Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/654f36-ac5a-4292-8140-534d78898d6b/1/tV1OYxfGKhpp2sMfTxQ-O8KAumI.mft
File: tV1OYxfGKhpp2sMfTxQ-O8KAumI.mft (raw, json)
Hash identifier: 93Vk1uABhRlHiyPxIcdH+cXfj4uPEmyB9bMmokcPPSo=
Subject key identifier: FD:B9:E0:7A:FB:58:C2:EB:51:CC:D0:DF:7F:23:3B:F1:A9:47:4F:F6
Authority key identifier: B5:5D:4E:63:17:C6:2A:1A:69:DA:C3:1F:4F:14:3E:3B:C2:80:BA:62
Certificate issuer: /CN=b55d4e6317c62a1a69dac31f4f143e3bc280ba62
Certificate serial: 019846D2692BEE0538DEDEEF9E2DE13DA114
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tV1OYxfGKhpp2sMfTxQ-O8KAumI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/654f36-ac5a-4292-8140-534d78898d6b/1/tV1OYxfGKhpp2sMfTxQ-O8KAumI.mft
Manifest number: 1601
Signing time: Sat 26 Jul 2025 13:00:51 +0000
Manifest this update: Sat 26 Jul 2025 13:00:51 +0000
Manifest next update: Sun 27 Jul 2025 13:00:51 +0000
Files and hashes: 1: 5ZQra7L-IsZsuKLO0lJjxDnzRq4.roa (hash: JgYoL2/LGVSX4nbbkirOpXIvSueW2/0GrLGHhioQgeE=)
2: NNbGYKZN2MczsbLVZDvW2hdl718.roa (hash: 4E2t0fTnEc7nZVPHCni1To4F2fDuKI/+fcnfWn1WYJA=)
3: tV1OYxfGKhpp2sMfTxQ-O8KAumI.crl (hash: MxvFSekeUxgELm3mVobM74po46OcJLBU7GPL0Tb70os=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/654f36-ac5a-4292-8140-534d78898d6b/1/tV1OYxfGKhpp2sMfTxQ-O8KAumI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/654f36-ac5a-4292-8140-534d78898d6b/1/tV1OYxfGKhpp2sMfTxQ-O8KAumI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tV1OYxfGKhpp2sMfTxQ-O8KAumI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:d2:69:2b:ee:05:38:de:de:ef:9e:2d:e1:3d:a1:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b55d4e6317c62a1a69dac31f4f143e3bc280ba62
Validity
Not Before: Jul 26 13:00:51 2025 GMT
Not After : Jul 27 13:00:51 2025 GMT
Subject: CN=fdb9e07afb58c2eb51ccd0df7f233bf1a9474ff6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ac:41:cc:50:02:c6:d1:82:8c:59:fb:d2:03:
ac:6a:88:af:96:1f:bd:cd:3a:9a:86:03:c1:63:87:
01:16:48:4e:36:95:6c:a3:f1:cc:99:42:f7:4e:5a:
33:2f:e4:06:52:8a:2c:d0:b8:0f:96:00:ea:d6:ef:
32:03:30:5b:82:d6:8e:fe:fe:a4:58:9e:6b:28:ce:
3e:8b:81:ef:0a:38:7d:5d:8e:ad:d3:c2:9d:fa:2b:
6e:47:44:eb:a1:c0:ec:69:eb:d7:7e:70:cb:17:73:
52:85:ba:d9:ee:60:b6:1c:aa:dc:fc:65:41:5a:0b:
dd:fc:c2:88:dd:12:59:c3:0c:81:3f:ed:ac:33:67:
54:12:ae:66:c6:c4:8a:3f:20:12:14:4d:6e:5b:60:
43:18:dd:47:f7:5b:ae:69:94:0d:ca:50:e2:a6:f2:
b3:2f:6c:89:6a:79:2b:24:eb:78:36:fc:42:d4:e5:
9e:a0:e4:63:9c:cb:a1:62:19:11:b2:de:79:a4:ac:
35:32:2a:e1:73:e8:68:07:02:3b:7a:71:b8:58:51:
ae:b5:20:e4:5d:7b:57:99:14:9a:79:44:18:2c:eb:
5d:85:88:73:f7:70:c8:b0:31:3f:36:d7:e2:17:e8:
87:d6:9f:5d:aa:ef:1e:ed:27:2c:c3:18:ae:e0:b4:
83:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:B9:E0:7A:FB:58:C2:EB:51:CC:D0:DF:7F:23:3B:F1:A9:47:4F:F6
X509v3 Authority Key Identifier:
keyid:B5:5D:4E:63:17:C6:2A:1A:69:DA:C3:1F:4F:14:3E:3B:C2:80:BA:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tV1OYxfGKhpp2sMfTxQ-O8KAumI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/654f36-ac5a-4292-8140-534d78898d6b/1/tV1OYxfGKhpp2sMfTxQ-O8KAumI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/654f36-ac5a-4292-8140-534d78898d6b/1/tV1OYxfGKhpp2sMfTxQ-O8KAumI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:85:8b:be:25:31:d3:ca:d9:bf:2f:00:a3:9a:07:9e:83:01:
23:58:3d:5a:b3:73:4e:f5:80:67:ff:02:8e:2d:04:8f:95:3c:
33:48:d6:f1:94:af:22:ba:d9:cb:ca:e8:52:21:16:fa:c4:42:
4b:22:f8:6a:05:87:e1:98:57:64:91:ad:40:14:5a:02:b5:c6:
6a:ba:f2:37:f2:2a:90:de:74:4e:8f:4a:c6:5f:e9:51:6b:01:
e0:13:6e:da:d9:5a:cd:ad:ee:7c:14:0f:ed:a4:04:2f:98:0c:
c6:63:82:36:3b:13:f1:cb:0c:57:d6:18:58:cb:2d:be:fd:9a:
b9:4d:17:f3:47:dd:11:fd:ea:6d:18:ef:8a:94:f7:b7:64:b2:
12:f5:63:6e:8e:8a:a7:2d:6d:f9:d6:2a:64:e7:b6:b4:58:48:
b4:1a:97:97:85:30:24:41:2f:45:97:3f:78:d1:59:ee:3f:bf:
f0:47:d7:e8:a1:65:5d:7f:57:be:8b:53:96:f1:9b:03:73:89:
3a:15:06:87:5a:bf:75:53:87:46:a3:31:91:56:0f:d7:35:57:
91:eb:60:a5:44:fd:ff:b5:b5:9e:bf:81:8e:29:a9:f8:0f:1e:
9f:9c:93:05:b4:bf:f5:3e:a3:40:46:8e:23:18:13:41:a9:3f:
f4:51:7f:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 17:27:10 2025 by rpki-client