Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/262f40-48c7-43c6-9d83-1548ac1356be/1/tDqirb6dQEE3M58g_VhiPIo58TA.mft
File: tDqirb6dQEE3M58g_VhiPIo58TA.mft (raw, json)
Hash identifier: ZdsA0YvTDN9nMp/VVvKldAu7cnzpzWWrkAUBIxj8nX0=
Subject key identifier: 3B:A3:46:6C:8F:AE:93:D8:32:84:E0:DA:6C:F9:A2:F8:3E:0A:9F:14
Authority key identifier: B4:3A:A2:AD:BE:9D:40:41:37:33:9F:20:FD:58:62:3C:8A:39:F1:30
Certificate issuer: /CN=b43aa2adbe9d404137339f20fd58623c8a39f130
Certificate serial: 01984AE600B552EED9BA75DFB696FA2FAC7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDqirb6dQEE3M58g_VhiPIo58TA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/262f40-48c7-43c6-9d83-1548ac1356be/1/tDqirb6dQEE3M58g_VhiPIo58TA.mft
Manifest number: 05AE
Signing time: Sun 27 Jul 2025 08:00:44 +0000
Manifest this update: Sun 27 Jul 2025 08:00:44 +0000
Manifest next update: Mon 28 Jul 2025 08:00:44 +0000
Files and hashes: 1: DR42yKGsjL2cx3Lp0nYZ2-J6QjI.roa (hash: SNpq+XJB/gPAUUzDmYBdIDihlauDEu/Coqako/V/GUw=)
2: tDqirb6dQEE3M58g_VhiPIo58TA.crl (hash: QrEPFCtKKUppSls6Q0XJL26YQbJWkIXCv+0OheCzIO8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/262f40-48c7-43c6-9d83-1548ac1356be/1/tDqirb6dQEE3M58g_VhiPIo58TA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/262f40-48c7-43c6-9d83-1548ac1356be/1/tDqirb6dQEE3M58g_VhiPIo58TA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDqirb6dQEE3M58g_VhiPIo58TA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:e6:00:b5:52:ee:d9:ba:75:df:b6:96:fa:2f:ac:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b43aa2adbe9d404137339f20fd58623c8a39f130
Validity
Not Before: Jul 27 08:00:44 2025 GMT
Not After : Jul 28 08:00:44 2025 GMT
Subject: CN=3ba3466c8fae93d83284e0da6cf9a2f83e0a9f14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:7b:82:13:17:37:a0:17:e9:a9:3e:c5:20:8d:
8c:b2:14:6b:dd:06:57:74:ac:44:84:8a:94:db:bc:
47:9e:9f:30:8f:a6:f8:6e:e8:45:5e:a7:28:95:2c:
b9:c0:45:c9:b7:04:2d:aa:30:4d:65:96:46:15:cb:
0f:32:82:f0:1b:6b:d1:98:f2:5c:d9:91:a0:86:e5:
d6:6d:52:5c:a6:40:44:26:72:ff:77:42:61:30:19:
83:1c:91:99:f4:13:a7:27:37:69:fa:be:91:a9:90:
ca:19:e8:3e:57:b4:52:28:71:16:85:11:84:d9:3d:
60:a0:e8:dc:67:70:ee:11:19:12:40:8f:41:1d:26:
d2:2a:39:e5:30:67:9a:78:95:84:fe:cc:50:03:a3:
fc:ef:37:80:a1:5a:98:e3:4a:2b:d7:c2:75:61:98:
e4:3d:63:26:b8:cb:ee:36:c2:49:ed:fe:79:45:8a:
0b:13:19:f0:7b:3f:b1:55:54:c9:a3:c9:e7:59:ef:
8a:00:bd:ae:f2:df:b4:2d:ec:64:02:be:b7:69:dc:
8f:60:bd:2c:73:a9:72:1e:91:18:49:4d:0e:18:b2:
0c:59:6c:0c:02:7c:c5:09:df:63:5d:31:68:92:a7:
5b:08:82:c8:f0:4a:fe:59:a8:fa:92:a3:78:9c:85:
5f:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:A3:46:6C:8F:AE:93:D8:32:84:E0:DA:6C:F9:A2:F8:3E:0A:9F:14
X509v3 Authority Key Identifier:
keyid:B4:3A:A2:AD:BE:9D:40:41:37:33:9F:20:FD:58:62:3C:8A:39:F1:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDqirb6dQEE3M58g_VhiPIo58TA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/262f40-48c7-43c6-9d83-1548ac1356be/1/tDqirb6dQEE3M58g_VhiPIo58TA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/262f40-48c7-43c6-9d83-1548ac1356be/1/tDqirb6dQEE3M58g_VhiPIo58TA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:d9:88:d6:3d:9f:19:14:71:b3:c1:08:7b:af:82:e5:c8:0e:
61:ce:34:d2:a9:cc:89:4f:bc:04:13:45:06:b1:aa:02:b6:75:
e8:21:a5:21:63:cc:85:e4:fd:7a:fb:cd:53:13:7a:46:b2:ca:
e4:62:83:ed:94:c3:a9:ba:27:1e:2f:59:3b:b6:d8:4a:75:92:
6f:a7:94:ff:a7:02:e3:f6:05:90:81:58:a9:ca:a2:42:92:8b:
4a:5b:f7:e1:90:63:3b:f6:59:be:a3:8b:89:57:d3:93:df:09:
81:e6:d8:0d:5a:96:67:3e:76:3e:89:11:4f:e5:a8:10:97:ee:
bc:c7:15:fa:52:d3:9f:12:35:13:21:9a:e2:0a:de:c4:1c:28:
3b:5d:c1:4c:6a:68:b1:d9:9e:d3:2f:1c:b0:f4:32:35:29:2b:
a0:b7:e9:38:09:7a:5c:53:4d:75:0c:7d:b2:7a:4b:97:1b:fc:
03:e0:7b:30:0f:85:1a:f0:9c:e3:75:94:4f:b5:fc:25:48:26:
91:31:59:c6:86:4f:d4:e0:32:e6:8e:9b:79:92:4f:bf:37:17:
2a:b1:9f:92:27:b7:1e:ce:e3:a1:80:99:8c:87:97:c3:98:41:
f3:45:c1:88:07:56:d1:ad:21:44:42:e8:d1:95:72:14:c9:ac:
44:56:b2:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:09:29 2025 by rpki-client