Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/d0305f-2b0d-4480-8d92-c0d973ca25d8/1/t4skH3ysfR5SHigxR-xhdjxCKqc.mft
File: t4skH3ysfR5SHigxR-xhdjxCKqc.mft (raw, json)
Hash identifier: 7TKGnD5StokufJnZU6VXyU2fmap30sC8nt4LntDOe3I=
Subject key identifier: 59:A4:A7:8D:A0:45:8F:F4:87:59:E8:C6:AB:2C:0C:18:48:6A:DF:02
Authority key identifier: B7:8B:24:1F:7C:AC:7D:1E:52:1E:28:31:47:EC:61:76:3C:42:2A:A7
Certificate issuer: /CN=b78b241f7cac7d1e521e283147ec61763c422aa7
Certificate serial: 0197D774EB1BDA09EB54E7E227ED7159966F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t4skH3ysfR5SHigxR-xhdjxCKqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/d0305f-2b0d-4480-8d92-c0d973ca25d8/1/t4skH3ysfR5SHigxR-xhdjxCKqc.mft
Manifest number: 0661
Signing time: Fri 04 Jul 2025 22:00:53 +0000
Manifest this update: Fri 04 Jul 2025 22:00:53 +0000
Manifest next update: Sat 05 Jul 2025 22:00:53 +0000
Files and hashes: 1: JeMCMYiH53cU_3LMDeSKcS3Thhs.roa (hash: q+KDU3te7tpkPWYDo6SVWUaxsvwlZ34vk9tdHz3W+pc=)
2: t4skH3ysfR5SHigxR-xhdjxCKqc.crl (hash: uawiWau7tNoCdYTzsPupzqe8ZZD3sDzKDuw9HRzSNaI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/d0305f-2b0d-4480-8d92-c0d973ca25d8/1/t4skH3ysfR5SHigxR-xhdjxCKqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/d0305f-2b0d-4480-8d92-c0d973ca25d8/1/t4skH3ysfR5SHigxR-xhdjxCKqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/t4skH3ysfR5SHigxR-xhdjxCKqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 17:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d7:74:eb:1b:da:09:eb:54:e7:e2:27:ed:71:59:96:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b78b241f7cac7d1e521e283147ec61763c422aa7
Validity
Not Before: Jul 4 22:00:53 2025 GMT
Not After : Jul 5 22:00:53 2025 GMT
Subject: CN=59a4a78da0458ff48759e8c6ab2c0c18486adf02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5b:71:13:56:a4:d0:19:34:07:c4:83:7d:8a:
82:14:b6:4b:c0:f6:a3:8d:28:59:49:af:bb:5a:bd:
2b:e9:4e:b2:7b:32:64:b3:3c:7a:44:cd:ad:7d:29:
ae:af:b5:48:9b:82:36:83:73:99:8a:ed:41:18:b1:
d4:8e:4a:a0:25:91:ba:4d:57:33:c2:d6:b8:6c:21:
88:b0:29:5d:06:5c:ca:24:93:01:f1:eb:5e:80:45:
b4:12:00:2e:60:61:44:9b:31:fd:5e:d5:e3:fe:e3:
1e:f5:98:d4:7f:8a:6e:b0:e1:89:b6:1c:7d:25:34:
d8:e5:5e:f4:09:03:2d:b5:85:86:ae:6f:ff:79:6a:
d2:2c:11:5b:b6:6c:87:ce:e6:1b:80:6c:56:94:86:
8d:59:d7:37:e6:cf:86:a3:71:09:f7:b6:ee:fe:fb:
16:f8:e2:99:1b:ee:d5:cf:58:9b:63:65:f1:82:4d:
48:48:f1:9b:0b:af:08:e6:bf:9c:6a:9e:5f:74:51:
f9:4e:80:01:f6:c7:9b:69:4d:95:84:8c:16:41:30:
ba:10:4a:47:16:97:0a:69:4b:7c:18:92:12:b6:9d:
79:29:81:56:18:31:f4:31:0c:a1:0f:1c:6c:17:95:
12:ca:c1:c4:ae:96:80:e0:6b:99:d8:fc:db:66:19:
c7:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:A4:A7:8D:A0:45:8F:F4:87:59:E8:C6:AB:2C:0C:18:48:6A:DF:02
X509v3 Authority Key Identifier:
keyid:B7:8B:24:1F:7C:AC:7D:1E:52:1E:28:31:47:EC:61:76:3C:42:2A:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4skH3ysfR5SHigxR-xhdjxCKqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/d0305f-2b0d-4480-8d92-c0d973ca25d8/1/t4skH3ysfR5SHigxR-xhdjxCKqc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/d0305f-2b0d-4480-8d92-c0d973ca25d8/1/t4skH3ysfR5SHigxR-xhdjxCKqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:5d:4a:cc:ee:71:5b:7a:08:e0:31:13:45:21:76:4f:03:59:
76:75:41:8d:fc:dc:04:15:d0:08:2f:51:73:85:b8:0a:a7:3b:
aa:e6:82:38:cc:52:80:bc:de:59:4c:f7:d9:7c:55:33:71:ba:
c8:04:15:1f:b0:2d:7f:26:a8:d4:6f:d8:c1:4d:31:cf:da:e7:
ff:05:95:61:78:ce:b3:4f:af:f7:18:05:dc:a0:65:5e:ce:ae:
e3:61:93:e7:40:45:e0:2f:25:e9:38:36:b7:c9:df:c9:0c:a4:
47:52:74:78:ae:ad:7a:86:3a:b4:e8:1b:18:f5:22:b2:34:06:
4e:bc:19:e2:83:cb:f2:b0:84:a3:ad:46:bc:b2:26:b8:c0:8e:
5c:c1:32:7c:5d:0b:2f:cf:ae:7d:71:44:07:26:af:b8:28:28:
83:88:80:83:b1:93:bc:81:96:24:1b:6f:78:96:71:7b:f7:05:
a7:96:87:e3:6a:fe:d5:6b:e1:f9:5c:77:da:c3:c3:a4:de:f7:
7f:0d:95:92:5e:31:a1:ad:2e:fd:36:90:6f:6d:35:80:45:70:
25:c4:19:7a:5f:38:f5:8b:c3:8f:ce:c4:dd:09:1e:9d:64:80:
12:1d:72:04:0b:4f:3d:86:0e:a2:78:34:2d:43:3f:06:e2:4f:
84:0d:41:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 23:33:21 2025 by rpki-client