Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/1d2788-da40-431a-97d0-fbd46d9ca372/1/Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.mft
File: Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.mft (raw, json)
Hash identifier: dE0aDd430PppmFEtdsNn630Mc+r/BTyWk/v47CUY1Es=
Subject key identifier: 72:DF:E4:71:9F:69:86:DC:D7:7A:8A:31:84:9E:BB:D0:6B:93:FD:8E
Authority key identifier: 4D:BE:31:B6:BE:DC:51:F2:AA:2E:C0:A6:45:3F:2E:43:5E:80:8F:B5
Certificate issuer: /CN=4dbe31b6bedc51f2aa2ec0a6453f2e435e808fb5
Certificate serial: 01984A413D9EEA650743FDE38DD537A28A9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/1d2788-da40-431a-97d0-fbd46d9ca372/1/Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.mft
Manifest number: 0CE7
Signing time: Sun 27 Jul 2025 05:00:46 +0000
Manifest this update: Sun 27 Jul 2025 05:00:46 +0000
Manifest next update: Mon 28 Jul 2025 05:00:46 +0000
Files and hashes: 1: 4f1jI7-qAw-Fm-OtnESqUBoebm0.roa (hash: Yj15262IImuG/zvO4RGd+KynWz9BG4CJpl9H3lrssA0=)
2: Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.crl (hash: 8kgSwdNFhHKrGD+9uGmXJEM9k4Xqdtkzgj/rlRM4ugI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/1d2788-da40-431a-97d0-fbd46d9ca372/1/Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/1d2788-da40-431a-97d0-fbd46d9ca372/1/Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:41:3d:9e:ea:65:07:43:fd:e3:8d:d5:37:a2:8a:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dbe31b6bedc51f2aa2ec0a6453f2e435e808fb5
Validity
Not Before: Jul 27 05:00:46 2025 GMT
Not After : Jul 28 05:00:46 2025 GMT
Subject: CN=72dfe4719f6986dcd77a8a31849ebbd06b93fd8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:cc:39:6b:c6:92:fd:60:0d:25:6c:21:11:d2:
27:1f:95:5e:d3:45:e7:ba:d5:62:60:5e:2f:bd:0f:
ed:b6:eb:0d:f3:9f:fe:5b:fd:78:2e:bf:6e:d8:4c:
77:95:9e:59:f6:48:12:15:9e:d6:5d:98:30:bc:cf:
22:88:23:83:6e:b0:9b:7a:e7:1b:e2:91:de:69:e2:
9b:19:6a:8b:98:2a:c8:44:81:98:94:bf:41:ee:41:
64:0c:c9:19:51:b2:93:cb:0c:0d:18:24:4a:d0:ad:
a1:cc:de:07:17:33:40:a9:a3:1b:6a:aa:05:f7:03:
fe:0a:fc:43:c1:df:12:df:7e:bf:b3:37:09:3b:b8:
74:9e:3f:c0:66:b2:39:e2:e4:9e:a3:22:cf:14:64:
4c:52:4e:f0:f4:46:ef:46:ee:a5:af:6c:89:c9:d7:
8c:ba:97:d7:32:7e:43:e6:cc:72:02:2c:0d:68:bb:
49:5e:7d:a6:bd:01:ad:c2:13:fe:cb:2a:2e:9d:f5:
6d:18:bb:d8:de:c2:b9:67:6d:d0:d0:bd:57:ea:2a:
ab:23:53:e8:b2:70:c1:d5:08:52:c5:5f:f7:52:2c:
4e:13:15:ff:24:de:57:69:3f:dd:7a:2f:e5:92:84:
e5:e5:db:08:56:24:c5:91:2a:a7:79:96:be:60:43:
5b:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:DF:E4:71:9F:69:86:DC:D7:7A:8A:31:84:9E:BB:D0:6B:93:FD:8E
X509v3 Authority Key Identifier:
keyid:4D:BE:31:B6:BE:DC:51:F2:AA:2E:C0:A6:45:3F:2E:43:5E:80:8F:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/1d2788-da40-431a-97d0-fbd46d9ca372/1/Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/1d2788-da40-431a-97d0-fbd46d9ca372/1/Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:67:0a:7c:86:db:1b:27:df:b1:90:a0:ef:5d:fa:85:a7:e7:
6f:29:74:72:6c:20:98:52:d9:aa:9a:af:d6:e9:4a:2d:55:ec:
d0:d3:7f:d6:37:9a:ce:5e:b1:80:47:cc:fd:91:1b:dd:4e:f1:
08:d9:a7:0b:2c:6d:5c:94:53:d9:74:4f:73:e4:86:11:a7:8c:
fc:dc:7a:c0:b7:f7:42:f3:f7:ab:d3:e2:5c:c0:0f:1c:89:93:
7b:8b:d0:4c:66:42:8b:9d:80:49:ab:06:2f:5b:4b:b2:65:2c:
ab:96:65:f6:df:bc:8f:0a:e4:36:74:77:1a:f7:d6:cb:41:dd:
53:89:30:39:da:98:fb:35:cf:94:10:c3:0b:15:37:49:75:e7:
58:ef:c0:b2:13:76:50:38:30:af:6b:ec:05:15:1e:2b:86:4f:
f7:a4:8b:7d:46:4e:d1:78:cf:e7:55:de:14:32:a3:36:02:e8:
1b:5b:52:d0:25:12:ac:4e:80:d4:24:e8:5d:70:28:77:93:2a:
64:c5:b1:c2:3a:54:8f:62:59:01:5a:c7:d6:73:b3:d9:33:b1:
16:35:bb:3a:b0:06:a4:6e:55:d8:8b:78:6d:92:d3:bf:0b:3d:
30:e8:16:26:f4:4d:0d:18:0d:4a:25:10:7c:9e:3b:b9:23:77:
a4:88:9d:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:04:26 2025 by rpki-client