Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/4652e8-5d20-42f6-a739-d54921604ecd/1/t0QwmQgmnlOLK0-pYzcMnsIHeng.mft
File: t0QwmQgmnlOLK0-pYzcMnsIHeng.mft (raw, json)
Hash identifier: 358sGjFmAhJwhkxWTlDBlSSdaXe1R/cVwniMiEGnbwM=
Subject key identifier: 9B:BA:2C:9E:68:4B:C1:9C:0F:CE:BC:A6:C6:7C:8D:6B:8B:DD:51:DF
Authority key identifier: B7:44:30:99:08:26:9E:53:8B:2B:4F:A9:63:37:0C:9E:C2:07:7A:78
Certificate issuer: /CN=b744309908269e538b2b4fa963370c9ec2077a78
Certificate serial: 019847ADD031F889A4CA27210B08796F68D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t0QwmQgmnlOLK0-pYzcMnsIHeng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/4652e8-5d20-42f6-a739-d54921604ecd/1/t0QwmQgmnlOLK0-pYzcMnsIHeng.mft
Manifest number: 1051
Signing time: Sat 26 Jul 2025 17:00:29 +0000
Manifest this update: Sat 26 Jul 2025 17:00:29 +0000
Manifest next update: Sun 27 Jul 2025 17:00:29 +0000
Files and hashes: 1: YBLZGJHJKH4DoV9XrJh7KrLAY0g.roa (hash: L0o/zjJZLOmk6cpaT73kurdvyrzNoMlbhiuzTQLNAKg=)
2: t0QwmQgmnlOLK0-pYzcMnsIHeng.crl (hash: ME0K2+NwZu6L4rTSHyhetEZO3vVj0JmT4ifu1W//5KA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/4652e8-5d20-42f6-a739-d54921604ecd/1/t0QwmQgmnlOLK0-pYzcMnsIHeng.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/4652e8-5d20-42f6-a739-d54921604ecd/1/t0QwmQgmnlOLK0-pYzcMnsIHeng.mft
rsync://rpki.ripe.net/repository/DEFAULT/t0QwmQgmnlOLK0-pYzcMnsIHeng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 17:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:ad:d0:31:f8:89:a4:ca:27:21:0b:08:79:6f:68:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b744309908269e538b2b4fa963370c9ec2077a78
Validity
Not Before: Jul 26 17:00:29 2025 GMT
Not After : Jul 27 17:00:29 2025 GMT
Subject: CN=9bba2c9e684bc19c0fcebca6c67c8d6b8bdd51df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b0:11:aa:19:90:a7:22:b2:07:09:12:a1:f5:
38:cc:5b:09:cd:f7:0f:06:a8:ad:9f:7b:39:25:3b:
3e:35:83:bf:f3:0a:64:70:1e:10:79:23:92:4d:89:
9f:e7:54:3a:54:77:86:64:1c:9a:4a:50:9d:ca:c6:
e2:6f:4f:23:26:c3:cb:89:29:4e:7f:91:8f:89:71:
7e:65:3f:71:63:d6:ba:3d:ad:03:d0:33:8a:8c:15:
40:98:2a:1a:7b:54:ea:f3:2d:08:39:1a:57:be:71:
c5:87:12:f2:a0:bc:ba:a1:e1:f0:71:56:85:e8:f1:
3c:c1:97:f9:e4:ab:71:69:f7:3f:71:ac:ef:7d:d6:
35:ae:68:2c:f5:6d:e6:91:9a:fc:a1:b6:e3:a6:5e:
02:ca:3c:81:bc:fc:3e:92:ea:61:4b:89:da:65:bb:
02:9a:8f:e8:78:4f:30:24:45:3d:00:9f:10:50:59:
34:f0:7c:4b:0b:11:c3:06:e6:b4:06:ce:8a:95:2c:
0e:31:7d:12:3d:c3:53:11:bf:ff:15:d2:8d:d7:00:
f4:5b:c0:13:21:e7:4f:de:1e:22:94:eb:6c:75:30:
45:3c:83:e2:ad:4e:1e:f2:7c:c9:59:c2:40:66:49:
fd:c1:a2:ab:86:91:b3:f4:9c:b1:0f:0a:2c:8d:be:
e7:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:BA:2C:9E:68:4B:C1:9C:0F:CE:BC:A6:C6:7C:8D:6B:8B:DD:51:DF
X509v3 Authority Key Identifier:
keyid:B7:44:30:99:08:26:9E:53:8B:2B:4F:A9:63:37:0C:9E:C2:07:7A:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t0QwmQgmnlOLK0-pYzcMnsIHeng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4652e8-5d20-42f6-a739-d54921604ecd/1/t0QwmQgmnlOLK0-pYzcMnsIHeng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4652e8-5d20-42f6-a739-d54921604ecd/1/t0QwmQgmnlOLK0-pYzcMnsIHeng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:5b:7d:6d:1f:58:50:c2:3e:81:86:6f:17:a2:5c:4c:bb:ef:
83:c6:48:4d:ec:4f:ff:13:ff:4e:af:0b:a3:28:72:62:ad:1c:
0d:64:4d:17:d9:c6:23:a1:21:db:7e:d0:86:2b:6c:27:f3:0f:
96:53:2f:43:04:78:ce:2e:99:10:4e:a6:06:6b:56:d3:d3:0b:
3d:ae:d4:89:0a:f0:62:c5:ff:3a:a9:8c:b8:b2:9b:a6:99:0b:
b9:b9:d0:25:ed:f3:e3:5b:34:47:14:c2:f7:41:87:6f:84:32:
47:00:6f:58:79:cf:d0:2a:28:4a:1a:97:f8:be:70:33:37:25:
30:db:e0:66:34:dc:e8:e6:33:ae:2f:d1:83:fc:ea:16:60:fa:
73:d5:32:ef:92:f3:95:56:72:35:80:f6:96:8d:a6:54:26:95:
a9:d8:bb:1d:de:b0:1b:6f:1f:13:52:7c:7e:8d:16:4f:ea:3c:
14:e7:f8:7c:42:18:1c:07:70:13:ed:eb:aa:61:eb:71:2d:7c:
e4:8f:33:ca:b4:fb:05:73:91:cb:10:43:38:90:54:fc:25:82:
09:53:c8:4e:ce:1c:7e:c3:9a:26:92:40:3e:ab:4a:53:26:95:
f2:21:49:6b:03:0c:0f:1c:50:6f:5c:d8:a4:d4:6d:53:89:76:
ff:6a:49:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:40:55 2025 by rpki-client