Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/65bcff-ba01-498c-b54d-84026bc852f0/1/tU3fbwMzHNdzx-ersVQpuo0gvXg.mft
File: tU3fbwMzHNdzx-ersVQpuo0gvXg.mft (raw, json)
Hash identifier: phBvkrv1P/SKZbXvx43Q/KnEFEPZ/4i4MCiZFosd+Jc=
Subject key identifier: 41:5A:46:E0:EF:92:4F:A2:15:AE:C7:AF:CC:89:C3:66:99:5D:52:CD
Authority key identifier: B5:4D:DF:6F:03:33:1C:D7:73:C7:E7:AB:B1:54:29:BA:8D:20:BD:78
Certificate issuer: /CN=b54ddf6f03331cd773c7e7abb15429ba8d20bd78
Certificate serial: 0198496669EBF72CC868915A83FBBA46798C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tU3fbwMzHNdzx-ersVQpuo0gvXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/65bcff-ba01-498c-b54d-84026bc852f0/1/tU3fbwMzHNdzx-ersVQpuo0gvXg.mft
Manifest number: 0744
Signing time: Sun 27 Jul 2025 01:01:45 +0000
Manifest this update: Sun 27 Jul 2025 01:01:45 +0000
Manifest next update: Mon 28 Jul 2025 01:01:45 +0000
Files and hashes: 1: 1SqAG3Japdqs2uBvGFHguJLvhqE.roa (hash: tRLIPOPh9GLi7wL54w2K0S63l5p5YYde2YPqeJx3wD8=)
2: tU3fbwMzHNdzx-ersVQpuo0gvXg.crl (hash: aTfOpbV8Cdgjz1YSRyBdJ732XVinfr7q3tEx57Y4d5A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/65bcff-ba01-498c-b54d-84026bc852f0/1/tU3fbwMzHNdzx-ersVQpuo0gvXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/65bcff-ba01-498c-b54d-84026bc852f0/1/tU3fbwMzHNdzx-ersVQpuo0gvXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/tU3fbwMzHNdzx-ersVQpuo0gvXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:69:eb:f7:2c:c8:68:91:5a:83:fb:ba:46:79:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b54ddf6f03331cd773c7e7abb15429ba8d20bd78
Validity
Not Before: Jul 27 01:01:45 2025 GMT
Not After : Jul 28 01:01:45 2025 GMT
Subject: CN=415a46e0ef924fa215aec7afcc89c366995d52cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f0:c5:c2:c7:4b:41:32:d4:9c:fd:fb:1e:43:
58:ce:85:f7:e9:ee:1c:24:69:00:ae:aa:ef:04:bd:
3b:c9:de:05:c0:3f:8f:92:9c:ea:7e:01:6f:22:32:
19:78:3c:66:b1:56:c4:98:5d:22:1e:bb:e4:fd:2e:
76:c9:de:5f:9f:80:b8:f8:23:9b:8b:93:f1:43:8e:
e4:ff:c5:e7:f6:e9:a3:ae:3b:82:72:51:c9:e6:6f:
a1:32:b2:e1:73:11:b1:06:e9:6f:c0:4f:a6:9e:65:
b0:76:aa:52:6b:34:e0:0e:25:54:9b:66:24:8a:28:
3b:ab:a4:ed:54:ef:aa:2f:e3:75:35:b2:f3:ca:61:
6f:4c:65:0d:7f:0d:b7:13:8c:c5:e2:20:3b:82:c4:
15:b1:8c:f1:7f:0c:54:76:54:f1:c4:3f:60:ad:95:
af:69:e5:a1:f9:d9:d5:b6:b7:4d:94:76:61:f8:1c:
7c:d4:41:05:4b:d1:d4:de:5a:35:be:11:b7:41:04:
c8:a8:6e:48:8f:2e:f0:77:0b:01:c2:4a:ac:b2:41:
f8:d8:b7:b9:02:77:7f:c9:60:8a:02:05:90:84:5a:
0a:a2:5f:ff:8b:b4:ff:da:c0:10:7a:a7:51:09:1d:
8e:cf:6e:6f:9b:5f:69:cc:a9:d0:d0:6d:00:7d:f0:
35:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:5A:46:E0:EF:92:4F:A2:15:AE:C7:AF:CC:89:C3:66:99:5D:52:CD
X509v3 Authority Key Identifier:
keyid:B5:4D:DF:6F:03:33:1C:D7:73:C7:E7:AB:B1:54:29:BA:8D:20:BD:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tU3fbwMzHNdzx-ersVQpuo0gvXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/65bcff-ba01-498c-b54d-84026bc852f0/1/tU3fbwMzHNdzx-ersVQpuo0gvXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/65bcff-ba01-498c-b54d-84026bc852f0/1/tU3fbwMzHNdzx-ersVQpuo0gvXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:73:13:22:25:04:ae:25:15:f7:45:03:2c:89:b8:95:d0:c6:
3a:cb:cf:28:35:14:1c:6d:76:f8:4f:8b:5a:92:f9:60:1b:11:
de:cc:18:ad:f5:90:38:1a:2e:09:13:df:ef:7e:59:ab:b1:d5:
48:92:93:fd:e0:29:aa:cc:09:fe:65:15:f2:2c:5b:77:8f:1e:
ac:be:7e:fd:c1:da:c3:2a:67:eb:42:da:3d:30:f3:a9:32:5a:
68:f4:f1:5b:f7:00:4d:b9:51:37:f1:9a:eb:9b:e0:4f:0e:2b:
98:98:11:a7:43:99:6b:18:3b:26:79:c5:54:16:64:00:28:ff:
57:1a:66:a0:a7:f3:ee:12:4d:36:7d:56:b3:10:48:bf:ea:b5:
ed:b1:01:bd:b0:a1:11:ca:00:fd:1f:8f:d5:e4:53:98:55:00:
d9:4c:4d:cc:80:03:40:3b:91:43:eb:f7:23:c5:35:96:ce:13:
3a:fe:5c:62:93:6f:e6:78:e9:c4:79:9f:54:22:91:05:0a:35:
b1:b5:37:35:ca:74:2b:89:1e:3d:f0:bb:bf:39:91:1b:f1:bf:
42:2d:84:b9:a6:d4:30:90:aa:af:8e:36:e1:e9:21:b2:cd:33:
e6:87:d5:c5:af:20:dc:ea:b4:d7:52:03:33:ad:a0:3f:77:b8:
ac:2e:1b:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:32:30 2025 by rpki-client