Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/dc3491-c699-42b5-90a7-cc7e9ab09fb8/1/tcKI6WPg6fgtHGp_2E7FqjQKuo8.mft
File: tcKI6WPg6fgtHGp_2E7FqjQKuo8.mft (raw, json)
Hash identifier: LHUCFCL2sDRWgYf8zVeIY5C88RHTuY6lFh7t5bQThvo=
Subject key identifier: D0:BC:0B:43:66:F7:E0:BD:E6:84:66:46:58:62:B3:9F:95:39:33:39
Authority key identifier: B5:C2:88:E9:63:E0:E9:F8:2D:1C:6A:7F:D8:4E:C5:AA:34:0A:BA:8F
Certificate issuer: /CN=b5c288e963e0e9f82d1c6a7fd84ec5aa340aba8f
Certificate serial: 019847E47DE8C11FAD4A69D77D53DEBE54B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tcKI6WPg6fgtHGp_2E7FqjQKuo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/dc3491-c699-42b5-90a7-cc7e9ab09fb8/1/tcKI6WPg6fgtHGp_2E7FqjQKuo8.mft
Manifest number: 029E
Signing time: Sat 26 Jul 2025 18:00:13 +0000
Manifest this update: Sat 26 Jul 2025 18:00:13 +0000
Manifest next update: Sun 27 Jul 2025 18:00:13 +0000
Files and hashes: 1: ZmF3lPkl3dsARIFpHN7vz5QHbFs.roa (hash: ukfiioKav9S2J4a6qVoPDRL9RQGgYfvHu1FXDGi1Nzg=)
2: tcKI6WPg6fgtHGp_2E7FqjQKuo8.crl (hash: T5g8n3n1ywQXnHnkcAq8jWzQ8/+1OplDroa+7vvwy8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/dc3491-c699-42b5-90a7-cc7e9ab09fb8/1/tcKI6WPg6fgtHGp_2E7FqjQKuo8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/dc3491-c699-42b5-90a7-cc7e9ab09fb8/1/tcKI6WPg6fgtHGp_2E7FqjQKuo8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tcKI6WPg6fgtHGp_2E7FqjQKuo8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 18:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:e4:7d:e8:c1:1f:ad:4a:69:d7:7d:53:de:be:54:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5c288e963e0e9f82d1c6a7fd84ec5aa340aba8f
Validity
Not Before: Jul 26 18:00:13 2025 GMT
Not After : Jul 27 18:00:13 2025 GMT
Subject: CN=d0bc0b4366f7e0bde68466465862b39f95393339
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:20:80:e5:c9:fa:ae:79:ec:04:ba:cb:14:ad:
38:4a:e0:ac:c2:a9:f3:30:db:c6:53:70:57:7a:c8:
06:61:35:c7:b1:22:74:03:a8:33:39:0d:9e:a1:7e:
93:ea:95:4f:96:bb:6c:41:1a:c3:96:5d:33:f8:dc:
0c:65:ed:fd:18:2a:0c:1d:7b:d8:fb:55:7e:ed:6f:
07:20:5d:12:90:d9:8b:1e:b1:35:ca:a3:7d:13:f4:
29:1a:83:01:db:98:25:fc:b0:ee:40:83:45:bc:c3:
01:e7:91:b7:fe:9b:fb:98:a6:2f:88:ae:2a:ee:a9:
da:ad:85:ff:33:b5:3c:57:96:ec:ee:03:20:79:08:
52:e0:f4:53:f5:a4:e2:8f:7f:28:f3:cc:ce:9b:44:
39:75:73:d2:5a:30:c5:14:c2:56:a1:68:5f:ee:13:
dd:ea:0c:bf:e4:61:9f:d1:a9:35:71:2f:52:52:85:
69:f6:c1:15:c3:78:26:4c:e4:f7:90:41:7c:4d:f2:
be:e0:40:83:14:e2:18:a9:53:ae:ce:9f:f6:91:f7:
16:56:2a:64:65:93:d6:eb:dc:bf:6e:99:93:2c:b4:
21:8e:12:ad:67:a1:ea:c3:69:ca:de:c8:1a:8e:79:
3f:f2:a1:f7:ad:22:5f:a2:12:dd:25:2e:46:8d:18:
21:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:BC:0B:43:66:F7:E0:BD:E6:84:66:46:58:62:B3:9F:95:39:33:39
X509v3 Authority Key Identifier:
keyid:B5:C2:88:E9:63:E0:E9:F8:2D:1C:6A:7F:D8:4E:C5:AA:34:0A:BA:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tcKI6WPg6fgtHGp_2E7FqjQKuo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/dc3491-c699-42b5-90a7-cc7e9ab09fb8/1/tcKI6WPg6fgtHGp_2E7FqjQKuo8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/dc3491-c699-42b5-90a7-cc7e9ab09fb8/1/tcKI6WPg6fgtHGp_2E7FqjQKuo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:90:f6:69:79:9a:bc:40:24:3f:f5:08:fd:d1:37:d3:1d:30:
af:05:f0:1b:77:fb:e9:0c:99:f1:b1:da:a3:57:5d:2d:e1:52:
8d:cb:f6:da:67:fb:21:6b:2f:b0:23:5a:7d:6d:f2:b1:fe:df:
53:92:61:82:77:8b:87:8b:89:76:a2:7f:8f:59:e0:7b:12:9b:
d1:00:1e:0e:a6:79:a5:da:68:6c:9c:24:0d:27:c6:ca:44:82:
2c:8c:25:82:31:7c:6c:20:e5:7e:57:7d:d6:25:06:06:d5:28:
be:26:e4:07:10:da:d6:2b:a2:d9:c4:95:25:01:87:45:ce:bb:
fd:c4:aa:20:31:87:38:ba:b8:4e:03:ad:bc:bc:a0:64:6d:d3:
16:cb:50:bb:83:55:9e:7e:72:76:74:04:38:74:8e:03:f9:5a:
07:49:2a:b9:67:8e:2d:86:14:bb:d3:c0:a0:5a:df:f1:75:85:
7c:30:4a:93:18:36:e1:bc:3b:6b:c3:df:73:78:7d:50:7a:41:
20:f5:42:cf:1c:0f:23:a8:f8:39:e7:ab:25:a9:6c:b5:53:6d:
19:fa:6e:03:3e:19:55:66:aa:9c:c1:b0:0a:60:fa:bf:a6:75:
7f:1f:a4:a0:01:be:a5:42:ec:a9:40:2c:35:59:0a:e1:cf:d6:
6e:d7:c0:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:55:58 2025 by rpki-client