Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.mft
File: tQJsmXQJLiIFQkASgfm9_TVsKEI.mft (raw, json)
Hash identifier: ZchY9RRCNArYLHym+b1LkpKgN6HBnJsCUyoFuv2eGq0=
Subject key identifier: F6:05:F5:86:C0:2E:32:BB:0E:55:90:AE:50:1C:B9:B7:87:88:67:BB
Authority key identifier: B5:02:6C:99:74:09:2E:22:05:42:40:12:81:F9:BD:FD:35:6C:28:42
Certificate issuer: /CN=b5026c9974092e220542401281f9bdfd356c2842
Certificate serial: 01984AAEA97CF44A941D18EE32CEC372228E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tQJsmXQJLiIFQkASgfm9_TVsKEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.mft
Manifest number: 07EE
Signing time: Sun 27 Jul 2025 07:00:17 +0000
Manifest this update: Sun 27 Jul 2025 07:00:17 +0000
Manifest next update: Mon 28 Jul 2025 07:00:17 +0000
Files and hashes: 1: JyF5UhD9cVqjqquiR-hK995tZzw.roa (hash: 5AXS3YhQ0/Ke6SUL+/AhBjypj7cC6zgjHgX8v/ujINo=)
2: pTQKkEXtOvhz7EuIYUqt-o1qzFk.roa (hash: OW+foSbaeoc9zsDW/uMWemQINFvQAo39Gw9c3A0iOPI=)
3: tQJsmXQJLiIFQkASgfm9_TVsKEI.crl (hash: OR8p5RlvJ72cNdbDj+xOqY/JAMWgsIUQgyzPBb9n6iI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tQJsmXQJLiIFQkASgfm9_TVsKEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:ae:a9:7c:f4:4a:94:1d:18:ee:32:ce:c3:72:22:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5026c9974092e220542401281f9bdfd356c2842
Validity
Not Before: Jul 27 07:00:17 2025 GMT
Not After : Jul 28 07:00:17 2025 GMT
Subject: CN=f605f586c02e32bb0e5590ae501cb9b7878867bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:4e:ea:ef:25:6b:16:34:d5:23:ab:79:e1:25:
bb:65:9c:4c:78:02:d3:45:cc:08:58:30:74:c2:de:
40:2d:d4:53:d3:65:63:48:67:67:ad:d7:70:23:1e:
7a:fc:26:70:68:cf:06:be:98:3e:f6:1f:bf:93:51:
59:90:e3:4f:99:cf:6b:55:25:f6:17:0d:db:b3:49:
7e:5b:4d:55:2b:3e:c1:f5:b9:2a:c8:af:0e:8e:49:
97:f0:5e:f8:02:4b:27:bc:17:59:15:29:29:c6:9d:
8d:4a:b2:ee:d1:27:5b:ba:a7:c5:66:20:69:37:3a:
d7:41:7c:f0:6c:25:77:aa:59:58:8f:52:6e:6b:20:
7f:be:da:57:1b:eb:27:69:ce:f9:f5:8b:1f:78:5d:
f1:09:df:01:5b:52:d9:0c:5b:82:3a:66:7e:a7:e1:
3a:3a:12:9d:c1:c6:4b:59:c0:3c:ff:cb:70:4e:ee:
c2:4e:69:74:f6:1d:7e:ab:af:7b:97:83:50:eb:cd:
59:5a:75:a7:8f:38:20:7e:4a:5c:3e:78:2b:2b:b3:
37:7c:b9:ad:01:f4:d1:38:81:67:27:d1:3c:17:7e:
20:ff:cb:bc:fe:2c:83:b3:65:42:7c:fc:9b:9e:62:
7e:b6:64:5b:22:5a:e9:2d:38:58:e6:76:a1:d3:25:
db:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:05:F5:86:C0:2E:32:BB:0E:55:90:AE:50:1C:B9:B7:87:88:67:BB
X509v3 Authority Key Identifier:
keyid:B5:02:6C:99:74:09:2E:22:05:42:40:12:81:F9:BD:FD:35:6C:28:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tQJsmXQJLiIFQkASgfm9_TVsKEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:52:51:3e:2d:a7:34:9b:a1:ad:5f:44:b0:76:65:55:cf:81:
0b:bb:e5:85:f0:0e:b1:20:a0:95:d9:ad:23:4d:c1:77:c7:c1:
f4:38:f7:ce:99:e1:9a:4e:2f:f7:11:c5:ed:7f:2b:cd:ef:a2:
24:82:f4:03:24:c4:6a:35:1b:28:61:38:6e:74:b3:16:5a:fe:
a4:64:14:90:0c:27:4c:47:fc:b4:6a:84:dd:11:f6:d0:48:61:
3f:3f:4b:5f:40:79:36:02:1d:a5:29:14:bb:f0:59:fe:96:69:
dd:f4:de:6e:03:43:ba:40:33:f1:38:81:6a:a0:3c:73:d4:f9:
ad:6b:3e:4d:d1:4a:d5:f1:d4:bd:5b:74:b6:f8:90:b4:0f:6f:
c8:20:4c:f3:f1:65:5c:43:c6:32:50:e5:d7:e5:da:a2:90:d8:
08:79:22:01:ee:d8:14:4c:e0:1c:e7:a3:87:aa:88:04:7e:23:
38:ab:07:14:9a:82:4c:ba:8c:7b:6a:27:c0:a1:a4:02:6b:15:
5a:b6:a3:de:8a:91:11:b6:d1:3f:d8:69:40:1e:8f:2d:40:70:
8c:e5:3d:2d:32:77:fc:b7:04:a4:54:75:da:5b:0c:1a:46:8d:
b9:ca:b7:e8:fd:3b:e1:e5:9c:c1:70:2d:cb:33:ae:2b:97:57:
79:9f:1f:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:17:32 2025 by rpki-client