Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/ba784d-746e-49e7-a408-4abaf53a50af/1/tczdiD9t0RTs9vcnFqhGNPZ6yXc.mft
File: tczdiD9t0RTs9vcnFqhGNPZ6yXc.mft (raw, json)
Hash identifier: ACXemQ6ib5R7o8EEqKyUZRjNQ/GDw1HJZ1NoiE4osFM=
Subject key identifier: 88:D2:0A:42:1E:6E:D1:69:B8:53:8B:87:B9:1A:D5:A3:ED:5A:9A:A9
Authority key identifier: B5:CC:DD:88:3F:6D:D1:14:EC:F6:F7:27:16:A8:46:34:F6:7A:C9:77
Certificate issuer: /CN=b5ccdd883f6dd114ecf6f72716a84634f67ac977
Certificate serial: 019845F63A8A8CA498CF65B192AFA9DF3A8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tczdiD9t0RTs9vcnFqhGNPZ6yXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/ba784d-746e-49e7-a408-4abaf53a50af/1/tczdiD9t0RTs9vcnFqhGNPZ6yXc.mft
Manifest number: 0C30
Signing time: Sat 26 Jul 2025 09:00:21 +0000
Manifest this update: Sat 26 Jul 2025 09:00:21 +0000
Manifest next update: Sun 27 Jul 2025 09:00:21 +0000
Files and hashes: 1: 6mSAzptlMtavroiRBEbzErufO08.roa (hash: lJ5Bp/WretmXqwZLM24/DP1Oy5iyysz4o7F+olg5yZQ=)
2: tczdiD9t0RTs9vcnFqhGNPZ6yXc.crl (hash: 9A601VYi4jPictjLhACvm4Zma4o+BPI5o5rkdYxYoo4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/ba784d-746e-49e7-a408-4abaf53a50af/1/tczdiD9t0RTs9vcnFqhGNPZ6yXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/ba784d-746e-49e7-a408-4abaf53a50af/1/tczdiD9t0RTs9vcnFqhGNPZ6yXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/tczdiD9t0RTs9vcnFqhGNPZ6yXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:f6:3a:8a:8c:a4:98:cf:65:b1:92:af:a9:df:3a:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5ccdd883f6dd114ecf6f72716a84634f67ac977
Validity
Not Before: Jul 26 09:00:21 2025 GMT
Not After : Jul 27 09:00:21 2025 GMT
Subject: CN=88d20a421e6ed169b8538b87b91ad5a3ed5a9aa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:0a:1f:79:fa:fa:8b:70:c9:ba:63:97:3c:ac:
90:4f:d6:21:3b:90:46:f3:9e:33:d4:51:c7:ee:1a:
4a:99:67:d8:8b:7c:80:0d:ad:17:12:75:33:e2:c5:
0b:c7:a5:63:0e:4e:8e:44:bb:3b:79:9f:4f:32:f0:
d3:05:19:b2:c5:82:c9:ee:db:9a:83:06:cd:d8:c6:
dc:30:99:de:3b:6a:2d:c1:7a:85:e7:41:23:61:67:
5e:e5:0b:2d:88:83:0d:a4:e9:c3:73:7b:91:94:cb:
04:b3:08:27:cd:15:d3:0f:89:7c:2f:97:37:13:c3:
a3:9c:4d:9c:f0:5c:a4:2b:d5:c1:bd:98:0c:92:e8:
1a:93:8d:64:97:73:15:fc:e2:69:31:e9:da:a8:e7:
88:b0:be:bd:b2:ea:ee:43:cd:e5:4c:96:cc:64:14:
67:f1:3f:44:90:10:01:1a:80:f2:52:26:23:7d:24:
76:fd:60:5b:72:30:46:54:ad:33:30:e7:a2:06:a3:
6f:c5:70:03:50:91:00:33:d8:b0:49:ae:98:94:1e:
29:f0:be:8a:f5:1a:f9:26:0b:f7:cf:73:78:95:d3:
a6:41:00:d1:ba:f5:67:8c:af:c5:b9:a8:18:b6:31:
af:68:c7:da:78:a2:0f:88:b4:9e:2c:21:db:31:54:
0d:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:D2:0A:42:1E:6E:D1:69:B8:53:8B:87:B9:1A:D5:A3:ED:5A:9A:A9
X509v3 Authority Key Identifier:
keyid:B5:CC:DD:88:3F:6D:D1:14:EC:F6:F7:27:16:A8:46:34:F6:7A:C9:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tczdiD9t0RTs9vcnFqhGNPZ6yXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/ba784d-746e-49e7-a408-4abaf53a50af/1/tczdiD9t0RTs9vcnFqhGNPZ6yXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/ba784d-746e-49e7-a408-4abaf53a50af/1/tczdiD9t0RTs9vcnFqhGNPZ6yXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:8f:c8:2c:0c:66:37:30:24:e2:2f:04:d8:e4:07:4a:a6:2c:
86:e2:bc:e4:51:d4:ff:61:07:3c:89:97:1c:fa:ed:0f:46:09:
6c:be:ba:a9:84:7e:fe:be:c3:0c:d4:97:d7:9f:e4:04:c2:0f:
be:71:d9:e0:b0:81:16:97:13:ee:1d:ac:85:66:11:43:63:44:
f6:88:f3:27:59:5e:9b:63:02:22:67:59:40:a5:a4:f7:7b:15:
e7:c3:4a:d5:af:be:60:d7:82:05:aa:07:fe:cc:64:9c:35:c4:
fe:02:fa:64:2f:1f:a2:19:ee:5e:84:0e:41:e7:18:9d:7f:a0:
96:dd:54:ed:68:3b:49:f8:39:80:81:4a:49:61:67:2a:f8:9b:
20:d4:0b:87:4b:c8:88:51:7f:20:71:06:4e:ba:d4:8e:88:83:
d4:32:42:a1:91:ef:f8:8c:11:8a:c8:ae:00:7e:82:ee:6d:b8:
88:ac:15:f2:e8:ee:c1:89:9c:5b:da:6b:fb:d9:a9:e5:11:30:
00:f6:5c:61:8d:5f:a2:cc:7b:7f:c4:c3:a5:a6:b4:99:ab:e1:
01:49:41:1a:62:c2:a7:64:5e:d8:af:57:71:d1:61:d4:53:89:
d4:de:9d:67:18:6f:8d:3b:7f:be:ab:33:85:30:a9:ee:67:3c:
56:d3:c7:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:58:17 2025 by rpki-client