Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/2f672b-236c-40fb-aaf6-08d0f4bd2c28/1/tXPS3ak-QgQJFj2lnnQU7pGi7vI.mft
File: tXPS3ak-QgQJFj2lnnQU7pGi7vI.mft (raw, json)
Hash identifier: 0NTPoe/UWQOxbCrtodgIM79ynNWHNYSwiw4tAWYxC60=
Subject key identifier: A1:60:C5:7A:9E:95:F3:B0:BC:22:6E:2C:67:1A:F7:BC:FE:7C:34:71
Authority key identifier: B5:73:D2:DD:A9:3E:42:04:09:16:3D:A5:9E:74:14:EE:91:A2:EE:F2
Certificate issuer: /CN=b573d2dda93e420409163da59e7414ee91a2eef2
Certificate serial: 01984AAF371ADAB53D16C8737FF9E5445C06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tXPS3ak-QgQJFj2lnnQU7pGi7vI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/2f672b-236c-40fb-aaf6-08d0f4bd2c28/1/tXPS3ak-QgQJFj2lnnQU7pGi7vI.mft
Manifest number: 9F
Signing time: Sun 27 Jul 2025 07:00:53 +0000
Manifest this update: Sun 27 Jul 2025 07:00:53 +0000
Manifest next update: Mon 28 Jul 2025 07:00:53 +0000
Files and hashes: 1: r2p_nfti9wP7acQGEaKHM_xZ5Y4.roa (hash: 8x452bR9h9FZkxCtz0Hac6JBkLr+TCy/u9myFaRh5zg=)
2: tXPS3ak-QgQJFj2lnnQU7pGi7vI.crl (hash: VTUwp4/axSkGXtee+jxDj6dsjV+tGHqwH0t26R+63Qo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/2f672b-236c-40fb-aaf6-08d0f4bd2c28/1/tXPS3ak-QgQJFj2lnnQU7pGi7vI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/2f672b-236c-40fb-aaf6-08d0f4bd2c28/1/tXPS3ak-QgQJFj2lnnQU7pGi7vI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tXPS3ak-QgQJFj2lnnQU7pGi7vI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:af:37:1a:da:b5:3d:16:c8:73:7f:f9:e5:44:5c:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b573d2dda93e420409163da59e7414ee91a2eef2
Validity
Not Before: Jul 27 07:00:53 2025 GMT
Not After : Jul 28 07:00:53 2025 GMT
Subject: CN=a160c57a9e95f3b0bc226e2c671af7bcfe7c3471
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5a:3e:06:2d:98:c0:c7:c6:cb:9d:b7:33:cc:
14:27:4a:ff:33:26:a9:80:d7:6b:06:f1:3b:c8:cc:
b9:b2:ff:55:c5:6d:ba:f7:54:ae:33:52:b4:bb:f3:
c5:5d:af:bb:c6:39:eb:ef:3e:f0:f4:28:9d:83:07:
da:f1:f1:66:aa:07:df:89:c2:1a:68:52:b4:e2:e6:
9c:49:a4:67:05:70:ae:13:d9:6b:2b:f6:4c:d9:7b:
1d:7a:ad:ea:67:32:05:40:dc:0f:00:6b:48:22:cd:
b0:8e:87:04:02:38:b8:51:75:1a:4a:cf:cc:cf:f7:
3a:3b:39:76:88:5f:46:92:80:85:4d:47:83:ac:df:
a5:32:f8:93:4d:35:d4:f5:cd:28:19:fe:de:3b:c0:
12:66:e5:27:4a:1b:1b:37:8b:60:fa:38:04:a1:79:
17:78:fc:a4:9c:c9:fc:99:87:d8:e8:13:ba:67:83:
0c:ce:51:8e:70:86:39:cc:9a:46:de:55:37:6b:27:
60:95:60:97:1f:9e:f3:0d:4e:29:77:67:7f:17:28:
2e:c7:d0:b5:fb:a3:dd:14:54:6e:69:fa:38:f7:4f:
cc:59:20:14:49:36:a5:47:c9:e4:87:3f:4d:00:c7:
2a:db:a8:fa:2f:a9:18:58:8f:bc:6e:91:81:ac:87:
d1:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:60:C5:7A:9E:95:F3:B0:BC:22:6E:2C:67:1A:F7:BC:FE:7C:34:71
X509v3 Authority Key Identifier:
keyid:B5:73:D2:DD:A9:3E:42:04:09:16:3D:A5:9E:74:14:EE:91:A2:EE:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tXPS3ak-QgQJFj2lnnQU7pGi7vI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/2f672b-236c-40fb-aaf6-08d0f4bd2c28/1/tXPS3ak-QgQJFj2lnnQU7pGi7vI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/2f672b-236c-40fb-aaf6-08d0f4bd2c28/1/tXPS3ak-QgQJFj2lnnQU7pGi7vI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:be:4d:50:ae:4e:1e:b0:fa:5b:11:30:16:78:74:e9:ee:55:
77:44:20:d5:63:ae:22:5a:30:36:7c:f1:4c:42:c1:5c:48:7e:
a1:7a:77:5d:bd:db:a7:09:80:ff:da:0c:c3:89:6f:f6:5c:e6:
f5:88:ac:1f:c5:a1:70:14:87:72:6f:75:77:4a:97:75:e8:72:
7a:32:3c:ea:ac:6e:f9:67:fd:08:42:8a:3b:f1:3e:fb:a6:9e:
85:20:8d:76:c5:91:0e:62:25:6e:e2:02:35:6b:ac:8b:45:33:
5c:61:d6:65:6e:f0:3a:97:43:ee:d2:8b:05:39:7e:e4:6a:27:
77:0b:10:09:6d:de:0c:cf:8e:37:9d:72:db:d4:aa:32:55:cf:
bd:06:b1:5e:ed:83:c0:95:a1:f2:18:e4:20:bc:bd:74:ca:a1:
ac:25:0b:e7:8e:1d:0d:43:ec:d3:1d:9f:9d:20:19:6d:fb:c2:
59:93:64:cd:3d:21:4d:03:f6:51:4e:7b:d1:72:6c:23:f9:04:
bd:78:26:9c:16:73:bf:63:7a:f4:ed:71:01:a6:6d:06:3c:01:
36:fb:b0:08:c4:c0:2d:cb:7f:6a:d6:90:fd:62:eb:c0:4f:10:
65:87:6b:2d:7d:f5:b9:e6:7b:4f:ef:27:20:19:66:0a:92:d1:
6b:a6:04:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:54:54 2025 by rpki-client