Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/f63d76-2fb6-43a2-bfec-9f7aa094303b/1/tPSWmNCOjCg8DfKoLxaZfmJZurY.mft
File: tPSWmNCOjCg8DfKoLxaZfmJZurY.mft (raw, json)
Hash identifier: OXvEdnNKw3IVCujpyyyfgUc0I44MwYSQvH3cRxcdC50=
Subject key identifier: 01:EF:AA:26:58:B6:EC:A0:A5:BD:DC:85:C7:35:02:70:13:94:F3:D1
Authority key identifier: B4:F4:96:98:D0:8E:8C:28:3C:0D:F2:A8:2F:16:99:7E:62:59:BA:B6
Certificate issuer: /CN=b4f49698d08e8c283c0df2a82f16997e6259bab6
Certificate serial: 01984852B23EA7D37E854BEA569CEE19E070
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPSWmNCOjCg8DfKoLxaZfmJZurY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/f63d76-2fb6-43a2-bfec-9f7aa094303b/1/tPSWmNCOjCg8DfKoLxaZfmJZurY.mft
Manifest number: 07CD
Signing time: Sat 26 Jul 2025 20:00:35 +0000
Manifest this update: Sat 26 Jul 2025 20:00:35 +0000
Manifest next update: Sun 27 Jul 2025 20:00:35 +0000
Files and hashes: 1: tPSWmNCOjCg8DfKoLxaZfmJZurY.crl (hash: AsmoS8Xu3tKe9TQ+1tIBUp7BLC1OM8/IUFGEItVjQyw=)
2: xzawIGSZ9gaUq6klJYybOrl_u8k.roa (hash: 1673awjNQrA/kSjVn3AcQmjZN9mvF8MpaJPKmYa0E/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/f63d76-2fb6-43a2-bfec-9f7aa094303b/1/tPSWmNCOjCg8DfKoLxaZfmJZurY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/f63d76-2fb6-43a2-bfec-9f7aa094303b/1/tPSWmNCOjCg8DfKoLxaZfmJZurY.mft
rsync://rpki.ripe.net/repository/DEFAULT/tPSWmNCOjCg8DfKoLxaZfmJZurY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:52:b2:3e:a7:d3:7e:85:4b:ea:56:9c:ee:19:e0:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f49698d08e8c283c0df2a82f16997e6259bab6
Validity
Not Before: Jul 26 20:00:35 2025 GMT
Not After : Jul 27 20:00:35 2025 GMT
Subject: CN=01efaa2658b6eca0a5bddc85c73502701394f3d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:2d:36:a4:db:e3:9b:d3:6f:b8:26:fd:24:60:
e3:42:f3:14:9f:1f:0c:2f:3b:44:06:be:9d:05:46:
a7:39:ec:eb:c7:f9:79:5f:56:bd:79:c8:1f:b2:b8:
e3:5d:dc:a4:50:b5:3c:51:4f:f8:2e:3f:bf:5f:52:
88:88:e4:bd:d3:71:51:7b:9e:5d:e2:08:e5:ac:58:
48:94:14:81:55:e1:6b:f4:ba:f1:e8:06:37:3e:7e:
14:7c:03:2d:12:3e:b5:3a:4f:84:3f:dd:4d:74:44:
96:de:88:bb:36:68:e0:52:47:9a:27:25:c5:8f:83:
36:0d:3d:0b:dd:63:04:93:7b:46:48:ff:a8:95:ae:
c0:6d:0c:c9:9c:cf:9d:98:86:05:6d:26:b9:42:01:
37:43:5f:36:cb:19:6d:a7:8c:7c:91:08:6f:f7:00:
00:a0:9b:a6:0a:36:ff:53:5c:75:1c:ec:7b:06:f5:
20:fb:5c:bc:94:e1:cc:36:09:ad:89:ad:4c:54:ab:
8c:6c:42:72:35:bf:e4:cd:e6:25:50:37:6e:c9:ce:
a4:01:11:0a:2d:a7:d8:28:1b:00:4b:59:64:86:d7:
94:0e:ea:4e:6e:64:1d:71:30:1a:79:e1:d7:3e:d7:
a9:7b:14:8c:02:7a:d4:72:97:f3:51:78:a2:4c:d3:
8f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:EF:AA:26:58:B6:EC:A0:A5:BD:DC:85:C7:35:02:70:13:94:F3:D1
X509v3 Authority Key Identifier:
keyid:B4:F4:96:98:D0:8E:8C:28:3C:0D:F2:A8:2F:16:99:7E:62:59:BA:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPSWmNCOjCg8DfKoLxaZfmJZurY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f63d76-2fb6-43a2-bfec-9f7aa094303b/1/tPSWmNCOjCg8DfKoLxaZfmJZurY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f63d76-2fb6-43a2-bfec-9f7aa094303b/1/tPSWmNCOjCg8DfKoLxaZfmJZurY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:bf:e6:a5:56:9c:a5:1f:66:f5:61:fe:15:42:03:42:19:6f:
07:84:b2:83:24:88:89:70:23:45:57:7e:5d:39:be:f4:1f:cb:
0a:1a:6c:d6:b2:f4:8e:f9:69:e7:73:dc:ec:be:54:b8:34:e6:
40:d0:c5:0c:4c:e8:f9:72:55:7c:c5:d5:85:53:76:90:5f:dc:
41:f3:78:b4:47:f4:27:3e:c9:94:a7:7e:11:23:8b:e8:8a:1a:
75:4b:db:24:91:86:ac:ea:1e:16:62:12:72:83:75:74:ed:23:
e3:7c:47:25:91:c5:15:11:38:d6:07:2d:9e:04:06:f9:91:87:
1d:90:a3:14:f7:46:88:56:b1:8c:d4:51:c6:fc:0d:3f:46:65:
74:77:70:de:bc:c1:ab:b4:98:34:de:75:2e:c9:e6:74:4d:c3:
b6:10:35:04:18:e4:a5:db:52:13:49:b8:41:7a:46:97:04:aa:
68:e4:88:79:03:00:f9:fc:70:d2:c7:69:c1:01:4d:86:03:c8:
5e:19:c9:63:0c:18:ef:48:38:45:c2:e2:10:9b:e7:5a:0a:5e:
ce:3c:45:cb:6a:40:54:84:f6:00:77:ec:7b:6d:e1:40:73:e0:
4e:b5:21:ae:e8:21:d6:ed:8b:e5:81:00:52:9a:fc:0d:08:fb:
40:f4:0d:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:39:30 2025 by rpki-client