Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/dc13c1-de56-449f-9c29-c81266b7c49e/1/tu1iBVpRkcAuxREulRgaiawGDOs.mft
File: tu1iBVpRkcAuxREulRgaiawGDOs.mft (raw, json)
Hash identifier: 5xj9H6hs9f6rh1DvzNxNZsj5pstY3nNOg71rUkb0SiQ=
Subject key identifier: 98:21:99:48:B7:F5:C8:64:E2:48:30:96:8D:90:B5:2F:30:F5:2A:45
Authority key identifier: B6:ED:62:05:5A:51:91:C0:2E:C5:11:2E:95:18:1A:89:AC:06:0C:EB
Certificate issuer: /CN=b6ed62055a5191c02ec5112e95181a89ac060ceb
Certificate serial: 0198499C701D0FBEA4E2B67E0A90BE65ABE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tu1iBVpRkcAuxREulRgaiawGDOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/dc13c1-de56-449f-9c29-c81266b7c49e/1/tu1iBVpRkcAuxREulRgaiawGDOs.mft
Manifest number: 0B5B
Signing time: Sun 27 Jul 2025 02:00:45 +0000
Manifest this update: Sun 27 Jul 2025 02:00:45 +0000
Manifest next update: Mon 28 Jul 2025 02:00:45 +0000
Files and hashes: 1: iOo8WZeBs16BOwEjC7IsPMOtPO0.roa (hash: FC5R1Hrtvnbfsyec/XOyQavDbuFW5mY0wSOTHI+QutE=)
2: tu1iBVpRkcAuxREulRgaiawGDOs.crl (hash: OJfu6379zFV4PztzTt4W7er17+Cr/Rpa0sKjVB8oRUk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/dc13c1-de56-449f-9c29-c81266b7c49e/1/tu1iBVpRkcAuxREulRgaiawGDOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/dc13c1-de56-449f-9c29-c81266b7c49e/1/tu1iBVpRkcAuxREulRgaiawGDOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/tu1iBVpRkcAuxREulRgaiawGDOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 02:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:9c:70:1d:0f:be:a4:e2:b6:7e:0a:90:be:65:ab:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6ed62055a5191c02ec5112e95181a89ac060ceb
Validity
Not Before: Jul 27 02:00:45 2025 GMT
Not After : Jul 28 02:00:45 2025 GMT
Subject: CN=98219948b7f5c864e24830968d90b52f30f52a45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:93:9d:85:61:e2:2b:04:5d:27:a4:24:2e:1a:
0f:7f:44:d1:e1:9f:0b:4b:68:42:ea:37:a2:75:49:
62:b2:39:bc:61:cc:9b:c8:b7:f9:f7:9c:3f:99:6f:
89:64:c3:de:d9:e6:82:32:e8:3f:a8:4f:9d:d9:05:
19:74:f3:f2:b6:b5:2c:1e:a1:3e:34:70:fe:be:77:
94:e2:37:c6:16:85:f3:a1:c0:29:b5:0b:72:f6:66:
e0:76:61:c9:76:37:bb:28:f6:f8:40:2c:e0:55:4a:
e0:3b:42:94:57:32:ea:50:f0:27:a8:00:46:fa:5b:
0b:cb:f9:f1:82:ff:6e:36:ab:9b:5c:c4:33:45:5c:
f1:cf:0c:2e:97:fe:42:7d:0c:7f:14:f6:de:a4:98:
ef:70:a7:c0:7b:81:2c:1c:af:5a:07:5a:e0:44:17:
36:56:7c:8e:6b:21:c6:87:b1:23:3a:06:f8:f5:5d:
22:f3:4f:75:16:7c:b5:69:ea:e6:c8:de:8d:0c:e4:
10:93:47:0c:f2:51:82:7f:55:e6:7c:5d:91:0e:5f:
71:da:bb:13:e1:25:aa:9c:e1:b3:bf:17:61:fb:77:
b5:01:1c:ca:ae:d9:a8:6b:85:3c:a6:d3:c7:56:69:
de:dd:2d:bd:67:48:d5:08:b2:fb:21:25:10:60:87:
ae:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:21:99:48:B7:F5:C8:64:E2:48:30:96:8D:90:B5:2F:30:F5:2A:45
X509v3 Authority Key Identifier:
keyid:B6:ED:62:05:5A:51:91:C0:2E:C5:11:2E:95:18:1A:89:AC:06:0C:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tu1iBVpRkcAuxREulRgaiawGDOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/dc13c1-de56-449f-9c29-c81266b7c49e/1/tu1iBVpRkcAuxREulRgaiawGDOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/dc13c1-de56-449f-9c29-c81266b7c49e/1/tu1iBVpRkcAuxREulRgaiawGDOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:b5:93:84:05:79:99:f1:0d:35:07:79:e2:64:82:09:ac:7b:
c5:99:c4:a4:67:93:c4:2b:a1:a2:17:90:ae:ac:36:c6:a8:86:
0f:16:41:69:69:9e:bd:83:ee:43:52:c1:d5:c1:d1:8d:7d:0a:
e6:3d:9e:a6:d7:69:88:cb:58:2a:e1:08:80:11:ea:4e:da:af:
bf:bc:c7:4f:17:c1:b4:02:47:51:58:6d:76:58:04:d9:3a:73:
7e:37:1b:af:56:11:74:f6:fe:83:d9:f5:07:9a:7f:a6:7b:88:
69:52:28:7f:d5:bd:a9:33:b9:8e:9e:be:7d:aa:4e:cc:43:af:
9b:b6:f9:57:fd:7e:f6:47:10:fc:c3:fe:71:7a:77:a6:a7:8f:
4c:35:cc:33:87:02:2a:66:43:1e:19:b5:58:10:ac:b3:44:dc:
1c:32:46:a1:24:29:af:a8:d5:56:b9:f7:75:88:4d:aa:b5:26:
ac:1d:68:d0:7c:eb:ca:33:89:05:52:01:31:c9:12:20:04:f5:
22:42:f5:29:a7:b2:d3:a1:51:b9:18:60:55:2a:cb:6c:0c:f4:
bf:ad:d9:82:87:8c:d0:dc:4d:81:24:4d:8f:35:28:b7:d0:6c:
47:0d:79:74:4e:f4:2c:1f:e8:77:b5:0c:2d:2f:5f:5f:f4:1a:
3b:95:6f:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:33:28 2025 by rpki-client