Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/9e9122-bbff-48d9-98c6-0a4286f3cfbe/1/tfV-SevwmLxT6Ns4iIHJI2nZv4w.mft
File: tfV-SevwmLxT6Ns4iIHJI2nZv4w.mft (raw, json)
Hash identifier: CXpb+6GHbuALUBOFzIlUsdBaFrhssLn5IiQgLlcIFys=
Subject key identifier: 17:D1:5C:03:A0:E8:1E:F8:1D:9E:1A:C4:8B:DD:3B:8F:71:D5:B2:36
Authority key identifier: B5:F5:7E:49:EB:F0:98:BC:53:E8:DB:38:88:81:C9:23:69:D9:BF:8C
Certificate issuer: /CN=b5f57e49ebf098bc53e8db388881c92369d9bf8c
Certificate serial: 01984A0A03D86993DEAE8083631989EE9B30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tfV-SevwmLxT6Ns4iIHJI2nZv4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/9e9122-bbff-48d9-98c6-0a4286f3cfbe/1/tfV-SevwmLxT6Ns4iIHJI2nZv4w.mft
Manifest number: 1384
Signing time: Sun 27 Jul 2025 04:00:26 +0000
Manifest this update: Sun 27 Jul 2025 04:00:26 +0000
Manifest next update: Mon 28 Jul 2025 04:00:26 +0000
Files and hashes: 1: HqctvWxlrIEslD4ELNpmV-XhZkU.roa (hash: CGfhQ4fck7gcAxsslFd0Q8T9jYmDIbHyBLNxPR9Qais=)
2: bKSpPE5-kXmlbnT7r_1atj4jQSY.roa (hash: L3QXcpXiam9j36oZrcZebMrghkDu87SD2DJXHj63ivw=)
3: tfV-SevwmLxT6Ns4iIHJI2nZv4w.crl (hash: r/yw/SYT2pe+0ZGKcPmDcxmxcF7qXsKWuf1CsGiRzZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/9e9122-bbff-48d9-98c6-0a4286f3cfbe/1/tfV-SevwmLxT6Ns4iIHJI2nZv4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/9e9122-bbff-48d9-98c6-0a4286f3cfbe/1/tfV-SevwmLxT6Ns4iIHJI2nZv4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/tfV-SevwmLxT6Ns4iIHJI2nZv4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:0a:03:d8:69:93:de:ae:80:83:63:19:89:ee:9b:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5f57e49ebf098bc53e8db388881c92369d9bf8c
Validity
Not Before: Jul 27 04:00:26 2025 GMT
Not After : Jul 28 04:00:26 2025 GMT
Subject: CN=17d15c03a0e81ef81d9e1ac48bdd3b8f71d5b236
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:31:85:f1:ab:f2:ee:78:cf:6c:4a:bf:60:d0:
da:7c:96:c8:49:de:b8:b3:dd:cd:af:5d:cd:aa:2c:
4c:49:06:b1:55:ca:57:0b:9b:a2:f5:bf:b5:3d:9c:
3e:63:47:a2:ed:fc:a5:e7:e1:aa:a1:7a:24:bd:36:
e6:70:52:24:17:39:85:02:17:e5:f2:42:2d:65:0a:
35:26:e7:fe:e6:32:27:70:1e:e4:bf:cb:5b:76:02:
08:cc:3f:33:e8:eb:94:a8:d4:d7:5e:6b:e9:9e:bd:
1c:d0:90:e3:bc:74:84:0c:0d:4d:be:36:4f:2c:ab:
87:00:37:43:fd:b1:08:1a:89:43:d8:6e:a7:b5:16:
cd:ab:ff:b8:49:d3:6c:57:29:0e:2a:1a:34:fa:9c:
af:cd:cc:cf:4d:0a:63:8c:55:05:cb:b3:a9:b3:1f:
c4:c6:20:25:ce:a5:12:11:30:52:d1:5a:31:b1:11:
ac:98:f5:e8:50:13:92:f5:ea:fb:23:2c:3c:4f:02:
62:8f:e5:4f:b8:68:1b:24:65:7d:2d:3c:97:1f:13:
6f:e7:a4:c4:d4:83:33:bb:46:ff:19:ff:3b:fb:f3:
e5:2f:b0:7d:2d:8c:c8:37:e8:ef:8e:77:e9:1a:33:
c0:34:5f:32:a5:46:1a:7d:ac:f8:06:48:9c:fa:f1:
03:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:D1:5C:03:A0:E8:1E:F8:1D:9E:1A:C4:8B:DD:3B:8F:71:D5:B2:36
X509v3 Authority Key Identifier:
keyid:B5:F5:7E:49:EB:F0:98:BC:53:E8:DB:38:88:81:C9:23:69:D9:BF:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tfV-SevwmLxT6Ns4iIHJI2nZv4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/9e9122-bbff-48d9-98c6-0a4286f3cfbe/1/tfV-SevwmLxT6Ns4iIHJI2nZv4w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/9e9122-bbff-48d9-98c6-0a4286f3cfbe/1/tfV-SevwmLxT6Ns4iIHJI2nZv4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:bc:7f:6b:f2:6b:21:3b:fc:4a:c1:6c:f2:c6:c3:de:84:2c:
6b:21:2e:45:13:96:0d:29:1a:7d:ec:59:19:16:2d:f5:ce:b6:
46:be:b8:33:70:ff:c0:df:34:e4:4b:04:f1:e6:54:cb:f7:6e:
f6:1e:05:74:7b:a4:5b:09:fd:05:d0:11:a7:c5:2c:c4:69:0d:
01:84:b6:0f:e4:87:81:88:f4:86:07:d7:a6:5a:7d:fe:f2:4c:
33:73:4e:71:f8:8f:99:8f:6b:c1:45:3d:cf:75:0a:31:ab:b0:
81:8d:43:13:3f:7f:86:a8:25:39:52:62:61:44:98:54:0b:2a:
57:f9:82:fa:88:d4:1e:4d:a4:ef:60:d9:8f:0c:fa:40:1b:94:
31:7e:b9:ba:fc:ac:ae:90:81:bd:5f:15:6d:ae:a3:23:1e:ff:
5b:24:8b:7d:d1:09:ef:8c:e2:70:c0:7b:83:d4:32:6a:4d:db:
f9:e3:16:c2:61:c2:9b:0a:a1:6c:48:b4:0d:57:df:f9:d1:8d:
fc:7f:f4:09:8b:73:b6:be:b8:b8:f5:d0:45:10:55:2e:3a:8e:
bf:b0:66:33:49:f7:60:d6:7e:6c:5f:3b:9b:d0:d4:e7:58:0e:
13:65:9d:69:91:da:50:4d:d5:39:c0:37:65:c6:3c:ce:bc:ac:
5f:7a:63:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:32:17 2025 by rpki-client