Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/d95b2c-1e02-4e4e-8438-bbcae0df1f2f/1/tgtXTwPZiBVfRLossHvH37RXzw8.mft
File: tgtXTwPZiBVfRLossHvH37RXzw8.mft (raw, json)
Hash identifier: 5z0AT3Qu7m5AdBnZtlLeuFxGTZ+e9zdxMM8mFoB548g=
Subject key identifier: 56:D5:13:92:57:9A:39:B1:3F:03:B1:D8:3E:60:45:3F:0C:2E:80:64
Authority key identifier: B6:0B:57:4F:03:D9:88:15:5F:44:BA:2C:B0:7B:C7:DF:B4:57:CF:0F
Certificate issuer: /CN=b60b574f03d988155f44ba2cb07bc7dfb457cf0f
Certificate serial: 01984777EA53A5F6E14E87DF172200B1C888
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tgtXTwPZiBVfRLossHvH37RXzw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/d95b2c-1e02-4e4e-8438-bbcae0df1f2f/1/tgtXTwPZiBVfRLossHvH37RXzw8.mft
Manifest number: 1592
Signing time: Sat 26 Jul 2025 16:01:37 +0000
Manifest this update: Sat 26 Jul 2025 16:01:37 +0000
Manifest next update: Sun 27 Jul 2025 16:01:37 +0000
Files and hashes: 1: BeOIJLd8_MIXUGufXTnw_YPsJgs.roa (hash: UFekJjmZxy4vjH3dPZliRBeAZT4NRRq/0IMLKsXu0f8=)
2: tgtXTwPZiBVfRLossHvH37RXzw8.crl (hash: PRD5lTkAinceYU3MTcZzeLmtT6k+si8L7+5ArWWbklo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/d95b2c-1e02-4e4e-8438-bbcae0df1f2f/1/tgtXTwPZiBVfRLossHvH37RXzw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/d95b2c-1e02-4e4e-8438-bbcae0df1f2f/1/tgtXTwPZiBVfRLossHvH37RXzw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tgtXTwPZiBVfRLossHvH37RXzw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:77:ea:53:a5:f6:e1:4e:87:df:17:22:00:b1:c8:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b60b574f03d988155f44ba2cb07bc7dfb457cf0f
Validity
Not Before: Jul 26 16:01:37 2025 GMT
Not After : Jul 27 16:01:37 2025 GMT
Subject: CN=56d51392579a39b13f03b1d83e60453f0c2e8064
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:cb:93:1f:27:ad:13:48:68:92:d0:73:df:59:
2d:c9:cd:53:5e:53:f7:fe:d1:b8:6a:18:40:cc:84:
01:78:d1:0a:18:32:51:d1:d8:fd:d3:11:6f:be:1d:
8d:40:c6:fd:bf:06:72:0c:86:c6:6f:ab:90:12:1f:
b6:15:b2:6f:92:71:aa:09:7f:3c:60:47:c3:4a:f0:
ad:d1:90:e6:e4:95:50:32:d1:55:df:50:df:54:95:
ae:ad:7f:f3:db:bc:29:1c:f1:83:bf:29:b8:3d:92:
27:17:b1:b9:be:d2:14:fa:a0:a5:c8:6e:91:24:2b:
6f:c9:bb:7e:64:f3:5d:61:93:ec:61:97:f4:fd:77:
ee:49:75:3e:01:70:44:94:54:b2:45:88:ff:b9:c6:
31:d3:c6:84:0d:db:37:0d:19:22:27:53:79:cc:51:
dc:c7:47:d7:8a:f6:59:8c:dc:85:2e:20:e9:42:f3:
e7:f6:42:47:fa:b3:a8:1f:7c:07:f3:7b:26:f1:85:
69:87:c1:5d:42:9e:34:f1:f4:9f:98:25:1c:c4:18:
4a:9a:a4:dd:d7:9d:b0:1b:b9:85:c2:e8:be:5f:94:
e5:32:02:c9:33:0a:2c:b7:fa:90:61:1a:b6:c0:20:
56:c3:2c:7a:0f:8b:a4:60:b4:a5:ab:5d:c0:3b:9d:
c6:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:D5:13:92:57:9A:39:B1:3F:03:B1:D8:3E:60:45:3F:0C:2E:80:64
X509v3 Authority Key Identifier:
keyid:B6:0B:57:4F:03:D9:88:15:5F:44:BA:2C:B0:7B:C7:DF:B4:57:CF:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tgtXTwPZiBVfRLossHvH37RXzw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d95b2c-1e02-4e4e-8438-bbcae0df1f2f/1/tgtXTwPZiBVfRLossHvH37RXzw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d95b2c-1e02-4e4e-8438-bbcae0df1f2f/1/tgtXTwPZiBVfRLossHvH37RXzw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:a5:1b:62:76:e6:52:38:74:93:d2:53:c0:5c:db:87:39:49:
e6:b8:6e:5f:d6:62:f4:fc:b6:eb:d7:f6:99:30:2c:6d:00:c7:
a2:aa:a9:1a:15:25:4f:57:13:3e:96:41:ca:6d:b0:7b:74:f9:
f6:70:80:7f:a6:5c:05:52:f4:86:6d:29:92:b0:75:36:5a:22:
76:c0:c8:3a:71:b2:52:df:1d:72:bf:64:14:ce:d8:8e:1f:0e:
95:f8:a0:5f:bb:63:88:ca:80:14:37:c3:23:c1:56:b1:07:f3:
ef:17:d3:75:06:7a:c6:c0:e5:40:9f:83:dd:bd:7a:ba:2e:98:
5f:1f:3b:d0:78:6e:43:b8:99:96:36:1b:5c:26:1e:94:58:c0:
9b:f3:7a:59:77:a1:02:f1:c5:06:d3:a3:cc:18:3f:96:25:17:
bc:8f:c0:f4:60:1f:0e:17:4d:8c:bb:c5:de:29:bf:b7:b8:e0:
68:a6:79:57:f3:80:7f:f6:58:1f:bf:13:4a:1b:f3:0e:ec:a5:
5e:4b:1b:64:e2:41:53:14:af:d8:2c:ed:92:6f:33:07:af:bf:
72:98:47:8e:ec:ec:9d:de:1c:ae:cb:2c:a3:40:0e:fb:14:a2:
2e:da:0b:85:03:6b:4d:b9:c7:03:94:b4:4c:9e:93:a8:76:c6:
ec:12:b8:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 00:56:40 2025 by rpki-client