Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/70de80-50e9-4c1d-a7b4-e904318342ee/1/tUcxKN5Ul222LZvRYU53xD3uObU.mft
File: tUcxKN5Ul222LZvRYU53xD3uObU.mft (raw, json)
Hash identifier: vX6sedvOQbjRUAg5cBKqW6GWxE1FJqUJpODp3SnTQvg=
Subject key identifier: 98:64:FA:BA:11:18:3B:55:A0:F2:04:03:2F:EA:C5:96:4E:96:AF:CD
Authority key identifier: B5:47:31:28:DE:54:97:6D:B6:2D:9B:D1:61:4E:77:C4:3D:EE:39:B5
Certificate issuer: /CN=b5473128de54976db62d9bd1614e77c43dee39b5
Certificate serial: 01984B53E0B7BBB5C43B2B07DE459F74FE92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tUcxKN5Ul222LZvRYU53xD3uObU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/70de80-50e9-4c1d-a7b4-e904318342ee/1/tUcxKN5Ul222LZvRYU53xD3uObU.mft
Manifest number: 12D9
Signing time: Sun 27 Jul 2025 10:00:44 +0000
Manifest this update: Sun 27 Jul 2025 10:00:44 +0000
Manifest next update: Mon 28 Jul 2025 10:00:44 +0000
Files and hashes: 1: WT51Xxp6wSpnMPjyEAyyUhxOXPk.roa (hash: GG3W3sv/8g51OizpERxg8YmbMm76mWXeFGoFM/wpQ9M=)
2: tUcxKN5Ul222LZvRYU53xD3uObU.crl (hash: Qubnp9dkgsrmiDmnllZ1vbf96cJR8ssp24YM34Jfy6c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/70de80-50e9-4c1d-a7b4-e904318342ee/1/tUcxKN5Ul222LZvRYU53xD3uObU.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/70de80-50e9-4c1d-a7b4-e904318342ee/1/tUcxKN5Ul222LZvRYU53xD3uObU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tUcxKN5Ul222LZvRYU53xD3uObU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:53:e0:b7:bb:b5:c4:3b:2b:07:de:45:9f:74:fe:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5473128de54976db62d9bd1614e77c43dee39b5
Validity
Not Before: Jul 27 10:00:44 2025 GMT
Not After : Jul 28 10:00:44 2025 GMT
Subject: CN=9864faba11183b55a0f204032feac5964e96afcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:b8:f2:04:44:24:90:e9:1b:c7:a5:d9:e8:f2:
3d:2a:82:db:ad:73:8b:d8:d7:c9:bc:98:c2:ea:17:
e9:23:64:ea:76:ee:bf:da:e7:be:f4:47:1c:52:39:
67:c7:85:87:40:d8:7f:7f:02:92:c1:63:66:5c:e4:
ce:bc:a7:25:4c:79:a3:50:bb:79:a1:5f:27:45:5b:
3f:08:ac:28:ab:90:c6:de:6b:c4:93:fe:a0:b0:a5:
af:a2:ff:6d:12:ce:90:4f:4a:7c:e0:38:c9:50:92:
ba:4f:f2:a9:a7:1e:fb:21:f9:29:1a:16:70:d4:76:
c9:bd:b6:fd:43:a8:9e:4a:c3:71:e8:c9:d5:cd:67:
c1:8a:fe:fd:ad:c7:82:ce:ca:48:71:e6:c5:aa:82:
2a:49:55:72:a1:c1:0f:ce:79:b0:e2:c2:f5:12:ee:
a1:96:e6:03:13:9f:13:66:8c:69:cf:03:8f:a1:ff:
6b:67:11:28:42:23:83:de:f3:ed:eb:1b:44:ee:2f:
14:ce:12:5f:9a:db:61:7a:81:39:8a:0f:5b:0e:d9:
7a:db:16:c7:f9:c6:06:1b:08:14:f6:c3:7e:40:b5:
b0:02:c3:23:21:80:e7:28:b0:45:64:f8:a4:61:22:
60:bd:cd:6f:a1:d6:07:48:b2:ce:cf:f7:e6:8d:df:
4e:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:64:FA:BA:11:18:3B:55:A0:F2:04:03:2F:EA:C5:96:4E:96:AF:CD
X509v3 Authority Key Identifier:
keyid:B5:47:31:28:DE:54:97:6D:B6:2D:9B:D1:61:4E:77:C4:3D:EE:39:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tUcxKN5Ul222LZvRYU53xD3uObU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/70de80-50e9-4c1d-a7b4-e904318342ee/1/tUcxKN5Ul222LZvRYU53xD3uObU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/70de80-50e9-4c1d-a7b4-e904318342ee/1/tUcxKN5Ul222LZvRYU53xD3uObU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:82:1d:9b:82:03:c3:45:43:88:9d:63:5e:84:9b:6e:39:34:
14:ed:f1:20:b4:ec:ab:db:96:4a:01:df:25:b3:4a:40:17:25:
45:a3:f1:13:fb:cc:0f:3a:2b:76:16:cc:47:38:ea:d8:81:0a:
df:d6:27:21:fa:ac:d5:fd:52:a6:10:24:39:a5:54:d3:1b:64:
56:7f:38:43:69:b9:a9:1d:cd:4d:b9:60:37:81:5b:1b:ee:12:
ce:86:ad:41:b8:7b:8a:e5:13:1d:78:2a:71:00:cd:95:2e:10:
ad:04:57:b6:7d:2b:3a:80:ef:25:33:fc:8b:8e:a1:26:3f:f2:
b2:fa:29:9f:a9:90:c5:52:fc:6d:31:2b:08:1b:40:b4:56:80:
c2:d4:d5:86:4e:e0:f7:1b:18:58:84:6f:37:e8:c0:43:97:fd:
52:ac:79:a9:df:aa:bc:a8:f8:28:c6:98:53:76:19:66:89:11:
70:ec:65:97:50:f8:9e:d9:20:64:34:32:d0:f8:a4:85:2d:bf:
6c:0e:00:1e:d9:e7:47:21:53:0c:9e:8d:74:dc:39:92:0b:53:
60:b5:b8:e2:5d:05:43:8d:2b:b2:74:aa:90:98:02:cb:49:b4:
7b:f4:28:e1:ab:15:f5:ed:d3:a7:be:fa:7c:5a:af:7d:65:78:
a8:30:2a:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 13:51:34 2025 by rpki-client