Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/dcd512-0cb7-49a0-a618-6fbb19483287/1/t060sgvFlKwro6pa7zDnTiXhVuE.mft
File: t060sgvFlKwro6pa7zDnTiXhVuE.mft (raw, json)
Hash identifier: Lp4brgfCZCWGtKU5leILaam/HO9CopB7yxljidBhP0Q=
Subject key identifier: 18:37:D1:CF:66:97:71:10:A4:DF:AD:0D:AA:7E:58:AF:FB:55:E6:48
Authority key identifier: B7:4E:B4:B2:0B:C5:94:AC:2B:A3:AA:5A:EF:30:E7:4E:25:E1:56:E1
Certificate issuer: /CN=b74eb4b20bc594ac2ba3aa5aef30e74e25e156e1
Certificate serial: 0198496654CC8A3F2F35A3DCA173AB13DC9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t060sgvFlKwro6pa7zDnTiXhVuE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/dcd512-0cb7-49a0-a618-6fbb19483287/1/t060sgvFlKwro6pa7zDnTiXhVuE.mft
Manifest number: 0AA1
Signing time: Sun 27 Jul 2025 01:01:39 +0000
Manifest this update: Sun 27 Jul 2025 01:01:39 +0000
Manifest next update: Mon 28 Jul 2025 01:01:39 +0000
Files and hashes: 1: 96zfb_as6Uu1dQBioEPRjkMoH0A.roa (hash: ZbDgERbOZ82dnNJrpA+vEp4hFeMsEzejOuHoVOcv55k=)
2: t060sgvFlKwro6pa7zDnTiXhVuE.crl (hash: a28iqc56YouYYEsGv4O3IclTFG06zXBCMjnCJUp+6R0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/dcd512-0cb7-49a0-a618-6fbb19483287/1/t060sgvFlKwro6pa7zDnTiXhVuE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/dcd512-0cb7-49a0-a618-6fbb19483287/1/t060sgvFlKwro6pa7zDnTiXhVuE.mft
rsync://rpki.ripe.net/repository/DEFAULT/t060sgvFlKwro6pa7zDnTiXhVuE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:54:cc:8a:3f:2f:35:a3:dc:a1:73:ab:13:dc:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b74eb4b20bc594ac2ba3aa5aef30e74e25e156e1
Validity
Not Before: Jul 27 01:01:39 2025 GMT
Not After : Jul 28 01:01:39 2025 GMT
Subject: CN=1837d1cf66977110a4dfad0daa7e58affb55e648
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:64:c3:79:01:98:4b:4d:75:85:58:41:05:b0:
53:ab:ec:78:7d:0c:cd:46:63:3e:3a:a6:59:f1:dd:
af:d0:12:59:4f:f1:8b:bd:63:6c:a0:d6:39:03:cd:
08:ac:06:f3:4b:97:6a:c2:ad:f0:e1:58:90:0c:7e:
86:55:7f:63:b6:57:6d:a4:77:d1:9f:7e:c1:60:a5:
99:ba:be:3d:4f:61:de:f0:9c:9e:38:5e:63:8d:41:
43:58:5b:01:0a:28:ce:70:6a:bc:fd:e9:4c:73:b1:
c1:39:ef:82:0f:ac:58:44:f6:50:ed:fa:46:07:f7:
70:ff:2b:34:0b:7a:6c:c6:e2:6c:38:8a:44:66:16:
51:f9:93:25:0d:da:0e:fe:67:02:41:a2:5f:11:86:
d0:a0:0a:b8:8d:00:b2:f6:5b:3d:16:ab:c7:fb:70:
0c:95:da:d4:d4:f3:2a:ed:dc:ea:af:42:78:6d:c2:
58:95:bb:09:78:da:09:1e:9e:41:b9:c3:04:70:75:
b4:b0:2c:e3:64:2c:b4:07:dc:72:de:b0:14:13:a2:
13:d3:d4:f6:1c:88:a1:02:f3:68:60:cb:85:10:9c:
84:17:05:8d:74:0d:3a:d6:f8:ea:ab:3e:35:c5:ac:
28:02:6a:fd:4a:1e:31:a9:38:5f:27:6f:86:f8:2d:
c8:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:37:D1:CF:66:97:71:10:A4:DF:AD:0D:AA:7E:58:AF:FB:55:E6:48
X509v3 Authority Key Identifier:
keyid:B7:4E:B4:B2:0B:C5:94:AC:2B:A3:AA:5A:EF:30:E7:4E:25:E1:56:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t060sgvFlKwro6pa7zDnTiXhVuE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/dcd512-0cb7-49a0-a618-6fbb19483287/1/t060sgvFlKwro6pa7zDnTiXhVuE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/dcd512-0cb7-49a0-a618-6fbb19483287/1/t060sgvFlKwro6pa7zDnTiXhVuE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:71:0c:d5:7b:2f:4d:54:ea:78:89:63:b3:f2:5c:ae:07:f0:
ae:30:87:82:a9:5e:71:78:50:e7:48:6d:99:47:d2:12:fb:0b:
0a:fd:35:09:58:7d:65:4e:10:e9:a0:73:05:f5:5b:9d:d3:ea:
e1:06:91:9d:db:8e:d0:35:d0:f4:32:03:9d:86:d6:19:28:e5:
de:c0:46:32:6a:a9:02:c7:88:fd:80:39:04:dd:da:3b:56:2d:
b6:d5:7d:9e:d7:d5:2f:52:2f:17:4e:37:a0:07:02:40:1f:24:
bd:c5:1a:bd:59:76:3b:d0:e2:ed:49:e5:30:48:fc:b3:15:f0:
aa:12:99:0b:e5:81:e3:3e:b2:92:ea:09:7c:e2:e9:8f:c3:ea:
0c:d4:66:f0:33:61:af:d8:e8:7d:32:f4:14:25:2b:08:b6:62:
3d:c3:2d:37:5c:74:86:79:73:5f:ae:48:ff:9c:7c:5c:79:1e:
02:e0:5c:23:ae:98:c0:41:08:04:23:c6:7e:bd:52:39:ac:8f:
03:89:19:ff:c7:ff:b4:08:49:dc:2e:ee:3c:6e:39:e2:ad:49:
b5:6e:0b:38:87:b2:34:0a:48:c5:e4:2b:bc:c5:26:15:66:fa:
b7:aa:96:c9:4a:e8:21:bc:47:7e:93:72:7c:4e:59:ae:d0:bc:
82:21:77:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:37:22 2025 by rpki-client