Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/db5989-19f6-468d-9fc3-f8a3780c348e/1/tFBrzj9-GuOn4sua0gXEzfsC3bU.mft
File: tFBrzj9-GuOn4sua0gXEzfsC3bU.mft (raw, json)
Hash identifier: mjf1mk9R7XyEFXfNhWmbFVb41Lb1Lt4ASRSZ7eLwn5Y=
Subject key identifier: 51:6E:FF:6D:A6:B7:01:C0:07:98:A9:1C:7B:CD:9A:7C:82:65:F4:3F
Authority key identifier: B4:50:6B:CE:3F:7E:1A:E3:A7:E2:CB:9A:D2:05:C4:CD:FB:02:DD:B5
Certificate issuer: /CN=b4506bce3f7e1ae3a7e2cb9ad205c4cdfb02ddb5
Certificate serial: 01984E1DC8460AE8D7847A6F4C1D9F326285
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFBrzj9-GuOn4sua0gXEzfsC3bU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/db5989-19f6-468d-9fc3-f8a3780c348e/1/tFBrzj9-GuOn4sua0gXEzfsC3bU.mft
Manifest number: 1511
Signing time: Sun 27 Jul 2025 23:00:31 +0000
Manifest this update: Sun 27 Jul 2025 23:00:31 +0000
Manifest next update: Mon 28 Jul 2025 23:00:31 +0000
Files and hashes: 1: Kd39P6546NpKkTMGeJ0Di1Tm-dg.roa (hash: whkcH/ShQkUqu7p697My2+ymwjNji4wGQLqM0wmvkYA=)
2: To-uv46-3XmiPKg6c_GrFJdFcf0.roa (hash: SmXcvoxvyvRm/BeOwyu47J7sKwYa3+1oFy5V9rexUqQ=)
3: tFBrzj9-GuOn4sua0gXEzfsC3bU.crl (hash: K6jsjDEoHu8L4lbz29rLxAFPUai7WN2CdbsJaoSzpKs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/db5989-19f6-468d-9fc3-f8a3780c348e/1/tFBrzj9-GuOn4sua0gXEzfsC3bU.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/db5989-19f6-468d-9fc3-f8a3780c348e/1/tFBrzj9-GuOn4sua0gXEzfsC3bU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tFBrzj9-GuOn4sua0gXEzfsC3bU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 18:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4e:1d:c8:46:0a:e8:d7:84:7a:6f:4c:1d:9f:32:62:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4506bce3f7e1ae3a7e2cb9ad205c4cdfb02ddb5
Validity
Not Before: Jul 27 23:00:31 2025 GMT
Not After : Jul 28 23:00:31 2025 GMT
Subject: CN=516eff6da6b701c00798a91c7bcd9a7c8265f43f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:3c:43:ad:d0:43:6e:1b:eb:e6:14:34:66:f3:
91:95:e6:19:15:77:69:7b:24:4c:3c:60:87:33:ae:
9a:ee:b7:6d:f4:7d:a7:77:ca:1d:35:5a:00:ac:51:
8a:df:2f:55:8e:5d:c8:ef:b2:fc:c4:c2:fb:b4:6f:
5d:9e:52:1b:8a:eb:1b:0a:5e:70:55:31:b7:b7:2d:
c5:28:69:e2:27:ec:60:cc:9b:3c:db:c8:3e:85:b8:
f0:e0:d3:76:0d:23:42:16:a2:ed:68:18:e5:0a:63:
53:d5:97:85:15:09:19:4f:83:ba:15:58:e5:bc:b8:
26:09:61:e6:b1:e9:6c:83:7c:c8:a2:19:73:70:0a:
34:ef:a8:75:28:16:72:0b:28:d3:b8:2a:a2:28:5d:
cb:15:98:c5:ab:24:eb:00:55:ea:9d:38:16:17:9b:
3c:5a:24:25:b6:af:37:bf:ff:d7:63:bf:e4:91:b7:
c2:d0:66:a9:0f:83:45:55:ea:f2:6a:ad:f6:70:29:
43:12:34:da:78:93:7a:9d:ef:8f:a0:60:18:4b:5d:
05:56:1b:41:eb:b1:18:1f:bd:a4:12:50:38:98:48:
81:7a:3f:28:fe:de:54:d6:38:f4:7f:c9:1d:3f:00:
29:89:59:65:52:28:65:fa:80:4e:3f:15:e3:9d:19:
ad:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:6E:FF:6D:A6:B7:01:C0:07:98:A9:1C:7B:CD:9A:7C:82:65:F4:3F
X509v3 Authority Key Identifier:
keyid:B4:50:6B:CE:3F:7E:1A:E3:A7:E2:CB:9A:D2:05:C4:CD:FB:02:DD:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFBrzj9-GuOn4sua0gXEzfsC3bU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/db5989-19f6-468d-9fc3-f8a3780c348e/1/tFBrzj9-GuOn4sua0gXEzfsC3bU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/db5989-19f6-468d-9fc3-f8a3780c348e/1/tFBrzj9-GuOn4sua0gXEzfsC3bU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:14:86:09:9e:75:13:b5:80:2a:d4:cb:da:42:fe:2d:59:cc:
b4:33:f8:ef:42:e5:9e:f3:ba:4f:6a:29:7d:b3:9c:31:e2:a7:
44:b0:15:2a:d2:34:79:7a:ad:a3:7e:38:38:34:21:c1:a2:60:
31:9a:19:87:6b:92:a8:48:a3:80:cc:86:75:e9:04:0d:72:57:
48:47:3c:f0:9b:c4:a7:bc:9a:ef:d9:ea:97:f1:86:20:c7:55:
df:59:29:45:fa:23:20:9e:13:ee:2f:b3:39:b9:89:77:61:0e:
92:9c:72:d6:01:7a:d6:e5:19:95:cb:fa:16:fc:90:1a:cc:f4:
29:84:a9:50:25:be:27:7e:36:74:e3:57:b9:57:17:ef:a3:bc:
1e:24:77:8b:78:07:9b:0f:e1:e7:38:e1:16:2f:e3:68:6f:ba:
6f:20:e0:1f:d0:6a:6b:3d:59:4d:e8:4c:62:36:60:0a:d4:aa:
1a:6d:89:0a:4d:de:2b:58:ad:20:30:8b:66:8a:3f:5e:6f:84:
64:17:2a:2a:f1:b5:df:13:28:d0:b0:3e:70:12:cd:93:d3:da:
fd:a1:a2:d4:28:ef:d8:57:a6:33:d8:15:bc:00:39:c9:f3:d3:
7f:a0:c2:c3:57:2e:1a:db:82:ae:c5:8e:c7:0c:64:62:11:6b:
86:e6:76:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 01:58:49 2025 by rpki-client