Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/9a4cce-fd12-4707-be95-0a246ab05946/1/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.mft
File: tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.mft (raw, json)
Hash identifier: FSBGhuwglU0NDLtfCA6rgG+FkV0pCrIhcq1v4HjPkpU=
Subject key identifier: 79:DC:E4:AC:7F:7C:73:89:14:79:95:33:BD:88:C0:3D:D0:46:BE:1B
Authority key identifier: B5:22:78:75:99:F1:79:8E:24:5F:99:3F:8C:B8:18:2F:99:CF:D1:04
Certificate issuer: /CN=b522787599f1798e245f993f8cb8182f99cfd104
Certificate serial: 0198590FD587D38B3B73B3AF4A4D6953BC66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/9a4cce-fd12-4707-be95-0a246ab05946/1/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.mft
Manifest number: 0D86
Signing time: Wed 30 Jul 2025 02:01:06 +0000
Manifest this update: Wed 30 Jul 2025 02:01:06 +0000
Manifest next update: Thu 31 Jul 2025 02:01:06 +0000
Files and hashes: 1: 2o-thtsUmdvMYHtv9qjNUTl4ar8.roa (hash: lFf88qPAFyfJ0i5OxU8GOvf0pF7V0Wi7poD5MDkBh2U=)
2: tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.crl (hash: RMtL+P/uZOBEiPlHJNgW5/I3QTcpqXiV1YJYjtxHcQA=)
3: xzr06xbQWPKGyePi4W8ezv0xyXU.roa (hash: r6Ttugun2Irp6PGhhAikFJmsuU2fRdTtE284A/50Ue4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/9a4cce-fd12-4707-be95-0a246ab05946/1/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/9a4cce-fd12-4707-be95-0a246ab05946/1/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 31 Jul 2025 02:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:59:0f:d5:87:d3:8b:3b:73:b3:af:4a:4d:69:53:bc:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b522787599f1798e245f993f8cb8182f99cfd104
Validity
Not Before: Jul 30 02:01:06 2025 GMT
Not After : Jul 31 02:01:06 2025 GMT
Subject: CN=79dce4ac7f7c738914799533bd88c03dd046be1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:2a:d3:c6:82:13:a3:b4:2b:60:4c:cc:27:0c:
86:d2:e1:58:32:f0:e9:b6:d5:b0:90:4c:79:72:91:
f7:2d:a5:2c:16:a3:42:f5:50:07:6f:e2:da:bb:c5:
8c:be:1f:2c:28:2a:99:1e:c4:24:fe:ff:fa:fd:92:
82:61:9a:8b:80:40:a1:6c:ef:a3:c2:49:0c:15:c6:
b1:21:a5:bb:6d:51:0c:4c:fa:fa:64:7e:a4:bf:86:
68:64:7f:35:04:80:8b:d3:e4:17:05:81:93:d7:da:
41:27:21:0e:7d:85:3d:c7:44:f9:07:f6:1d:cf:cf:
16:53:82:4c:b2:22:6c:1f:72:35:ed:a7:d2:ac:d8:
0c:bf:29:e7:a1:23:25:4d:2a:dd:06:a1:89:e2:b0:
7b:46:1f:0c:fc:39:9b:34:52:2e:c8:ab:82:7d:cb:
ea:4a:da:4b:06:6e:0e:98:78:91:22:82:90:fc:6b:
09:f3:ce:6d:6d:40:c0:2a:e6:47:b8:eb:cb:41:11:
40:94:26:6b:5c:e3:ad:4a:b4:90:f8:4b:a4:5d:a2:
e4:d3:d9:ae:ee:10:75:fc:eb:4c:48:f7:ce:1d:cc:
c3:78:8d:e8:5b:15:00:a2:d1:d9:5b:d2:d8:d0:d7:
35:24:c7:ac:6c:67:3a:18:ed:02:75:f4:5b:1f:49:
14:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:DC:E4:AC:7F:7C:73:89:14:79:95:33:BD:88:C0:3D:D0:46:BE:1B
X509v3 Authority Key Identifier:
keyid:B5:22:78:75:99:F1:79:8E:24:5F:99:3F:8C:B8:18:2F:99:CF:D1:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/9a4cce-fd12-4707-be95-0a246ab05946/1/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/9a4cce-fd12-4707-be95-0a246ab05946/1/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:71:de:f0:f9:40:dc:1c:81:52:37:ec:1b:7b:de:2a:02:c5:
60:48:72:41:fe:46:9a:bc:6f:7c:0a:65:b3:75:62:e6:39:3e:
4d:0f:3e:35:5d:6d:69:99:bd:87:6b:24:93:bf:60:52:39:71:
2a:06:fe:d8:ce:72:a8:7e:c0:71:91:ae:89:42:3b:7a:df:8f:
13:31:31:c7:d4:62:15:82:96:8f:63:b8:e9:c5:5c:31:25:8b:
3d:c4:2e:b5:3b:27:f8:52:db:dd:c2:a1:56:29:c5:57:18:0c:
94:07:61:a8:12:58:0d:3b:c3:58:e4:46:e2:81:d3:a3:66:33:
9f:15:b2:0f:9a:bb:cd:02:42:d3:af:9e:18:35:f5:0f:28:d7:
da:ca:94:97:f4:84:95:37:ac:15:73:3b:01:10:a3:1a:ce:5e:
ab:c4:65:76:37:b8:ef:30:b8:ca:08:13:ab:23:62:63:86:51:
2f:b4:67:00:37:3a:f2:d8:4e:4f:3a:bd:47:73:46:15:5d:d1:
22:c3:61:d5:87:95:12:2a:b5:ea:6e:0c:ff:58:85:12:cc:af:
f0:07:1b:3f:72:d2:17:b4:a0:70:c5:ec:c2:49:5a:6e:46:9a:
78:8a:0d:ca:b9:a5:ef:0c:d5:0c:4b:18:6a:dd:60:c1:7f:04:
a6:e0:17:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 11:30:32 2025 by rpki-client