Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/033e8b-bde1-4f90-baf5-23847a40d9e4/1/tg1sqV4ncPVTQNkJ7HyX7so_4g4.mft
File: tg1sqV4ncPVTQNkJ7HyX7so_4g4.mft (raw, json)
Hash identifier: io0Tj3nKzp+0JZYh036/YAMYFYGJLJMTAKRVrsgJ4oo=
Subject key identifier: 68:23:07:CB:22:40:35:D9:29:FB:FC:21:2D:95:18:69:3B:BD:BE:3D
Authority key identifier: B6:0D:6C:A9:5E:27:70:F5:53:40:D9:09:EC:7C:97:EE:CA:3F:E2:0E
Certificate issuer: /CN=b60d6ca95e2770f55340d909ec7c97eeca3fe20e
Certificate serial: 01984A77C4EDDD6930A524F839A5E6ECA7FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tg1sqV4ncPVTQNkJ7HyX7so_4g4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/033e8b-bde1-4f90-baf5-23847a40d9e4/1/tg1sqV4ncPVTQNkJ7HyX7so_4g4.mft
Manifest number: 1601
Signing time: Sun 27 Jul 2025 06:00:19 +0000
Manifest this update: Sun 27 Jul 2025 06:00:19 +0000
Manifest next update: Mon 28 Jul 2025 06:00:19 +0000
Files and hashes: 1: 3wD7YASUrL3NpA7N1DKGwyMvpW8.roa (hash: E3LCGPj2WzMDsMMPMtvTWx8+o6rGMeVTiLG80T025To=)
2: tCxsttlDEYs9pRw5Gm9iTgZyCBc.roa (hash: 0ZbwaGE5XpT8151KuGcEKOSEkVLV60MXa5tXdHShvII=)
3: tg1sqV4ncPVTQNkJ7HyX7so_4g4.crl (hash: 4Tgk+2i05STQDLnMFKtdkU7EzoNJsUQcdF/F4ZlH7Ew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/033e8b-bde1-4f90-baf5-23847a40d9e4/1/tg1sqV4ncPVTQNkJ7HyX7so_4g4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/033e8b-bde1-4f90-baf5-23847a40d9e4/1/tg1sqV4ncPVTQNkJ7HyX7so_4g4.mft
rsync://rpki.ripe.net/repository/DEFAULT/tg1sqV4ncPVTQNkJ7HyX7so_4g4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:77:c4:ed:dd:69:30:a5:24:f8:39:a5:e6:ec:a7:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b60d6ca95e2770f55340d909ec7c97eeca3fe20e
Validity
Not Before: Jul 27 06:00:19 2025 GMT
Not After : Jul 28 06:00:19 2025 GMT
Subject: CN=682307cb224035d929fbfc212d9518693bbdbe3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a7:c5:92:da:94:24:74:aa:cd:ba:30:59:b6:
b5:b7:28:31:37:13:ba:18:a8:79:ec:4c:58:de:f2:
80:ef:19:55:25:32:68:fa:15:3c:69:f4:82:df:42:
e7:b8:e9:a2:41:20:ea:7c:d7:6b:d5:9c:ef:04:b1:
06:2e:e2:58:ee:e7:08:1f:d2:3f:06:8d:06:65:90:
9d:2c:0a:3a:16:65:fd:6f:ee:9d:df:6b:60:85:97:
c0:25:d2:2e:b8:c6:48:fb:b2:d4:e2:07:d5:64:50:
2e:f1:a7:e9:36:a2:8f:1c:21:76:25:cb:db:84:2a:
a2:6b:68:dc:97:e0:47:e8:80:c6:e2:83:ec:03:3b:
40:d6:5e:38:2c:30:15:81:25:ea:9b:05:18:a7:21:
d1:75:5d:ba:a7:05:8f:eb:91:33:f0:0f:b5:60:38:
af:b5:a6:34:fd:d2:1a:93:0c:d9:9f:61:eb:f4:65:
e5:90:59:ab:c0:42:6f:0b:c9:02:c1:19:cd:31:bb:
a1:26:5e:30:17:59:ce:8b:e1:21:d8:d6:cc:dd:bb:
e4:52:72:80:69:27:ea:d3:9a:16:80:e8:8d:66:6e:
2c:dc:16:56:d4:67:cd:b3:88:c3:f3:f6:4c:aa:42:
5d:47:13:6b:2e:57:49:89:cd:cb:11:27:27:b0:06:
0b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:23:07:CB:22:40:35:D9:29:FB:FC:21:2D:95:18:69:3B:BD:BE:3D
X509v3 Authority Key Identifier:
keyid:B6:0D:6C:A9:5E:27:70:F5:53:40:D9:09:EC:7C:97:EE:CA:3F:E2:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tg1sqV4ncPVTQNkJ7HyX7so_4g4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/033e8b-bde1-4f90-baf5-23847a40d9e4/1/tg1sqV4ncPVTQNkJ7HyX7so_4g4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/033e8b-bde1-4f90-baf5-23847a40d9e4/1/tg1sqV4ncPVTQNkJ7HyX7so_4g4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:d9:a8:8d:b3:79:bc:d9:89:ad:ab:6b:b3:15:b3:5d:eb:72:
17:75:45:d7:55:a5:05:ec:a9:dd:c5:85:3f:45:da:3b:26:4a:
f0:ab:99:a7:d1:e9:7e:1a:5a:4a:3a:97:a9:f8:78:12:bc:89:
18:aa:dd:b2:cc:e2:49:f2:b7:68:14:28:b6:e3:c0:d0:e5:80:
90:27:ba:37:32:a8:7e:5d:18:fc:f8:68:53:99:42:e9:8d:dd:
1b:bf:ee:01:47:0d:18:59:5e:86:69:c2:4e:ce:87:73:0f:ed:
d8:0d:24:aa:c1:aa:eb:b0:c0:f7:7f:f6:17:09:4b:fc:65:76:
d6:dc:f6:33:14:b1:c3:9e:28:e0:9d:44:4d:e3:ca:b4:f4:90:
ab:8c:4c:bf:65:25:b3:22:59:e7:1f:5a:02:d4:6e:92:20:e3:
e7:0e:0c:f1:2c:e6:95:b6:44:3d:e6:2c:5b:b9:55:c7:06:35:
5b:ed:1f:ab:a2:ba:55:63:3e:75:f4:85:4a:81:db:96:c2:38:
e7:4b:23:96:e5:36:a0:f9:ed:12:93:e2:8f:ea:2c:68:aa:c1:
bd:ad:fc:01:f8:dd:84:2c:d9:25:d0:a8:e4:04:ea:61:99:2f:
18:eb:f2:6f:91:14:a1:6c:1b:5d:a1:62:3d:1a:ec:69:b9:dc:
7d:79:37:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 13:19:44 2025 by rpki-client