Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/a3baca-437d-4607-9c1a-557a4c31e02e/1/tMQeWYNNphLYPKJBlPAsptdgJEg.mft
File: tMQeWYNNphLYPKJBlPAsptdgJEg.mft (raw, json)
Hash identifier: wh7kO1xcnAl9kSPGD43D1BoBdYsvoQVGJi6Q2X+GoQo=
Subject key identifier: D5:5E:63:EC:89:14:43:1B:EE:D1:2C:17:7B:D1:B5:F2:9D:56:96:3D
Authority key identifier: B4:C4:1E:59:83:4D:A6:12:D8:3C:A2:41:94:F0:2C:A6:D7:60:24:48
Certificate issuer: /CN=b4c41e59834da612d83ca24194f02ca6d7602448
Certificate serial: 019849654873B918BB088816A9703D8DD010
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tMQeWYNNphLYPKJBlPAsptdgJEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/a3baca-437d-4607-9c1a-557a4c31e02e/1/tMQeWYNNphLYPKJBlPAsptdgJEg.mft
Manifest number: 0426
Signing time: Sun 27 Jul 2025 01:00:31 +0000
Manifest this update: Sun 27 Jul 2025 01:00:31 +0000
Manifest next update: Mon 28 Jul 2025 01:00:31 +0000
Files and hashes: 1: hrqEKTykKr09BUd_K3mCMU0oC6Q.roa (hash: pufSFJ+QVHIcFkxQwEPRtygVlxFuvFk+kfnkYeAvjWg=)
2: tMQeWYNNphLYPKJBlPAsptdgJEg.crl (hash: B3ElX+j9VZTccHRZuB9STPZfH2YvjDaVGMzPt4MekSI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/a3baca-437d-4607-9c1a-557a4c31e02e/1/tMQeWYNNphLYPKJBlPAsptdgJEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/a3baca-437d-4607-9c1a-557a4c31e02e/1/tMQeWYNNphLYPKJBlPAsptdgJEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/tMQeWYNNphLYPKJBlPAsptdgJEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:48:73:b9:18:bb:08:88:16:a9:70:3d:8d:d0:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4c41e59834da612d83ca24194f02ca6d7602448
Validity
Not Before: Jul 27 01:00:31 2025 GMT
Not After : Jul 28 01:00:31 2025 GMT
Subject: CN=d55e63ec8914431beed12c177bd1b5f29d56963d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e5:bd:91:6a:99:29:2f:2c:28:57:9a:fa:7d:
f4:df:1f:c0:bf:c2:a1:07:1a:ce:32:e3:e1:b6:8f:
2f:7e:81:56:c5:2f:79:ab:8a:ff:52:9a:39:df:4c:
61:a2:36:49:80:dd:e4:3a:f9:5a:27:74:3a:74:78:
e4:5a:d4:1e:82:df:fd:25:1f:83:3a:81:e6:9a:b5:
47:15:43:20:f3:09:f7:5c:1c:f0:0f:50:7d:fd:a8:
f0:92:90:99:24:1a:4f:58:41:46:57:f1:7a:1f:78:
34:77:9a:44:19:7c:16:11:d2:07:c6:75:c6:86:22:
e0:fe:a9:45:95:8f:75:74:d0:9d:3d:4f:15:c3:50:
43:1d:f7:ed:d2:1f:e9:41:0e:c9:0c:aa:1e:3a:82:
eb:32:68:96:58:6f:b5:a0:e9:b1:51:4b:ed:30:2d:
5e:5a:02:16:3c:ba:4d:c6:e7:34:a6:9e:73:f2:6c:
57:99:57:7e:31:76:2d:a8:61:01:21:34:7a:4d:80:
58:ca:af:df:cc:83:6d:cd:16:70:64:9f:bf:6b:46:
fa:82:f6:6c:fc:ae:d5:67:83:35:e4:34:77:1d:f8:
29:b7:23:50:5b:cc:52:8c:00:36:6a:47:87:ff:b4:
1b:c5:70:03:60:35:fc:b6:94:bb:91:6a:a4:0c:48:
c6:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:5E:63:EC:89:14:43:1B:EE:D1:2C:17:7B:D1:B5:F2:9D:56:96:3D
X509v3 Authority Key Identifier:
keyid:B4:C4:1E:59:83:4D:A6:12:D8:3C:A2:41:94:F0:2C:A6:D7:60:24:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tMQeWYNNphLYPKJBlPAsptdgJEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a3baca-437d-4607-9c1a-557a4c31e02e/1/tMQeWYNNphLYPKJBlPAsptdgJEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a3baca-437d-4607-9c1a-557a4c31e02e/1/tMQeWYNNphLYPKJBlPAsptdgJEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:58:98:b1:e3:90:42:24:a0:48:a6:01:f4:54:ea:d6:37:49:
1f:e2:0e:04:12:1d:10:73:68:3c:67:83:16:3b:50:ce:1b:8b:
79:bf:18:02:21:33:ce:a9:5d:ba:8f:75:e3:c8:e9:3d:08:2b:
22:b6:d6:c0:c6:42:d4:b2:ff:db:a5:91:3f:bf:63:90:3d:c7:
8b:99:23:7d:ce:a8:e4:b2:73:28:27:13:6d:83:b4:24:cc:0f:
2d:d3:df:19:11:de:88:af:6d:0c:07:88:14:2d:8d:8b:2d:83:
bc:5d:f9:13:51:a7:0b:7d:88:e9:b4:cb:03:95:30:e0:f8:cf:
10:20:35:0a:49:09:71:28:e8:12:0f:de:e2:6f:93:17:91:83:
7d:58:f8:60:33:1c:e3:2f:b4:04:0c:fc:32:5e:c6:48:58:f8:
e8:59:6e:7c:8b:2c:85:27:49:5d:65:20:53:d6:7f:96:65:22:
76:e5:6b:f2:a6:7b:58:8e:ac:68:dc:c1:0e:1a:cf:cb:ec:bd:
ef:81:8c:cf:ec:de:5f:9e:10:53:1d:4a:e8:66:cc:1d:d7:e3:
85:59:5f:2e:df:50:bb:2d:f0:e1:de:61:7e:be:c4:22:3b:ba:
96:2c:49:52:15:ed:fd:ab:74:62:dc:ec:b2:89:d9:f4:2d:e9:
c1:6e:82:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:32:24 2025 by rpki-client