Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/0df7f3-a492-4d6f-b36f-d41e03592335/1/tQALgentSypwKh71-FLg52nuEOI.mft
File: tQALgentSypwKh71-FLg52nuEOI.mft (raw, json)
Hash identifier: rnKLJfaEIOnqwVJPg7xEq1HDseWjLJK1i+6Nx14j6I8=
Subject key identifier: B2:61:24:4E:5D:2F:21:FA:E3:E5:B7:4B:74:02:E2:2F:84:DC:1B:17
Authority key identifier: B5:00:0B:81:E9:ED:4B:2A:70:2A:1E:F5:F8:52:E0:E7:69:EE:10:E2
Certificate issuer: /CN=b5000b81e9ed4b2a702a1ef5f852e0e769ee10e2
Certificate serial: 01984776E8EA375FA5A2A85EDD01B2ECDC69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tQALgentSypwKh71-FLg52nuEOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/0df7f3-a492-4d6f-b36f-d41e03592335/1/tQALgentSypwKh71-FLg52nuEOI.mft
Manifest number: 0E9E
Signing time: Sat 26 Jul 2025 16:00:31 +0000
Manifest this update: Sat 26 Jul 2025 16:00:31 +0000
Manifest next update: Sun 27 Jul 2025 16:00:31 +0000
Files and hashes: 1: AoPTcwy6H2m6XsU7z7Y2AN7ROE0.roa (hash: EkcAF/FP1ByxQSttbvF051kXzqctUYj/EMjpBXkG1v8=)
2: tQALgentSypwKh71-FLg52nuEOI.crl (hash: 8uMMG1kaWa6sb9SpYs61Ei51ipSUSRJocQnKC7Fptqg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/0df7f3-a492-4d6f-b36f-d41e03592335/1/tQALgentSypwKh71-FLg52nuEOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/0df7f3-a492-4d6f-b36f-d41e03592335/1/tQALgentSypwKh71-FLg52nuEOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tQALgentSypwKh71-FLg52nuEOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:76:e8:ea:37:5f:a5:a2:a8:5e:dd:01:b2:ec:dc:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5000b81e9ed4b2a702a1ef5f852e0e769ee10e2
Validity
Not Before: Jul 26 16:00:31 2025 GMT
Not After : Jul 27 16:00:31 2025 GMT
Subject: CN=b261244e5d2f21fae3e5b74b7402e22f84dc1b17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:f3:9e:05:b2:0f:2d:ed:b2:ce:39:04:6d:d8:
35:d4:c9:d6:5f:6a:40:57:2c:f3:86:07:03:f2:2c:
fb:97:30:f1:91:30:5e:bb:46:7b:9d:e7:79:5f:c9:
4c:fa:a7:e8:2e:ef:a8:17:eb:ff:95:9b:35:06:d1:
cd:bb:59:68:58:99:c0:db:0b:16:50:d8:aa:19:87:
7d:ca:c0:86:5b:1d:e6:0a:2e:3b:0b:6e:f3:b6:de:
0e:d1:39:3d:0e:8c:f7:74:0e:b0:c7:78:93:36:6a:
e6:1c:5c:bd:79:d6:00:9c:97:d3:c2:4a:27:b8:2d:
bd:ff:b4:18:cd:12:41:a5:06:24:45:91:d1:da:50:
5a:40:04:18:5f:ea:0f:15:fb:12:b0:b5:1a:a0:69:
c4:b4:bc:0b:e1:6a:c6:80:02:dd:53:a2:98:14:b6:
a9:7b:7e:dc:b0:bf:f3:71:96:64:fc:37:4e:12:e1:
3d:78:88:eb:2f:68:5a:70:81:80:21:c9:9e:d4:53:
5d:34:b9:5a:c5:12:66:f1:d9:a1:be:9c:92:a0:57:
9c:b3:05:97:c1:82:c0:7a:41:7c:2e:77:0e:5a:2d:
86:43:3d:f3:a0:20:a5:37:ac:05:96:0c:f8:ee:64:
55:b6:cc:ae:4b:6e:7a:1d:63:db:17:c1:1a:5d:64:
7c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:61:24:4E:5D:2F:21:FA:E3:E5:B7:4B:74:02:E2:2F:84:DC:1B:17
X509v3 Authority Key Identifier:
keyid:B5:00:0B:81:E9:ED:4B:2A:70:2A:1E:F5:F8:52:E0:E7:69:EE:10:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tQALgentSypwKh71-FLg52nuEOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/0df7f3-a492-4d6f-b36f-d41e03592335/1/tQALgentSypwKh71-FLg52nuEOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/0df7f3-a492-4d6f-b36f-d41e03592335/1/tQALgentSypwKh71-FLg52nuEOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:40:93:20:1e:a1:a6:e2:17:53:2c:e6:25:2c:64:ec:20:b3:
97:e2:57:32:48:8b:6f:62:92:c2:e7:71:d6:66:c5:9b:16:49:
ef:be:64:fc:07:40:67:6d:a9:4a:7f:08:af:b2:11:82:6e:ab:
bc:d8:6b:5d:ba:79:43:8e:1c:ab:4f:1c:36:4e:f8:a7:b7:05:
05:0f:71:ad:78:8f:15:df:73:9e:56:7b:de:a5:38:95:9b:a4:
27:4b:fa:9e:e7:f1:f1:4a:57:77:fa:4b:9c:68:4d:5c:3b:ad:
8d:cd:00:36:3c:0b:46:c0:ed:74:ae:2f:2d:97:4a:a7:4a:9e:
2c:18:7d:91:13:5f:98:0e:37:76:12:4c:2b:99:da:4e:f7:bf:
39:bb:57:25:2e:42:93:fe:03:07:c9:7e:88:da:e3:52:34:af:
4b:9c:74:8e:30:8a:04:cc:61:db:b5:dd:6c:c8:ed:45:f6:f0:
c9:50:1e:5e:f0:ce:5f:5f:6d:23:ba:d3:c3:24:5d:c7:cf:84:
82:18:d8:49:1d:fe:ce:7d:cd:a6:0c:9d:d6:9f:c2:86:33:06:
54:10:02:12:7f:bb:bd:62:3f:45:9f:5c:12:b3:58:50:27:d1:
75:a9:73:ce:65:6c:87:1a:29:3a:16:9d:4f:f8:d3:e0:83:80:
d4:ba:bd:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 19:07:02 2025 by rpki-client