Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/ac82ec-0e31-461e-a205-1f6010a30ebb/1/tQ32Wi_LmxF6hTprVoVLBxjsM0M.mft
File: tQ32Wi_LmxF6hTprVoVLBxjsM0M.mft (raw, json)
Hash identifier: 3UQlU2mH5V1mEtH41QuydzkRyvbrrqHJ9SgND1NK6zU=
Subject key identifier: 54:63:F4:C6:3C:87:D1:67:A0:32:30:11:61:43:4D:ED:A6:33:03:48
Authority key identifier: B5:0D:F6:5A:2F:CB:9B:11:7A:85:3A:6B:56:85:4B:07:18:EC:33:43
Certificate issuer: /CN=b50df65a2fcb9b117a853a6b56854b0718ec3343
Certificate serial: 01984B53D3646EEEC642D23E604B8A839912
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tQ32Wi_LmxF6hTprVoVLBxjsM0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/ac82ec-0e31-461e-a205-1f6010a30ebb/1/tQ32Wi_LmxF6hTprVoVLBxjsM0M.mft
Manifest number: 08F5
Signing time: Sun 27 Jul 2025 10:00:41 +0000
Manifest this update: Sun 27 Jul 2025 10:00:41 +0000
Manifest next update: Mon 28 Jul 2025 10:00:41 +0000
Files and hashes: 1: tQ32Wi_LmxF6hTprVoVLBxjsM0M.crl (hash: 0BjqzmhvAl3Ly7LuOT/M3/UyKXgo7vkiereH14xn6iU=)
2: zBqyJEl1ZTI7fL6gM2motFXrSRM.roa (hash: OkJW2+OnAMScP2GdhvLfFrfdk7h2e43pg36iU6eHej4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/ac82ec-0e31-461e-a205-1f6010a30ebb/1/tQ32Wi_LmxF6hTprVoVLBxjsM0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/ac82ec-0e31-461e-a205-1f6010a30ebb/1/tQ32Wi_LmxF6hTprVoVLBxjsM0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/tQ32Wi_LmxF6hTprVoVLBxjsM0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:53:d3:64:6e:ee:c6:42:d2:3e:60:4b:8a:83:99:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b50df65a2fcb9b117a853a6b56854b0718ec3343
Validity
Not Before: Jul 27 10:00:41 2025 GMT
Not After : Jul 28 10:00:41 2025 GMT
Subject: CN=5463f4c63c87d167a032301161434deda6330348
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f0:05:b6:84:58:6a:4d:d1:d6:0e:3c:91:ae:
27:17:e7:c5:bc:39:1b:a6:0e:80:93:42:c5:25:61:
bf:ff:8f:e1:1b:b6:78:98:c7:5b:95:a2:dd:11:c6:
21:57:72:2a:d7:8b:72:9f:6e:a6:df:2d:9f:f4:03:
ab:4b:6f:93:75:42:06:d3:63:f5:3a:d1:01:6a:f2:
ac:f6:82:ce:46:b8:c3:eb:3e:0e:72:68:c9:2e:cc:
5d:5b:42:6d:39:64:4f:5a:97:12:de:8e:e8:eb:e5:
a3:b7:43:94:7c:3f:fb:15:2d:64:08:ee:29:e2:a5:
21:f6:6a:fa:5e:5f:49:66:98:6d:d2:dc:ed:56:92:
91:f3:73:6e:c5:16:14:ff:11:fe:e6:a1:17:ca:2a:
c0:c4:6a:fa:d6:30:ac:70:3c:08:03:e7:d9:fe:5c:
d0:50:cc:f2:a7:3e:7f:3b:44:4e:f6:36:25:c1:8e:
92:25:bb:da:36:5a:47:a3:fe:62:38:64:4a:d3:48:
1d:32:ca:5e:4e:d1:98:aa:3a:7c:13:52:41:d2:49:
26:ab:d8:41:79:5b:1d:8d:82:28:76:e6:86:76:ce:
b2:cf:26:16:86:13:95:b2:66:3c:3d:4e:cb:9f:5f:
08:3c:a1:de:91:65:b5:1a:1b:b5:e9:cc:5c:4c:a7:
34:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:63:F4:C6:3C:87:D1:67:A0:32:30:11:61:43:4D:ED:A6:33:03:48
X509v3 Authority Key Identifier:
keyid:B5:0D:F6:5A:2F:CB:9B:11:7A:85:3A:6B:56:85:4B:07:18:EC:33:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tQ32Wi_LmxF6hTprVoVLBxjsM0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/ac82ec-0e31-461e-a205-1f6010a30ebb/1/tQ32Wi_LmxF6hTprVoVLBxjsM0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/ac82ec-0e31-461e-a205-1f6010a30ebb/1/tQ32Wi_LmxF6hTprVoVLBxjsM0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:98:af:4b:40:87:26:9f:1e:58:1d:14:c6:7c:8a:be:17:12:
cb:f2:e1:d7:cb:3d:59:db:88:25:61:e1:7d:00:a7:05:4f:11:
ab:07:2a:78:75:fd:7c:87:06:9b:90:cc:a3:c1:5d:9a:6a:d2:
38:7d:c4:4e:e3:d7:6d:99:b9:c8:9b:c2:75:70:b5:e1:75:2f:
b1:ef:d8:99:6b:21:5a:ae:09:65:53:33:c0:0b:cf:96:6d:5d:
92:c3:67:4b:c1:c1:40:6b:6e:30:a8:30:49:a5:c3:12:e4:ab:
d9:7f:fa:a5:2e:6a:e1:fc:66:58:35:5d:da:e9:21:54:3b:1d:
2b:2c:61:e3:d9:f0:cf:e5:27:4d:64:1a:f0:3b:24:ac:47:44:
87:20:e5:18:ba:47:86:24:0c:96:4b:b9:04:f7:6a:c2:97:54:
59:44:9f:de:90:17:e7:92:ae:e1:52:ed:79:df:cf:07:76:59:
d8:54:7f:59:fd:4b:d9:01:09:1c:84:22:2f:f0:e5:99:fc:28:
73:68:6d:74:ad:c5:5e:c2:de:9f:d2:07:9b:71:57:e8:16:84:
cf:72:e3:fc:ce:ce:1d:b0:18:f2:64:67:02:76:55:07:70:1c:
73:f1:04:2b:46:37:81:aa:77:3b:f8:42:f2:07:1f:77:df:af:
1c:22:ef:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 13:07:57 2025 by rpki-client