXpoHMf2iEw.crl (hash: wsB5BwrczZTMaxCJToxIhjvXU+PGg7oXaT6/TBODQVY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/5454ad-6cf3-4ee5-a4b9-0464e945f1cc/1/tDuXodIfY3tUkTDwhXpoHMf2iEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/5454ad-6cf3-4ee5-a4b9-0464e945f1cc/1/tDuXodIfY3tUkTDwhXpoHMf2iEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDuXodIfY3tUkTDwhXpoHMf2iEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:89:d8:8f:d4:48:7b:26:6b:ed:c7:ab:ec:ed:3d:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b43b97a1d21f637b549130f0857a681cc7f6884c
Validity
Not Before: Jul 26 07:01:58 2025 GMT
Not After : Jul 27 07:01:58 2025 GMT
Subject: CN=d0110479cc37b69a61da69b9d458237d328585da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:6c:23:4b:df:98:63:d2:13:d8:5d:f6:f7:33:
19:fd:72:5c:1f:a0:b5:68:e1:fa:fc:48:89:9e:f3:
da:c0:e0:d5:56:89:59:21:f2:94:ae:7f:21:ce:6c:
44:dd:35:a0:8f:24:59:8d:5f:aa:3e:63:8b:ad:2e:
4c:99:17:df:42:f4:f5:53:bb:39:f2:ad:5e:aa:0a:
80:c1:3e:f0:5c:b5:cc:55:25:5d:6c:13:59:0b:c0:
65:44:9c:6c:21:fa:cc:b8:0e:a4:fc:fc:4d:6e:c4:
6c:65:57:e7:78:58:e6:c8:bb:ce:58:97:1b:3d:28:
e3:56:2e:a9:ba:05:94:4c:22:9b:43:eb:87:98:aa:
bf:ca:47:9e:cb:80:ff:3a:dd:c4:11:15:61:dc:1d:
76:24:5c:ff:23:f5:c3:d1:29:0c:31:18:aa:f7:2e:
d6:02:5e:f5:73:d7:20:94:89:ce:45:1b:5d:eb:5c:
80:0e:c9:63:ac:af:e7:53:e6:99:d4:d1:27:54:83:
cf:e1:86:34:69:a3:cb:1d:27:5a:f9:de:e0:f8:48:
eb:e5:e2:3c:6a:fa:b4:f9:2c:41:b8:67:3b:0d:db:
41:15:62:cf:b8:23:d6:d1:27:21:02:3c:3d:49:1e:
7d:58:56:82:0f:5b:84:8b:fb:d2:e6:4d:b1:84:ea:
a3:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:11:04:79:CC:37:B6:9A:61:DA:69:B9:D4:58:23:7D:32:85:85:DA
X509v3 Authority Key Identifier:
keyid:B4:3B:97:A1:D2:1F:63:7B:54:91:30:F0:85:7A:68:1C:C7:F6:88:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDuXodIfY3tUkTDwhXpoHMf2iEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5454ad-6cf3-4ee5-a4b9-0464e945f1cc/1/tDuXodIfY3tUkTDwhXpoHMf2iEw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5454ad-6cf3-4ee5-a4b9-0464e945f1cc/1/tDuXodIfY3tUkTDwhXpoHMf2iEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:d3:f6:e1:fe:ab:80:90:0e:39:b8:6c:76:40:71:81:66:33:
aa:3a:f4:6f:af:dd:1a:a1:44:72:f8:86:a6:97:c0:1e:0d:26:
86:07:fd:32:db:ee:95:4f:8a:f7:b5:00:0e:e1:0f:34:5c:7f:
b8:a7:ac:7a:f6:c5:cb:29:65:fa:77:7f:06:17:c6:ce:04:af:
d7:f4:64:6c:e5:8d:76:ab:62:59:db:27:7d:28:64:16:1e:8c:
9d:a9:1c:d6:22:22:c7:5f:0f:0a:83:89:50:07:7d:4a:54:45:
e6:db:f3:5a:0d:4d:d3:67:2e:45:74:d0:3d:20:d3:e3:8e:9d:
65:81:46:a6:f9:85:44:13:22:9b:43:40:31:2b:2a:ea:73:b9:
8f:32:b8:2a:51:1e:97:fa:da:47:73:94:10:34:df:96:f4:cb:
10:6d:49:8e:28:2a:40:f3:e3:a3:0f:43:e0:8f:bb:ef:e8:94:
19:50:d3:e1:2a:66:4e:e7:fe:b1:c5:af:f9:70:52:22:d5:30:
70:d6:da:d3:b8:6b:90:53:39:21:a2:27:23:8c:58:ee:32:69:
8b:29:e7:bf:19:8a:09:ab:b9:4d:3e:6f:93:c5:63:f6:84:4c:
43:23:f3:ea:fa:22:ac:3f:a5:9b:27:37:e0:0e:42:a2:8e:e8:
4b:d0:87:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 10:37:22 2025 by rpki-client