Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/501ebf-5ffd-4cda-a66d-062d70e3aa23/1/T7ZXbs2iUkbfcNenLhz_-tiI6js.mft
File: T7ZXbs2iUkbfcNenLhz_-tiI6js.mft (raw, json)
Hash identifier: Yg4UdjpMDeAsEyXGuT97k6jZLQAR8pcvM+TTmht+paE=
Subject key identifier: 12:86:20:F6:97:7E:54:8D:D3:3D:2C:80:F6:BA:A1:57:F0:A1:51:EF
Authority key identifier: 4F:B6:57:6E:CD:A2:52:46:DF:70:D7:A7:2E:1C:FF:FA:D8:88:EA:3B
Certificate issuer: /CN=4fb6576ecda25246df70d7a72e1cfffad888ea3b
Certificate serial: 0198451ABFB9A35CC7CF35903CB2C0D3AAC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T7ZXbs2iUkbfcNenLhz_-tiI6js.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/501ebf-5ffd-4cda-a66d-062d70e3aa23/1/T7ZXbs2iUkbfcNenLhz_-tiI6js.mft
Manifest number: 05A1
Signing time: Sat 26 Jul 2025 05:00:37 +0000
Manifest this update: Sat 26 Jul 2025 05:00:37 +0000
Manifest next update: Sun 27 Jul 2025 05:00:37 +0000
Files and hashes: 1: T7ZXbs2iUkbfcNenLhz_-tiI6js.crl (hash: rD5tM8vQ8BCYUbNPZxNestK6Vrav/YiX7pk4vomeay4=)
2: q0JCtn0ymXJ_44Fp2RsnS-aL5Os.roa (hash: ol9vwFP2kye7kweAuJ86LI17vpYzbBP1gC/LI4vVUEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/501ebf-5ffd-4cda-a66d-062d70e3aa23/1/T7ZXbs2iUkbfcNenLhz_-tiI6js.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/501ebf-5ffd-4cda-a66d-062d70e3aa23/1/T7ZXbs2iUkbfcNenLhz_-tiI6js.mft
rsync://rpki.ripe.net/repository/DEFAULT/T7ZXbs2iUkbfcNenLhz_-tiI6js.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:1a:bf:b9:a3:5c:c7:cf:35:90:3c:b2:c0:d3:aa:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fb6576ecda25246df70d7a72e1cfffad888ea3b
Validity
Not Before: Jul 26 05:00:37 2025 GMT
Not After : Jul 27 05:00:37 2025 GMT
Subject: CN=128620f6977e548dd33d2c80f6baa157f0a151ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:11:8a:be:58:28:8a:bd:4d:9d:48:be:81:92:
61:b0:d5:13:d1:1c:13:e9:36:de:00:8a:5f:ba:5a:
8d:14:30:a0:e6:54:82:ee:60:b0:6b:9f:e7:53:0b:
85:7a:93:bb:aa:88:33:73:cd:70:86:97:47:69:ee:
fe:b5:c8:5b:6d:19:d3:65:14:83:9b:6f:98:b5:4f:
a7:e5:52:f3:49:ad:ca:11:98:99:29:ef:02:c7:fc:
c3:17:ce:d3:6a:60:65:81:c3:59:92:57:ac:96:c8:
e4:36:50:20:29:e2:34:c3:83:35:b4:6e:a2:68:9a:
4c:d9:f6:f5:4d:e8:39:49:02:2d:6c:a4:78:33:56:
0d:8c:1c:5b:32:c1:5d:18:22:57:7a:e9:16:b8:a3:
27:0a:15:ee:b6:f4:1b:20:82:40:fa:48:41:14:4b:
bd:3b:14:7e:9b:7f:d1:b4:04:df:6e:0e:b7:51:6f:
35:20:91:32:04:d4:7e:6a:03:d9:23:21:34:19:df:
4c:fa:47:b0:c4:07:e3:c1:20:42:75:09:05:0b:62:
3c:9b:e1:7f:6f:fa:13:99:0c:94:da:9e:14:82:41:
85:4e:fc:63:53:bd:0a:8f:27:fc:7b:8e:af:92:33:
7c:ec:43:46:11:1c:aa:4c:5f:70:23:08:61:60:8f:
e6:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:86:20:F6:97:7E:54:8D:D3:3D:2C:80:F6:BA:A1:57:F0:A1:51:EF
X509v3 Authority Key Identifier:
keyid:4F:B6:57:6E:CD:A2:52:46:DF:70:D7:A7:2E:1C:FF:FA:D8:88:EA:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T7ZXbs2iUkbfcNenLhz_-tiI6js.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/501ebf-5ffd-4cda-a66d-062d70e3aa23/1/T7ZXbs2iUkbfcNenLhz_-tiI6js.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/501ebf-5ffd-4cda-a66d-062d70e3aa23/1/T7ZXbs2iUkbfcNenLhz_-tiI6js.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:bb:bd:ed:0a:fb:86:26:93:b2:7e:3d:5d:39:98:cc:d7:27:
14:6b:d4:12:7c:70:48:01:ed:2f:bb:68:14:08:31:51:45:cd:
7d:17:42:4c:41:69:a4:32:57:58:21:84:2b:c4:11:bc:73:2a:
2a:ce:c5:9f:b9:5d:7c:d0:6b:30:46:4c:31:b3:f7:be:5c:f7:
64:16:ae:aa:fb:09:9f:84:12:59:c0:b3:7e:28:a5:41:a4:88:
57:02:54:f3:e1:c8:5c:72:ee:0d:26:2d:88:db:5e:73:8a:cf:
c3:14:6d:84:ef:e9:cd:f4:15:b1:9e:f4:e9:1c:d5:67:7a:ed:
cb:a0:d8:c5:a2:14:d2:89:c0:8b:fe:c9:2e:53:d4:af:86:d7:
f7:d0:82:af:d1:14:b7:18:f2:87:cf:78:4f:f6:b4:ea:2c:c7:
aa:6e:eb:7c:b6:6a:ab:a0:3a:39:e7:1a:23:80:2c:e5:9d:32:
27:60:b2:ca:8d:3a:10:16:63:4a:ab:b1:3b:9a:38:ac:f9:c4:
bb:d1:b7:18:cc:06:f4:b2:1e:fb:6a:22:7a:b5:49:50:f8:11:
04:d9:f9:e2:7e:87:ba:5e:7a:40:8a:4c:22:83:85:a9:9e:52:
43:b4:3b:b2:f7:4e:bc:34:f2:fa:4e:87:c2:23:78:25:ec:db:
81:c2:07:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:29:49 2025 by rpki-client