Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/8b162c-4e35-4061-81be-79d42882c8c0/1/t9yTan9rpQeCJPgBc2_esNroqfs.mft
File: t9yTan9rpQeCJPgBc2_esNroqfs.mft (raw, json)
Hash identifier: Vsv3+LgKPX+92PE4WPONKztle9saQZfNAPtONlWEwhI=
Subject key identifier: AC:B1:EE:6A:3C:04:A2:AE:5E:9D:26:ED:A9:9D:F9:67:E8:EC:B1:8E
Authority key identifier: B7:DC:93:6A:7F:6B:A5:07:82:24:F8:01:73:6F:DE:B0:DA:E8:A9:FB
Certificate issuer: /CN=b7dc936a7f6ba5078224f801736fdeb0dae8a9fb
Certificate serial: 019753B46BA9B8DE3477FD7405FDDC78E775
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t9yTan9rpQeCJPgBc2_esNroqfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/8b162c-4e35-4061-81be-79d42882c8c0/1/t9yTan9rpQeCJPgBc2_esNroqfs.mft
Manifest number: 1582
Signing time: Mon 09 Jun 2025 08:00:22 +0000
Manifest this update: Mon 09 Jun 2025 08:00:22 +0000
Manifest next update: Tue 10 Jun 2025 08:00:22 +0000
Files and hashes: 1: O8AFVnBt1m_KBZSzBdlAy6IskOk.roa (hash: drC0SH2uIRu+wIVyTkJpGVnxmbNSIHA06selPLS2xnY=)
2: t9yTan9rpQeCJPgBc2_esNroqfs.crl (hash: OuJh5rwGuB54Qr2EFasahsSNUzLCYWd5tCQN5gwU8pw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/8b162c-4e35-4061-81be-79d42882c8c0/1/t9yTan9rpQeCJPgBc2_esNroqfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/8b162c-4e35-4061-81be-79d42882c8c0/1/t9yTan9rpQeCJPgBc2_esNroqfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/t9yTan9rpQeCJPgBc2_esNroqfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:53:b4:6b:a9:b8:de:34:77:fd:74:05:fd:dc:78:e7:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7dc936a7f6ba5078224f801736fdeb0dae8a9fb
Validity
Not Before: Jun 9 08:00:22 2025 GMT
Not After : Jun 10 08:00:22 2025 GMT
Subject: CN=acb1ee6a3c04a2ae5e9d26eda99df967e8ecb18e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6a:0e:0f:dd:d7:ae:dc:07:ea:24:39:4f:df:
a3:09:73:70:b3:0c:c9:e6:0d:1a:d4:65:d3:a7:70:
f9:42:66:dc:2c:26:62:96:09:41:7e:00:53:20:29:
ee:28:cf:27:28:22:d4:8f:b8:88:fc:f9:42:8c:3f:
0a:e9:c8:8c:f2:5a:c5:b4:45:b2:41:3e:90:c3:e7:
9f:bd:9b:e6:92:98:53:f6:19:28:2f:77:37:63:c2:
35:f7:1b:69:5c:5a:b3:fe:ff:93:8f:98:a4:5a:0e:
03:e3:2f:d3:64:3f:6c:0b:9f:a9:73:02:48:14:15:
80:f1:c5:6b:52:f0:7a:7f:67:8f:84:22:df:16:08:
19:70:c6:fb:86:12:19:d1:46:4e:46:58:77:20:59:
92:a1:ed:94:78:47:db:77:ad:40:ec:07:c8:dd:ae:
5d:52:87:63:dd:2b:8f:83:42:c6:88:22:30:78:87:
1a:6b:6d:1a:3d:b7:9b:cc:a3:3b:c0:fb:e8:dd:4c:
68:eb:ea:15:25:35:68:b1:92:0c:e1:f9:47:6f:21:
2a:8c:29:10:99:9f:08:6d:ad:c3:15:a1:e5:fc:36:
d9:74:05:73:1d:63:13:3f:e0:69:60:13:10:d8:ff:
53:2c:79:4d:51:71:29:e3:93:0c:5c:8a:5b:11:da:
b6:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:B1:EE:6A:3C:04:A2:AE:5E:9D:26:ED:A9:9D:F9:67:E8:EC:B1:8E
X509v3 Authority Key Identifier:
keyid:B7:DC:93:6A:7F:6B:A5:07:82:24:F8:01:73:6F:DE:B0:DA:E8:A9:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t9yTan9rpQeCJPgBc2_esNroqfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8b162c-4e35-4061-81be-79d42882c8c0/1/t9yTan9rpQeCJPgBc2_esNroqfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8b162c-4e35-4061-81be-79d42882c8c0/1/t9yTan9rpQeCJPgBc2_esNroqfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:a8:f1:ad:d9:45:1a:85:4a:8d:2a:88:ff:41:1b:c2:59:99:
a1:2e:cc:4f:7e:d9:fa:82:17:20:33:d4:ef:b0:a3:b0:fa:5c:
c2:61:89:6f:0c:5e:d0:18:77:e4:6c:03:82:dd:a0:fa:ca:ab:
0b:2c:04:3d:08:92:e3:e9:15:c3:df:57:f2:14:0a:d9:4f:10:
96:c2:f5:0b:07:c8:bf:7d:1d:b7:3d:ce:73:ac:2b:e7:78:66:
2e:47:60:f2:16:0e:9a:54:2d:db:97:ed:73:96:42:3a:55:63:
00:83:1d:33:6a:b5:5d:ac:a4:6f:85:bb:e1:82:07:58:ac:c1:
d8:02:18:c5:a0:02:c8:2d:ba:5d:7d:ba:ab:35:5d:dd:d2:d1:
8c:ba:e6:b8:9c:bc:fc:58:f5:9f:99:51:35:b8:9b:94:2d:ed:
da:86:cb:8f:d6:af:56:62:36:60:d7:74:8c:2b:e1:c3:8e:8d:
e6:21:b5:b3:f5:01:44:4b:7e:b5:8c:a6:8f:45:cb:57:4f:43:
24:8c:c5:1b:70:ea:e5:98:17:36:43:13:c2:e9:89:43:f2:7a:
99:c9:2b:1b:e2:73:74:ee:7a:e7:d2:7e:b8:36:10:3e:28:ce:
d3:d2:11:f2:f1:a8:cb:0d:b1:91:6a:a2:31:6a:0c:8f:a9:29:
42:12:fc:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 09:39:34 2025 by rpki-client