
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/19ddad-c458-441e-984e-573f17d2aef3/1/tM2Wsn6IQ1BLtb1VwynsAtufD_0.mft
File: tM2Wsn6IQ1BLtb1VwynsAtufD_0.mft (raw, json)
Hash identifier: meWi9rqVR1pvf1er5bGLXGXV1p+l4tY7iOZqGTHH37Y=
Subject key identifier: C2:55:FE:B3:21:89:9B:C0:28:7F:97:72:41:AE:66:12:D8:EC:31:20
Authority key identifier: B4:CD:96:B2:7E:88:43:50:4B:B5:BD:55:C3:29:EC:02:DB:9F:0F:FD
Certificate issuer: /CN=b4cd96b27e8843504bb5bd55c329ec02db9f0ffd
Certificate serial: 019848F7798E0BEA396C813D7372EDDCB73E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tM2Wsn6IQ1BLtb1VwynsAtufD_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/19ddad-c458-441e-984e-573f17d2aef3/1/tM2Wsn6IQ1BLtb1VwynsAtufD_0.mft
Manifest number: 15FF
Signing time: Sat 26 Jul 2025 23:00:34 +0000
Manifest this update: Sat 26 Jul 2025 23:00:34 +0000
Manifest next update: Sun 27 Jul 2025 23:00:34 +0000
Files and hashes: 1: bCO5bqFLQTtaSqSwTRLhrpm3wCA.roa (hash: xHiR4ALGk4+cM6JODCM19LWc7pantvAdvK3viET0qj4=)
2: tM2Wsn6IQ1BLtb1VwynsAtufD_0.crl (hash: KIoeOJLgN/iVv/p50spkf5/0v/upcMYLy+omcMh9zsU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/19ddad-c458-441e-984e-573f17d2aef3/1/tM2Wsn6IQ1BLtb1VwynsAtufD_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/19ddad-c458-441e-984e-573f17d2aef3/1/tM2Wsn6IQ1BLtb1VwynsAtufD_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/tM2Wsn6IQ1BLtb1VwynsAtufD_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:f7:79:8e:0b:ea:39:6c:81:3d:73:72:ed:dc:b7:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4cd96b27e8843504bb5bd55c329ec02db9f0ffd
Validity
Not Before: Jul 26 23:00:34 2025 GMT
Not After : Jul 27 23:00:34 2025 GMT
Subject: CN=c255feb321899bc0287f977241ae6612d8ec3120
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:94:a2:ad:27:8e:59:aa:68:3a:8a:3d:81:20:
47:dd:cd:ba:87:8b:ea:b4:ed:72:d1:5b:2e:04:1b:
bc:59:88:a0:94:c6:2c:b2:e9:0c:5a:c0:81:06:66:
65:af:26:77:91:a0:93:d8:1e:fb:88:0b:86:80:1e:
be:d1:bb:83:15:22:55:1e:8f:a5:ae:0c:07:0c:0d:
a0:0a:40:9a:0c:a2:bf:91:f5:ae:2e:e1:e4:f5:24:
a6:4f:16:81:1f:7a:bb:72:04:2e:54:24:f5:f2:96:
3c:97:4c:97:77:60:d6:4f:f4:96:32:66:37:ff:8e:
32:1b:c3:71:84:b3:53:2b:3f:a4:09:0b:b6:26:4c:
18:81:53:f0:3e:2b:10:1d:b8:a9:c7:d4:10:48:68:
70:a2:ec:1b:bd:d3:7f:60:89:fc:ed:6e:c0:75:5f:
15:86:d6:d4:67:f5:f6:d6:33:79:19:12:7b:31:76:
d1:d7:89:37:33:07:69:fd:98:59:c4:9e:dc:ab:86:
7c:c7:bf:0a:94:25:4f:39:48:16:f6:fc:0c:c2:cf:
4b:59:ee:3b:7b:13:d4:b1:ff:5d:74:44:d6:24:9e:
2f:32:90:dd:34:9b:f4:c1:e7:69:aa:b0:91:63:14:
94:4b:78:a3:cb:ec:10:c6:3f:b1:c7:90:0e:be:4c:
e4:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:55:FE:B3:21:89:9B:C0:28:7F:97:72:41:AE:66:12:D8:EC:31:20
X509v3 Authority Key Identifier:
keyid:B4:CD:96:B2:7E:88:43:50:4B:B5:BD:55:C3:29:EC:02:DB:9F:0F:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tM2Wsn6IQ1BLtb1VwynsAtufD_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/19ddad-c458-441e-984e-573f17d2aef3/1/tM2Wsn6IQ1BLtb1VwynsAtufD_0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/19ddad-c458-441e-984e-573f17d2aef3/1/tM2Wsn6IQ1BLtb1VwynsAtufD_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:fe:e6:9a:37:98:73:38:ba:31:7c:0b:66:6d:e0:7a:3a:0c:
76:11:cf:04:f5:d1:88:00:68:da:af:f6:ee:16:dd:5f:78:0a:
ac:c6:ab:9c:23:45:86:42:a0:ce:3d:92:6d:6e:d1:c8:d3:fc:
5a:a7:5d:3b:5c:bb:43:c3:da:96:90:36:95:6a:74:3e:86:0c:
7e:0c:75:43:6a:26:4e:24:40:f3:e7:a7:48:db:ed:25:da:ba:
f8:eb:fa:e3:a8:ca:b3:ef:3a:34:f6:0b:97:4d:2a:30:51:ee:
e3:1c:fa:fd:7f:fc:46:9d:a2:91:da:fe:94:eb:10:0e:e6:d7:
31:5e:d5:6b:19:92:71:0d:03:1b:63:b6:42:da:06:58:14:49:
75:6a:7b:f6:76:39:48:b1:bb:09:4b:9b:13:63:a9:6f:79:0a:
2f:30:72:89:a7:5f:99:15:84:c2:a7:0a:b6:0d:62:7b:ac:19:
02:3b:64:fa:98:73:d1:f1:6c:bb:f2:62:b2:4f:22:32:4f:bc:
a9:9b:c4:7f:20:6b:34:7c:18:fe:8a:48:b0:8a:0c:de:2a:73:
56:84:d8:a8:da:d4:b6:d4:8f:62:56:de:94:4d:8e:24:ea:58:
f8:ba:be:d0:cc:96:cb:da:50:bf:f7:f4:f4:00:f4:cd:14:b5:
a8:0c:3f:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:17:04 2025 by rpki-client