Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/tOiC9xca9tzczJzXn5jexnV_4Yk.mft
File: tOiC9xca9tzczJzXn5jexnV_4Yk.mft (raw, json)
Hash identifier: ViO85/p7cL4vDGN6lazolAq4qHC6YemqUk0jW2y6xEY=
Subject key identifier: 1F:89:5A:C3:4E:3F:63:F1:02:A6:4D:35:36:DC:F5:A6:7C:7D:FA:C2
Authority key identifier: B4:E8:82:F7:17:1A:F6:DC:DC:CC:9C:D7:9F:98:DE:C6:75:7F:E1:89
Certificate issuer: /CN=b4e882f7171af6dcdccc9cd79f98dec6757fe189
Certificate serial: 01975E6F6A7175082E7377874E6AE6063DFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tOiC9xca9tzczJzXn5jexnV_4Yk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/tOiC9xca9tzczJzXn5jexnV_4Yk.mft
Manifest number: 1585
Signing time: Wed 11 Jun 2025 10:00:49 +0000
Manifest this update: Wed 11 Jun 2025 10:00:49 +0000
Manifest next update: Thu 12 Jun 2025 10:00:49 +0000
Files and hashes: 1: WmxX7pBfpD5c2m2kHOUO4M_bBgA.roa (hash: q0DpW8XtR4IxHRwLJz0IGFkpb8cJ4HYo8d4HsEmNl8o=)
2: tOiC9xca9tzczJzXn5jexnV_4Yk.crl (hash: 8SmwhMOkwbNZiQKFPvuEA1J/fts0vWUxsEJGlFw0WaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/tOiC9xca9tzczJzXn5jexnV_4Yk.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/tOiC9xca9tzczJzXn5jexnV_4Yk.mft
rsync://rpki.ripe.net/repository/DEFAULT/tOiC9xca9tzczJzXn5jexnV_4Yk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 08:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5e:6f:6a:71:75:08:2e:73:77:87:4e:6a:e6:06:3d:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4e882f7171af6dcdccc9cd79f98dec6757fe189
Validity
Not Before: Jun 11 10:00:49 2025 GMT
Not After : Jun 12 10:00:49 2025 GMT
Subject: CN=1f895ac34e3f63f102a64d3536dcf5a67c7dfac2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:dc:89:d1:82:56:b6:d4:96:61:5e:41:8c:8a:
cf:48:7f:fb:dd:aa:0d:b0:72:7e:4d:e0:75:d7:9a:
30:d4:39:56:26:19:08:7d:2c:b7:91:0d:e2:c0:6c:
88:d3:1f:3f:15:b7:37:d6:30:4a:27:00:51:46:1f:
9e:26:be:8b:b8:ef:35:f2:6d:4d:b6:22:fa:cd:4d:
f4:d0:e8:d6:ad:41:2c:5e:76:64:e4:64:76:87:87:
58:cf:6f:00:d3:2a:be:12:cd:08:22:5f:41:f0:72:
5f:32:42:34:13:55:59:75:75:1c:12:84:0a:79:e5:
03:85:38:84:d3:98:3a:f1:1a:e3:32:08:27:e7:6f:
92:71:a8:62:61:f4:ce:9e:99:b3:55:d1:55:1d:4c:
50:c1:fa:ab:17:36:29:00:bd:4a:d1:9b:46:3d:c5:
3c:6f:3a:f9:68:d2:b6:8b:4a:88:6a:84:38:dd:c6:
5f:b2:b9:65:27:16:84:53:df:35:50:f7:7d:a7:35:
6d:24:1f:f8:13:57:f7:20:b5:91:bb:d7:01:42:29:
f6:c6:5c:6e:f3:53:f5:f2:8e:83:f6:fe:e8:4a:37:
e2:66:5b:38:4c:23:38:8a:0f:d8:ac:af:79:88:22:
c5:94:e0:f2:dc:27:d1:2f:c1:3b:0f:a8:ac:4d:d4:
13:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:89:5A:C3:4E:3F:63:F1:02:A6:4D:35:36:DC:F5:A6:7C:7D:FA:C2
X509v3 Authority Key Identifier:
keyid:B4:E8:82:F7:17:1A:F6:DC:DC:CC:9C:D7:9F:98:DE:C6:75:7F:E1:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tOiC9xca9tzczJzXn5jexnV_4Yk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/tOiC9xca9tzczJzXn5jexnV_4Yk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/tOiC9xca9tzczJzXn5jexnV_4Yk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:0e:7e:eb:be:fb:23:fd:84:33:b7:25:0a:fb:c1:80:82:02:
64:f5:85:a4:6c:ef:34:d0:4f:73:4e:eb:ac:e8:21:14:2f:dd:
d6:09:ad:7c:75:39:a0:0b:8d:42:68:b9:ff:bf:31:81:80:75:
fb:00:fb:8c:a2:12:73:08:29:f0:d3:b1:28:44:31:6a:b3:c9:
5a:51:10:0d:b6:a9:ca:7c:36:af:ad:ac:92:ef:aa:7a:c8:12:
27:8b:b0:5d:af:a6:82:7d:91:74:92:e8:c7:57:4b:79:0b:4d:
55:c8:f3:68:bb:89:61:88:9a:43:00:ed:86:f7:27:fe:89:1c:
08:b9:b6:9c:6e:87:80:49:06:f8:f5:65:df:ef:e4:f2:17:fd:
f8:bd:51:a7:72:92:8f:f9:98:71:f9:a6:b1:c1:e8:59:02:0a:
e0:c3:9f:53:fa:d1:4b:b4:e6:bb:64:43:90:7e:32:7f:5e:4f:
01:23:68:4b:d6:25:a0:58:c7:43:56:ff:c1:0b:78:a1:7d:ed:
13:5e:52:d6:84:32:68:80:67:15:b8:16:28:87:bb:40:e7:9d:
f0:b5:00:62:87:5a:e9:c2:72:27:3b:d2:47:63:75:b9:9d:6a:
c1:84:cb:e0:9d:51:67:85:e6:cb:54:96:55:4d:42:c6:0b:75:
8b:be:c3:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 13:34:43 2025 by rpki-client