Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/1c068e-889c-42be-bd8b-a6abb1215dec/1/tbYylyVHZz3w91qryDmiQihUoio.mft
File: tbYylyVHZz3w91qryDmiQihUoio.mft (raw, json)
Hash identifier: nHp9hxuupxQE9kNNfDbImEjmWaoGfzsBIsA0H0dgm8E=
Subject key identifier: 50:A9:2D:BE:06:EC:08:7F:3D:D6:48:02:FA:EF:39:5F:92:E3:F8:04
Authority key identifier: B5:B6:32:97:25:47:67:3D:F0:F7:5A:AB:C8:39:A2:42:28:54:A2:2A
Certificate issuer: /CN=b5b632972547673df0f75aabc839a2422854a22a
Certificate serial: 01983D6133B4C9A533667C42CD9F969D122D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tbYylyVHZz3w91qryDmiQihUoio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/1c068e-889c-42be-bd8b-a6abb1215dec/1/tbYylyVHZz3w91qryDmiQihUoio.mft
Manifest number: 15FB
Signing time: Thu 24 Jul 2025 17:00:37 +0000
Manifest this update: Thu 24 Jul 2025 17:00:37 +0000
Manifest next update: Fri 25 Jul 2025 17:00:37 +0000
Files and hashes: 1: cUeWbg23uzdb5xSz99WNI9WtnoI.roa (hash: s+577iLuT/1Ct4G1mVjBy6TiewUwm3DkGU10CzpZuFE=)
2: tbYylyVHZz3w91qryDmiQihUoio.crl (hash: WBPxn+ApUhlPsKfG8/IHLyvdCAJVZvkMOxn5s2Q87xk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/1c068e-889c-42be-bd8b-a6abb1215dec/1/tbYylyVHZz3w91qryDmiQihUoio.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/1c068e-889c-42be-bd8b-a6abb1215dec/1/tbYylyVHZz3w91qryDmiQihUoio.mft
rsync://rpki.ripe.net/repository/DEFAULT/tbYylyVHZz3w91qryDmiQihUoio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 17:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3d:61:33:b4:c9:a5:33:66:7c:42:cd:9f:96:9d:12:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5b632972547673df0f75aabc839a2422854a22a
Validity
Not Before: Jul 24 17:00:37 2025 GMT
Not After : Jul 25 17:00:37 2025 GMT
Subject: CN=50a92dbe06ec087f3dd64802faef395f92e3f804
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:8b:fc:35:1b:f5:19:4c:71:ba:ae:3a:67:81:
e8:87:f6:b9:b2:b8:ea:74:d4:d0:ac:e9:d1:78:02:
b1:4c:d4:a3:a1:b2:f5:82:05:e3:b0:25:61:6f:63:
bd:fd:75:2c:a3:fb:97:2f:bb:bd:d3:23:de:af:74:
50:84:6e:24:2c:f1:6f:cf:54:7a:8a:b7:95:c7:38:
7e:d7:72:27:1f:99:16:ab:c0:34:60:30:5f:ef:9d:
fb:63:a6:7f:92:b3:ff:07:24:20:16:1d:7d:42:48:
22:95:c3:18:0e:79:98:9b:c7:d9:34:8e:fb:63:d1:
24:25:be:57:ed:b0:99:83:11:b4:69:cd:54:88:38:
2e:b3:43:4f:1a:53:9c:f0:93:e0:db:c7:8d:d2:fe:
5a:25:8b:6a:cc:f4:78:df:d9:ab:ad:1d:5f:fa:26:
93:eb:3c:fe:c2:57:72:bc:48:20:9a:62:e5:40:80:
91:b9:32:2a:9b:05:fe:d3:32:d4:3f:0c:72:3b:8e:
da:f2:10:9e:4b:56:f3:84:67:27:63:46:71:8e:26:
32:42:34:36:10:e0:60:64:83:56:16:05:73:b1:f0:
d8:df:5f:8a:9f:8a:03:94:75:35:33:9c:df:15:b5:
4a:ff:b7:e8:a9:88:55:85:c3:ea:46:e4:46:6a:05:
b3:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:A9:2D:BE:06:EC:08:7F:3D:D6:48:02:FA:EF:39:5F:92:E3:F8:04
X509v3 Authority Key Identifier:
keyid:B5:B6:32:97:25:47:67:3D:F0:F7:5A:AB:C8:39:A2:42:28:54:A2:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tbYylyVHZz3w91qryDmiQihUoio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1c068e-889c-42be-bd8b-a6abb1215dec/1/tbYylyVHZz3w91qryDmiQihUoio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1c068e-889c-42be-bd8b-a6abb1215dec/1/tbYylyVHZz3w91qryDmiQihUoio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:f1:82:56:5b:32:c6:94:03:86:71:85:c1:76:b7:69:81:b3:
29:52:c6:9a:64:25:5e:bd:99:24:34:3c:9b:8e:3d:e9:8b:4b:
c7:f2:4e:d9:63:15:69:4a:99:db:4e:50:b2:83:ff:d6:80:51:
c8:50:ba:06:38:bd:5b:3b:69:24:98:08:c1:99:20:d5:b3:67:
97:71:04:a2:0e:7d:d1:65:34:ce:87:63:86:52:01:ec:83:37:
15:f6:c5:5b:51:48:03:7c:a6:3d:2f:b3:b0:c7:d6:30:ec:33:
5b:20:89:08:40:91:4e:1c:84:c8:5f:46:f6:a6:d0:07:cf:62:
04:8f:b2:2c:02:02:a9:12:50:b2:f0:93:3c:61:f5:fd:22:bb:
53:69:58:1d:fe:d7:b4:0d:e8:1a:41:7c:8f:23:0b:b5:7c:cd:
f1:93:83:1a:f2:eb:3b:42:8f:76:85:98:fc:07:66:fe:26:92:
47:e2:8d:64:b3:72:78:1a:bb:27:ec:70:46:d4:b6:36:b4:0b:
bb:85:0b:d8:d3:ca:f5:96:5b:c7:9e:27:7a:61:3d:c5:48:96:
dc:3e:00:4e:e4:c0:26:bc:99:dc:b5:c4:bf:77:65:97:6d:95:
0b:5b:ee:92:78:d6:fa:79:3f:ec:8a:b0:06:23:78:d0:4a:a3:
16:20:13:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 00:55:31 2025 by rpki-client