Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/80ee8f-867a-4b25-ae5d-92b9daa00379/1/tWGrEAAXphJTFvzGEzhKr73mAYk.mft
File: tWGrEAAXphJTFvzGEzhKr73mAYk.mft (raw, json)
Hash identifier: kJ3EgWdhzV9YU73QjaQtXaBVTIWOAEmTCm2ksLASbns=
Subject key identifier: 26:4C:9D:5C:C6:80:34:40:19:1A:25:CC:65:E2:39:E6:7E:63:74:E3
Authority key identifier: B5:61:AB:10:00:17:A6:12:53:16:FC:C6:13:38:4A:AF:BD:E6:01:89
Certificate issuer: /CN=b561ab100017a6125316fcc613384aafbde60189
Certificate serial: 0198410754C9A331D561668830820CC59955
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tWGrEAAXphJTFvzGEzhKr73mAYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/80ee8f-867a-4b25-ae5d-92b9daa00379/1/tWGrEAAXphJTFvzGEzhKr73mAYk.mft
Manifest number: 0678
Signing time: Fri 25 Jul 2025 10:00:56 +0000
Manifest this update: Fri 25 Jul 2025 10:00:56 +0000
Manifest next update: Sat 26 Jul 2025 10:00:56 +0000
Files and hashes: 1: 54hiEVCu42nmTIhQ3bS5shMqgPg.roa (hash: Rk0IIWWSef2+X2JeCku/njRK3YOnsndfGq7YFCHBZaw=)
2: tWGrEAAXphJTFvzGEzhKr73mAYk.crl (hash: jT3UX2hmi0VE3JvUWkcxH7D+8mf7rc/dotgRxvKkgnc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/80ee8f-867a-4b25-ae5d-92b9daa00379/1/tWGrEAAXphJTFvzGEzhKr73mAYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/80ee8f-867a-4b25-ae5d-92b9daa00379/1/tWGrEAAXphJTFvzGEzhKr73mAYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/tWGrEAAXphJTFvzGEzhKr73mAYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:41:07:54:c9:a3:31:d5:61:66:88:30:82:0c:c5:99:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b561ab100017a6125316fcc613384aafbde60189
Validity
Not Before: Jul 25 10:00:56 2025 GMT
Not After : Jul 26 10:00:56 2025 GMT
Subject: CN=264c9d5cc6803440191a25cc65e239e67e6374e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:65:4f:cf:37:ce:cf:30:b2:36:8c:ce:a5:39:
aa:f6:0a:23:c7:3c:46:d0:4d:9c:f5:5b:a1:b8:07:
d1:c6:43:b9:4a:01:bf:97:c7:d4:0b:93:d9:d4:f7:
10:51:9e:6f:1f:8b:98:c8:20:12:6f:e0:0b:63:50:
1f:d9:86:5c:f3:8b:07:45:8f:42:74:b7:f4:07:0e:
7e:bb:7b:1f:85:2d:23:02:d4:ce:d1:db:a4:16:fc:
9a:aa:f3:b7:ec:58:0d:48:63:93:a2:85:48:5d:39:
f4:5d:1d:67:33:51:84:70:cb:1e:b2:80:37:03:0b:
b7:b7:5b:a2:9b:03:17:fc:a9:f1:8c:34:58:ae:2b:
10:08:44:e6:b9:63:f7:bd:a0:aa:cd:fd:be:b4:25:
a9:b5:36:f9:0c:df:61:cb:84:cc:7c:9a:5d:27:dd:
5f:44:df:41:99:ce:a6:18:db:9e:43:59:59:31:c7:
e8:1a:bb:7c:ec:fc:30:4a:d4:a9:2a:28:e0:c7:41:
bf:99:f3:b4:63:bd:2e:78:66:b5:a0:5a:0a:b3:2f:
40:15:e2:34:21:c0:88:37:80:f3:24:f4:af:5e:41:
87:b6:54:bd:4b:ea:e6:e5:dd:62:58:31:5d:b7:63:
b6:ac:35:d9:f5:eb:1b:49:3a:58:89:0b:7d:04:92:
59:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:4C:9D:5C:C6:80:34:40:19:1A:25:CC:65:E2:39:E6:7E:63:74:E3
X509v3 Authority Key Identifier:
keyid:B5:61:AB:10:00:17:A6:12:53:16:FC:C6:13:38:4A:AF:BD:E6:01:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tWGrEAAXphJTFvzGEzhKr73mAYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/80ee8f-867a-4b25-ae5d-92b9daa00379/1/tWGrEAAXphJTFvzGEzhKr73mAYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/80ee8f-867a-4b25-ae5d-92b9daa00379/1/tWGrEAAXphJTFvzGEzhKr73mAYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:6a:a2:05:ba:df:3b:83:22:37:e7:64:d8:b7:c2:55:0c:dd:
c7:c1:cb:7e:29:5a:43:b0:0f:e3:b7:1c:30:a0:f2:0e:59:fb:
2a:a5:35:9e:45:0a:f5:1e:1c:72:ec:12:82:f7:84:7f:9d:d1:
e2:c3:01:11:ec:f4:eb:42:a9:ef:af:b7:76:83:35:e4:41:15:
27:61:ec:a5:88:cd:8a:45:74:23:b6:93:25:41:10:70:c2:fc:
66:a3:4f:26:e0:0a:c5:8a:67:db:f7:ed:34:c3:1e:8f:c3:0c:
3c:f5:bb:33:58:82:1d:87:69:c4:d2:f9:8d:86:46:f4:72:77:
31:75:3f:da:a3:5e:4e:da:33:a6:8f:39:31:f8:bd:2b:ee:1c:
a9:86:bd:ae:ed:6e:ba:2e:e3:0f:1f:5e:43:9c:24:b6:61:fb:
37:89:55:0a:31:0e:ad:d1:16:50:56:35:bb:d5:2c:ea:c4:d0:
4a:ad:f6:37:34:da:a5:77:45:42:34:59:e1:5a:c2:d3:ab:94:
26:86:66:fc:67:3d:5b:c6:53:9a:c4:35:30:be:59:89:cd:50:
70:a2:b6:b0:83:05:58:a0:4f:e0:0a:bf:ac:7b:fe:86:76:73:
29:af:5d:30:86:54:0d:be:d0:f8:8a:4e:85:8c:d0:7a:12:77:
d3:37:28:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 13:04:25 2025 by rpki-client