Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/18c8d5-089a-470e-906d-dc4e7988a28a/1/tBuxzdW4a-d4BoidLhsgKswnsiU.mft
File: tBuxzdW4a-d4BoidLhsgKswnsiU.mft (raw, json)
Hash identifier: XdHNxIRNdgNPT3bcRLzdOEVldNqtcx7nTFft1ANyto0=
Subject key identifier: D5:2A:56:2C:04:C0:86:DC:CB:1D:09:30:05:37:CB:9A:4B:05:16:3C
Authority key identifier: B4:1B:B1:CD:D5:B8:6B:E7:78:06:88:9D:2E:1B:20:2A:CC:27:B2:25
Certificate issuer: /CN=b41bb1cdd5b86be77806889d2e1b202acc27b225
Certificate serial: 01974E8E6920BA7EC0F0429F4484CC591078
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tBuxzdW4a-d4BoidLhsgKswnsiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/18c8d5-089a-470e-906d-dc4e7988a28a/1/tBuxzdW4a-d4BoidLhsgKswnsiU.mft
Manifest number: 024D
Signing time: Sun 08 Jun 2025 08:00:45 +0000
Manifest this update: Sun 08 Jun 2025 08:00:45 +0000
Manifest next update: Mon 09 Jun 2025 08:00:45 +0000
Files and hashes: 1: 7E7gyymF8j2toEenFO04AQuZbVQ.roa (hash: HKny0hIiEORMsHrCnF3pLBTGlpUFzpGxVsMxMmuOnho=)
2: tBuxzdW4a-d4BoidLhsgKswnsiU.crl (hash: DDXoNiZkNJ4c0iUa+uzGopUJQSveqmBnRtWVYh7EK9A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/18c8d5-089a-470e-906d-dc4e7988a28a/1/tBuxzdW4a-d4BoidLhsgKswnsiU.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/18c8d5-089a-470e-906d-dc4e7988a28a/1/tBuxzdW4a-d4BoidLhsgKswnsiU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tBuxzdW4a-d4BoidLhsgKswnsiU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:8e:69:20:ba:7e:c0:f0:42:9f:44:84:cc:59:10:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b41bb1cdd5b86be77806889d2e1b202acc27b225
Validity
Not Before: Jun 8 08:00:45 2025 GMT
Not After : Jun 9 08:00:45 2025 GMT
Subject: CN=d52a562c04c086dccb1d09300537cb9a4b05163c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:62:23:e3:58:44:6c:e9:24:06:ea:7d:3c:38:
bb:e6:b3:34:31:95:e3:91:4e:4a:ae:d4:be:2f:52:
a6:1f:99:50:01:ab:52:94:29:28:b7:d5:91:77:f1:
ec:8b:39:26:17:9e:3c:46:ad:59:1d:cb:d4:61:57:
ca:fa:64:97:af:74:4e:d7:52:f7:24:ca:ee:54:d2:
f5:63:76:8c:21:d4:a8:0c:6f:05:47:e4:c5:80:f2:
90:fc:44:7d:2a:ab:de:e4:4c:32:df:c3:fa:2e:13:
a7:fe:2b:e0:34:90:3a:a0:01:14:cc:b1:6d:9c:2d:
32:ad:c9:b5:d8:cc:2a:22:5b:49:28:20:92:a2:49:
da:c3:80:0a:60:3f:87:cd:eb:3f:ce:46:d0:a1:2e:
16:7f:0e:c7:0b:7f:f2:58:cc:cb:b0:c5:93:e5:5b:
87:f7:d6:91:00:0f:bf:d8:af:dd:1b:b9:5d:34:16:
22:98:6e:60:22:c2:5e:54:e6:83:e2:91:c1:81:dd:
c7:71:27:68:42:24:ab:72:74:9d:3c:b1:ea:06:10:
12:f8:3a:2e:af:5f:f9:38:32:fc:c9:95:2a:ba:a3:
1f:58:22:48:cc:c5:a0:ff:41:8f:ac:c0:f0:72:89:
fe:74:7b:66:05:19:89:37:1d:9c:2f:91:20:1b:ad:
21:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:2A:56:2C:04:C0:86:DC:CB:1D:09:30:05:37:CB:9A:4B:05:16:3C
X509v3 Authority Key Identifier:
keyid:B4:1B:B1:CD:D5:B8:6B:E7:78:06:88:9D:2E:1B:20:2A:CC:27:B2:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tBuxzdW4a-d4BoidLhsgKswnsiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/18c8d5-089a-470e-906d-dc4e7988a28a/1/tBuxzdW4a-d4BoidLhsgKswnsiU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/18c8d5-089a-470e-906d-dc4e7988a28a/1/tBuxzdW4a-d4BoidLhsgKswnsiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:ea:76:d0:ee:e9:20:4f:2f:a9:ca:b7:b3:18:1d:ad:09:b5:
e4:e6:c6:38:9d:92:f8:2d:c4:43:f1:6d:02:74:71:0e:9c:4c:
26:c6:f9:57:29:4d:b3:7c:9d:fa:64:84:6a:81:1a:e9:2a:13:
da:fd:90:1a:8f:f3:d5:2d:3b:cb:6f:9c:91:2f:81:f8:59:a6:
d9:0c:e4:dc:55:29:51:9c:0f:c1:f8:f4:8a:cd:cc:7b:27:b2:
5a:b2:b6:05:f1:9c:09:48:74:3d:87:aa:12:0e:c0:56:29:dd:
c6:b5:0b:28:57:8d:16:aa:92:d5:3b:88:42:a9:bc:ed:82:dc:
82:90:9b:a7:79:ad:66:20:62:cd:59:ce:c9:71:fb:4a:49:a4:
a8:1c:ef:b3:aa:ae:cf:d5:1f:3b:07:c6:ef:4b:0a:88:77:83:
f6:fb:e2:f3:e0:86:f1:52:34:f4:ad:f1:fe:5f:5d:bf:48:51:
20:43:51:26:57:11:0a:43:7e:72:ef:f9:0b:da:e5:34:4d:3c:
dc:23:8f:55:57:de:e9:7a:17:f9:3a:86:78:00:86:4d:a8:a6:
ac:45:55:3e:ad:c8:76:b3:75:7e:b9:4e:0e:5e:50:0d:83:4b:
1c:fc:a1:6d:46:b3:7b:01:d0:91:61:4d:f2:4f:8e:da:47:37:
9a:f1:c3:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 12:50:45 2025 by rpki-client