Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/e2510d-e573-45d3-9d20-754b60c5b568/1/tTuhjVzrjnlMgTnOAqeRuFAYJe8.mft
File: tTuhjVzrjnlMgTnOAqeRuFAYJe8.mft (raw, json)
Hash identifier: 1d88FsxhQgqTqoHZqph41VKz4CcNqUcBBwZPvOCuufM=
Subject key identifier: A4:52:90:42:1D:73:D7:DC:57:80:BD:33:9D:70:B9:DB:BB:DD:53:C1
Authority key identifier: B5:3B:A1:8D:5C:EB:8E:79:4C:81:39:CE:02:A7:91:B8:50:18:25:EF
Certificate issuer: /CN=b53ba18d5ceb8e794c8139ce02a791b8501825ef
Certificate serial: 019849D2C9BFE6D622FDA5962B93496CA0CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tTuhjVzrjnlMgTnOAqeRuFAYJe8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/e2510d-e573-45d3-9d20-754b60c5b568/1/tTuhjVzrjnlMgTnOAqeRuFAYJe8.mft
Manifest number: 0D28
Signing time: Sun 27 Jul 2025 03:00:07 +0000
Manifest this update: Sun 27 Jul 2025 03:00:07 +0000
Manifest next update: Mon 28 Jul 2025 03:00:07 +0000
Files and hashes: 1: 9FStBrS0NlZ9f0JDPC2m90a8BCY.roa (hash: xw+KW2Ni2Cd+C3tg5Q5Vf8DrtdT917ZQWwgX4LJaEm4=)
2: NcymNU3Ex55jeE07rsjVQP17Yc4.roa (hash: rqRVyPcE0vuZ2ea448N6H2EJDC40DdbDXkISgXkK53E=)
3: XUHwJb1I3gkKMlf7v2dTxFe6360.roa (hash: Gm/rvLP3jZuTC48xJtdoJ5/c1V7BDKST3JSzW3p7S08=)
4: tTuhjVzrjnlMgTnOAqeRuFAYJe8.crl (hash: vkzqkW6itc3GI4BhcNdCGHlut5sGbuW5ooft4IedQzs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/e2510d-e573-45d3-9d20-754b60c5b568/1/tTuhjVzrjnlMgTnOAqeRuFAYJe8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/e2510d-e573-45d3-9d20-754b60c5b568/1/tTuhjVzrjnlMgTnOAqeRuFAYJe8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tTuhjVzrjnlMgTnOAqeRuFAYJe8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d2:c9:bf:e6:d6:22:fd:a5:96:2b:93:49:6c:a0:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b53ba18d5ceb8e794c8139ce02a791b8501825ef
Validity
Not Before: Jul 27 03:00:07 2025 GMT
Not After : Jul 28 03:00:07 2025 GMT
Subject: CN=a45290421d73d7dc5780bd339d70b9dbbbdd53c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:53:52:ae:a2:99:6d:96:70:39:aa:a0:74:0d:
b6:40:c1:93:40:28:8e:23:36:d7:29:66:58:6e:ac:
87:db:2a:b8:29:52:ab:6b:20:98:d0:5e:ad:02:45:
37:04:0d:b0:92:ae:1c:4a:ad:d3:01:9e:92:d2:95:
f7:4f:91:fb:3b:33:27:23:f2:66:52:db:8b:3b:eb:
63:c1:44:a9:44:8c:39:6c:a6:04:a9:c2:a5:7f:7a:
1f:5b:30:a4:eb:1b:9d:dd:0a:f3:e6:89:08:78:3a:
d4:ac:99:2f:fa:f8:9c:17:78:e3:e5:f6:3f:26:47:
7e:71:9e:9d:78:ee:45:22:bf:4a:7e:e5:3a:8a:da:
ac:91:67:33:1d:fc:42:24:c2:76:e7:77:f9:11:e6:
84:47:96:b3:52:80:ec:96:63:fc:ad:f7:a6:e6:40:
c0:7a:62:72:d2:61:9e:81:86:2f:11:c3:f5:22:58:
13:dd:2e:dc:64:41:a5:96:e9:60:5e:c9:63:de:dd:
dc:3a:4f:ad:da:16:a6:7f:77:f1:14:54:dc:43:76:
41:bb:c6:87:d4:43:fc:13:26:57:42:4a:8f:8e:1b:
0e:8c:21:74:0f:c0:f1:d8:68:a5:f5:7d:01:75:2c:
13:c6:0a:e5:58:b0:cf:a3:06:96:f7:87:27:61:74:
f4:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:52:90:42:1D:73:D7:DC:57:80:BD:33:9D:70:B9:DB:BB:DD:53:C1
X509v3 Authority Key Identifier:
keyid:B5:3B:A1:8D:5C:EB:8E:79:4C:81:39:CE:02:A7:91:B8:50:18:25:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tTuhjVzrjnlMgTnOAqeRuFAYJe8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/e2510d-e573-45d3-9d20-754b60c5b568/1/tTuhjVzrjnlMgTnOAqeRuFAYJe8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/e2510d-e573-45d3-9d20-754b60c5b568/1/tTuhjVzrjnlMgTnOAqeRuFAYJe8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:92:f4:64:31:0b:c0:82:23:72:47:60:96:b9:44:f2:3d:63:
33:d3:c3:ef:c4:8f:47:f4:9a:6b:1a:9b:c1:80:6e:0c:eb:89:
81:7e:8d:b7:cc:8c:11:03:32:f9:2f:d8:4b:a4:a6:3b:ba:1e:
8f:4c:d1:72:7c:6f:cc:54:7f:b9:1f:b2:74:30:e8:d7:fb:62:
f3:ec:2a:f5:ab:ee:84:c4:08:6b:ba:00:98:fb:93:c5:01:2c:
cb:85:f6:79:d7:ec:c1:ca:7f:92:0c:b9:48:a2:08:84:4e:73:
cd:81:be:d4:20:a8:a5:d5:83:3b:21:dc:ac:01:90:8d:25:8f:
45:93:9e:d8:10:d3:a3:03:58:13:1d:a6:54:fd:d9:aa:03:33:
8d:ce:85:0c:a6:b1:12:fa:c5:1f:30:04:e1:8b:a5:43:4c:9b:
19:bc:8e:e4:38:8f:bf:bc:10:77:21:df:ef:f7:7a:d8:9d:73:
84:77:d7:ef:47:8c:03:64:57:40:cf:72:2b:11:77:64:60:d6:
8c:7b:96:8a:56:79:a2:e6:62:2d:8b:e2:b7:69:1f:e9:e4:05:
5b:4b:18:47:b5:04:3d:b4:34:b2:aa:ac:d6:7e:89:39:66:cc:
ec:97:ce:62:b5:71:c9:30:86:02:38:36:1c:be:0d:14:32:12:
5d:ff:9a:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 04:58:08 2025 by rpki-client