Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/b3010e-5654-4486-993b-d1cd09568e82/1/tSbfp_niiE-yHRBz5IwL1Yhq3uI.mft
File: tSbfp_niiE-yHRBz5IwL1Yhq3uI.mft (raw, json)
Hash identifier: A//c5G4XNeN0V/3YrJbL5+n7bdpr0Eprrc/6i1niIoo=
Subject key identifier: F3:AD:42:D8:61:48:09:5E:B2:0C:A9:83:8D:63:00:5F:28:06:19:AE
Authority key identifier: B5:26:DF:A7:F9:E2:88:4F:B2:1D:10:73:E4:8C:0B:D5:88:6A:DE:E2
Certificate issuer: /CN=b526dfa7f9e2884fb21d1073e48c0bd5886adee2
Certificate serial: 019849658A47DC78258B4FD292A295739627
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tSbfp_niiE-yHRBz5IwL1Yhq3uI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/b3010e-5654-4486-993b-d1cd09568e82/1/tSbfp_niiE-yHRBz5IwL1Yhq3uI.mft
Manifest number: 0139
Signing time: Sun 27 Jul 2025 01:00:47 +0000
Manifest this update: Sun 27 Jul 2025 01:00:47 +0000
Manifest next update: Mon 28 Jul 2025 01:00:47 +0000
Files and hashes: 1: WGUviqGya1U293o1pPaqk6_9nss.roa (hash: UGYTWdobyAgqAcAwAxalKwZisa0V5NIsFjAj8H8KXVc=)
2: tSbfp_niiE-yHRBz5IwL1Yhq3uI.crl (hash: uK9fvSpl459UP8gEAJ5qb+cBy/iX4tT8KtHbN39xK5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/b3010e-5654-4486-993b-d1cd09568e82/1/tSbfp_niiE-yHRBz5IwL1Yhq3uI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/b3010e-5654-4486-993b-d1cd09568e82/1/tSbfp_niiE-yHRBz5IwL1Yhq3uI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tSbfp_niiE-yHRBz5IwL1Yhq3uI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:8a:47:dc:78:25:8b:4f:d2:92:a2:95:73:96:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b526dfa7f9e2884fb21d1073e48c0bd5886adee2
Validity
Not Before: Jul 27 01:00:47 2025 GMT
Not After : Jul 28 01:00:47 2025 GMT
Subject: CN=f3ad42d86148095eb20ca9838d63005f280619ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:3f:cd:17:49:45:50:a7:da:c6:f3:44:80:a6:
b9:93:e3:52:61:49:e1:84:c8:31:62:01:42:81:68:
a8:b8:c5:90:9c:08:a3:a1:59:41:08:89:6b:57:9e:
e9:db:53:bc:be:4b:71:5a:26:43:f4:0f:05:cc:55:
6c:8d:bc:47:f5:25:6f:cb:02:e5:6e:98:bb:31:3a:
9a:81:8f:84:4b:c8:30:95:23:95:32:01:96:2b:8c:
cf:5d:54:52:0b:27:33:e0:2f:af:92:72:86:4e:f0:
8f:5f:46:0c:73:a7:8f:18:48:4f:e9:79:6b:63:6a:
d8:d7:d2:6d:67:8a:ee:59:40:28:a7:00:18:d0:5c:
74:5e:ce:09:15:23:5f:e3:77:ff:c4:b5:9d:2c:af:
d4:8f:1a:4d:43:b3:5b:51:57:de:43:a5:5d:98:ed:
8a:3e:03:35:57:c5:20:10:47:87:bf:82:ca:5e:2b:
82:85:c9:6c:d7:06:33:15:3e:9f:d4:4e:0c:c0:56:
db:5f:b0:94:a9:d0:fb:33:bf:64:18:1e:8d:a5:1b:
12:74:35:44:da:a9:42:94:94:61:dd:45:4a:87:cd:
86:92:cd:e8:04:90:85:b4:1b:92:0b:b5:02:dc:2d:
28:95:6c:b3:27:61:a1:e1:e0:a5:b9:b6:56:9f:fd:
92:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:AD:42:D8:61:48:09:5E:B2:0C:A9:83:8D:63:00:5F:28:06:19:AE
X509v3 Authority Key Identifier:
keyid:B5:26:DF:A7:F9:E2:88:4F:B2:1D:10:73:E4:8C:0B:D5:88:6A:DE:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tSbfp_niiE-yHRBz5IwL1Yhq3uI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b3010e-5654-4486-993b-d1cd09568e82/1/tSbfp_niiE-yHRBz5IwL1Yhq3uI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b3010e-5654-4486-993b-d1cd09568e82/1/tSbfp_niiE-yHRBz5IwL1Yhq3uI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:b3:25:04:84:11:0c:d7:c5:58:33:7a:65:6c:4a:8f:3d:cf:
1a:83:74:d0:ed:6c:e5:e7:33:4b:97:c5:34:23:28:45:85:1f:
c8:cb:90:6a:56:49:5a:50:b6:85:2e:c5:d3:88:a7:6b:c1:fc:
7f:20:d0:ac:f9:5e:23:f8:9d:1a:31:85:31:be:97:90:c5:0b:
37:d8:46:e1:53:d0:5b:26:ac:86:92:a0:2c:3f:7e:ea:f4:d4:
56:ce:17:30:16:38:5c:78:05:fd:2e:34:dc:2b:32:4c:b5:a0:
22:37:e3:0f:c1:81:3e:7c:a7:bd:78:d7:04:46:b0:30:54:0e:
b7:bd:ee:dc:ca:dc:df:6b:1a:8c:d7:a7:d7:02:e2:3e:78:a3:
de:5c:ea:08:92:ce:26:02:a9:16:2c:dd:44:51:f6:7f:85:24:
5b:0b:a4:c6:79:12:f9:ae:e5:1f:de:aa:a9:51:be:9b:57:f4:
b1:a3:24:5c:5c:0f:59:c5:01:3d:65:b9:78:06:00:d8:1c:71:
47:70:54:77:e5:67:b9:7d:b5:f0:02:a6:18:1e:9c:f8:4e:d3:
9b:8f:bb:cf:b4:4c:d4:6c:91:8e:1e:cc:8e:ba:d4:69:bb:f9:
80:a5:33:fc:a0:9b:e6:7e:4e:2c:16:7e:3c:ed:f0:e2:aa:b9:
7b:09:29:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:36:52 2025 by rpki-client