Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/359d71-1e9e-439f-93f1-1f5428684fc7/1/tgcVWH7cyzJajXwPWkLY8EOHHbc.mft
File: tgcVWH7cyzJajXwPWkLY8EOHHbc.mft (raw, json)
Hash identifier: MXW5+Dv+TcQG7hgJzsXKpdPvVdR3E03ED1P2Cw/otRw=
Subject key identifier: 2E:61:4B:58:D6:C5:9C:88:79:D9:D9:7C:27:EB:C6:0A:02:C1:F8:60
Authority key identifier: B6:07:15:58:7E:DC:CB:32:5A:8D:7C:0F:5A:42:D8:F0:43:87:1D:B7
Certificate issuer: /CN=b60715587edccb325a8d7c0f5a42d8f043871db7
Certificate serial: 01984B53DA922F68765658BCBDEEE4AD16D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tgcVWH7cyzJajXwPWkLY8EOHHbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/359d71-1e9e-439f-93f1-1f5428684fc7/1/tgcVWH7cyzJajXwPWkLY8EOHHbc.mft
Manifest number: 0127
Signing time: Sun 27 Jul 2025 10:00:43 +0000
Manifest this update: Sun 27 Jul 2025 10:00:43 +0000
Manifest next update: Mon 28 Jul 2025 10:00:43 +0000
Files and hashes: 1: tgcVWH7cyzJajXwPWkLY8EOHHbc.crl (hash: PBMOu+ClPKlPwMYh/05NCTDUKFHauikP+jFnn4jx408=)
2: zAVl6KN24j-HKETuiZlV3hao63U.roa (hash: djF473q/t5BuBhPbvFB06yhsIPQKmfmJ61GIeE/TTOg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/359d71-1e9e-439f-93f1-1f5428684fc7/1/tgcVWH7cyzJajXwPWkLY8EOHHbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/359d71-1e9e-439f-93f1-1f5428684fc7/1/tgcVWH7cyzJajXwPWkLY8EOHHbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/tgcVWH7cyzJajXwPWkLY8EOHHbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 09:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:53:da:92:2f:68:76:56:58:bc:bd:ee:e4:ad:16:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b60715587edccb325a8d7c0f5a42d8f043871db7
Validity
Not Before: Jul 27 10:00:43 2025 GMT
Not After : Jul 28 10:00:43 2025 GMT
Subject: CN=2e614b58d6c59c8879d9d97c27ebc60a02c1f860
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ba:f2:0f:7a:5b:e6:80:c3:ea:d2:3f:6a:cd:
96:a0:e2:76:a7:b9:7d:4c:47:c9:85:e8:29:cb:e4:
2c:b4:5b:81:76:2b:d5:64:2b:38:5f:9e:68:af:ea:
de:07:f8:79:43:ff:8c:da:57:5c:ac:97:27:c3:48:
50:55:81:f5:5e:47:7a:37:3f:1b:11:a2:fd:72:5b:
85:6f:ee:fe:bb:1d:74:f5:21:c7:d0:3d:40:d3:40:
e4:9f:57:8e:52:09:e2:0d:74:69:dd:98:ac:a3:81:
07:46:bf:0c:7b:eb:4b:5e:7d:c0:e9:0e:76:b7:8d:
30:d4:8b:12:12:49:e7:02:cc:a1:db:36:af:ec:3f:
16:c1:31:d3:cb:9b:fb:a6:ee:dc:39:61:bb:bc:c8:
43:f3:ca:6b:6c:1d:2e:33:f8:6d:b1:7d:aa:34:7c:
b0:63:8f:dc:21:0a:da:19:30:62:59:e7:23:41:d1:
a9:a8:0d:81:a7:c1:17:c3:5b:19:f5:42:a4:86:1a:
f6:2b:cb:fe:e7:c7:eb:40:d6:c5:ef:d1:5b:74:72:
9d:01:6c:98:18:a5:38:21:7d:0b:5f:94:96:51:31:
e4:1e:73:86:a9:71:61:66:91:b1:f2:1b:95:af:8e:
ce:42:19:14:a8:8a:aa:2f:a2:7f:d9:4c:51:00:53:
f7:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:61:4B:58:D6:C5:9C:88:79:D9:D9:7C:27:EB:C6:0A:02:C1:F8:60
X509v3 Authority Key Identifier:
keyid:B6:07:15:58:7E:DC:CB:32:5A:8D:7C:0F:5A:42:D8:F0:43:87:1D:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tgcVWH7cyzJajXwPWkLY8EOHHbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/359d71-1e9e-439f-93f1-1f5428684fc7/1/tgcVWH7cyzJajXwPWkLY8EOHHbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/359d71-1e9e-439f-93f1-1f5428684fc7/1/tgcVWH7cyzJajXwPWkLY8EOHHbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:8a:3e:c3:29:a4:90:18:52:6a:75:a6:a4:68:50:bd:c5:4a:
97:07:d2:8b:8f:3a:5f:c1:48:d3:11:60:26:81:5f:78:be:50:
5b:93:36:0b:41:cb:89:a2:15:89:b8:3f:d1:9b:e5:a8:88:05:
66:17:8f:5a:4e:36:bf:24:05:9b:5c:24:ab:90:bf:66:55:3f:
08:72:34:0a:54:b5:a1:29:33:e9:4b:12:39:22:a4:48:75:86:
4d:78:98:bf:b0:15:d1:37:52:05:76:0f:22:bb:66:70:0e:0d:
d1:2e:c6:bc:32:bd:2d:3f:e4:72:2b:81:44:9c:a3:ed:a8:d4:
5f:8b:0b:1a:44:c5:d7:79:3d:99:ee:51:6b:75:e3:bf:06:b5:
6b:f0:0f:75:e6:39:3d:32:97:e5:91:85:d6:3f:e7:39:d1:9f:
70:75:62:a4:f9:35:f1:50:f8:4d:74:95:01:23:08:fb:9c:e5:
26:31:4e:ea:11:44:3c:0e:11:9d:4b:c1:ad:76:4f:55:48:9f:
3c:8d:b3:84:5e:82:8a:1b:b0:80:d1:de:59:dd:38:cd:55:c5:
8a:ef:c6:25:4e:f8:1e:ed:3d:b2:00:87:91:ff:92:a3:99:ec:
0a:30:52:9e:94:7c:9a:a5:8a:f0:80:c9:b9:12:3b:53:05:3c:
8f:66:77:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 16:38:12 2025 by rpki-client