Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/tOiC9xca9tzczJzXn5jexnV_4Yk.mft
File: tOiC9xca9tzczJzXn5jexnV_4Yk.mft (raw, json)
Hash identifier: 0JfNQU8M9gKjz3We7C4dSQAJsY39wlMMgBSTJfjrTCA=
Subject key identifier: BF:BA:C4:0D:60:61:8B:EA:B4:07:DD:15:9E:1E:29:CD:A9:82:EF:CD
Authority key identifier: B4:E8:82:F7:17:1A:F6:DC:DC:CC:9C:D7:9F:98:DE:C6:75:7F:E1:89
Certificate issuer: /CN=b4e882f7171af6dcdccc9cd79f98dec6757fe189
Certificate serial: 01976A05FABB80D2CDD647C8DA285889BD9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tOiC9xca9tzczJzXn5jexnV_4Yk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/tOiC9xca9tzczJzXn5jexnV_4Yk.mft
Manifest number: 158B
Signing time: Fri 13 Jun 2025 16:01:05 +0000
Manifest this update: Fri 13 Jun 2025 16:01:05 +0000
Manifest next update: Sat 14 Jun 2025 16:01:05 +0000
Files and hashes: 1: WmxX7pBfpD5c2m2kHOUO4M_bBgA.roa (hash: q0DpW8XtR4IxHRwLJz0IGFkpb8cJ4HYo8d4HsEmNl8o=)
2: tOiC9xca9tzczJzXn5jexnV_4Yk.crl (hash: 8h5OwmjhVdCScdx477BOkRyAUO2mh4PocVmzrYl/8D4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/tOiC9xca9tzczJzXn5jexnV_4Yk.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/tOiC9xca9tzczJzXn5jexnV_4Yk.mft
rsync://rpki.ripe.net/repository/DEFAULT/tOiC9xca9tzczJzXn5jexnV_4Yk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6a:05:fa:bb:80:d2:cd:d6:47:c8:da:28:58:89:bd:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4e882f7171af6dcdccc9cd79f98dec6757fe189
Validity
Not Before: Jun 13 16:01:05 2025 GMT
Not After : Jun 14 16:01:05 2025 GMT
Subject: CN=bfbac40d60618beab407dd159e1e29cda982efcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a0:c4:51:50:8c:b7:56:94:6f:b8:f6:16:80:
96:0c:e6:99:24:85:64:90:59:1e:44:15:6a:27:f2:
b5:96:54:dd:90:aa:a3:05:f8:9b:86:24:55:1f:4b:
5f:b5:78:36:39:66:42:e8:e9:3c:a5:8c:0b:d3:f7:
06:18:af:49:c9:15:64:9f:54:e2:6a:ee:82:da:f9:
4b:47:66:f8:77:ef:1b:6e:de:21:89:eb:a9:5b:1e:
75:d4:ab:3a:a1:2f:e4:00:5b:3e:68:25:5c:56:47:
00:00:4d:21:10:d8:30:78:2d:4c:f2:22:59:3b:08:
c9:21:68:65:e0:db:0c:c3:0d:4f:3f:0b:32:c2:57:
f4:68:e8:5a:a6:71:7d:d4:92:3d:9d:e5:67:6a:2e:
14:bf:6c:e0:a9:fb:c8:2e:f1:2b:87:de:4e:e5:ad:
18:fd:4f:a0:6f:7d:24:46:e8:7d:0e:d0:52:2a:e7:
c5:25:6e:b8:57:45:5c:02:86:09:69:6d:15:a6:0e:
b3:ba:14:0d:7e:95:79:dc:24:fa:3b:5b:1a:82:af:
1a:c6:a9:dd:b8:12:7d:e7:70:c2:9d:c8:f1:88:39:
f3:d5:6e:88:dc:b1:22:55:bf:63:4e:ef:85:08:39:
17:83:ac:2d:a5:82:22:ad:4a:60:43:2d:5d:5d:c2:
fb:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:BA:C4:0D:60:61:8B:EA:B4:07:DD:15:9E:1E:29:CD:A9:82:EF:CD
X509v3 Authority Key Identifier:
keyid:B4:E8:82:F7:17:1A:F6:DC:DC:CC:9C:D7:9F:98:DE:C6:75:7F:E1:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tOiC9xca9tzczJzXn5jexnV_4Yk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/tOiC9xca9tzczJzXn5jexnV_4Yk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/tOiC9xca9tzczJzXn5jexnV_4Yk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:5b:8d:e0:56:c0:e9:c8:3a:cf:b3:7b:a4:69:00:17:8d:a4:
89:c1:2c:2e:d1:ec:0a:a9:2d:92:56:9f:ed:9f:33:89:15:fc:
05:e4:11:1f:1e:04:5c:f1:d6:be:6e:81:cc:14:9d:3b:57:a2:
6d:e9:79:42:aa:a4:d0:f1:37:12:e4:3c:da:b0:3e:6e:b7:fb:
d5:0c:20:c7:1f:20:b4:21:52:6d:2a:9b:2f:55:4c:24:58:08:
43:96:a4:dc:d1:c5:5e:95:e0:3e:0d:de:d8:8c:66:33:eb:d8:
cf:d7:63:be:63:98:53:a9:94:33:eb:12:f5:33:51:59:92:20:
00:3c:56:d0:aa:d1:78:1d:18:aa:00:52:bc:06:a1:6e:c2:0d:
a7:e6:11:64:b5:50:56:a6:e7:47:b9:16:6a:c9:2e:7d:ce:5e:
c4:a9:60:f4:0c:cf:c5:a1:fa:59:b4:c0:67:e0:2c:8e:cf:c4:
09:9b:f6:66:0e:b4:70:9f:44:ae:7a:6b:af:8c:cb:16:47:9c:
67:f1:7f:56:ec:25:26:dc:85:c1:a5:cf:05:a0:31:08:0e:70:
af:58:c1:97:3f:b6:74:d1:4b:3a:57:f5:a4:81:61:91:ea:be:
d4:1b:2d:9a:81:2f:d3:7e:77:c9:aa:46:01:7c:fd:a5:e2:7b:
93:67:8d:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 22:59:43 2025 by rpki-client