Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.mft
File: tQJsmXQJLiIFQkASgfm9_TVsKEI.mft (raw, json)
Hash identifier: fLWkBMR5UmRwyL+lHMMb4yjBv9GS17xrZ9I1Ub1uBNI=
Subject key identifier: 8E:78:B8:D3:3C:BC:4F:12:65:E4:05:1A:ED:EF:F3:AA:F2:A0:0E:8C
Authority key identifier: B5:02:6C:99:74:09:2E:22:05:42:40:12:81:F9:BD:FD:35:6C:28:42
Certificate issuer: /CN=b5026c9974092e220542401281f9bdfd356c2842
Certificate serial: 01974DB2CBBADDDA5F05D328173591B2BCE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tQJsmXQJLiIFQkASgfm9_TVsKEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.mft
Manifest number: 076B
Signing time: Sun 08 Jun 2025 04:00:52 +0000
Manifest this update: Sun 08 Jun 2025 04:00:52 +0000
Manifest next update: Mon 09 Jun 2025 04:00:52 +0000
Files and hashes: 1: JyF5UhD9cVqjqquiR-hK995tZzw.roa (hash: 5AXS3YhQ0/Ke6SUL+/AhBjypj7cC6zgjHgX8v/ujINo=)
2: pTQKkEXtOvhz7EuIYUqt-o1qzFk.roa (hash: OW+foSbaeoc9zsDW/uMWemQINFvQAo39Gw9c3A0iOPI=)
3: tQJsmXQJLiIFQkASgfm9_TVsKEI.crl (hash: RdkbkIFZmEN7IE0Hy9R9dswLBL0mNnKjYFSXwTIFlqg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tQJsmXQJLiIFQkASgfm9_TVsKEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:b2:cb:ba:dd:da:5f:05:d3:28:17:35:91:b2:bc:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5026c9974092e220542401281f9bdfd356c2842
Validity
Not Before: Jun 8 04:00:52 2025 GMT
Not After : Jun 9 04:00:52 2025 GMT
Subject: CN=8e78b8d33cbc4f1265e4051aedeff3aaf2a00e8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:23:39:11:1f:d7:0a:fa:6e:16:9e:3e:64:08:
64:47:85:20:8d:cd:f2:13:75:b0:43:2a:26:f0:87:
cc:45:d9:d9:02:9f:08:54:15:07:ae:8c:ad:0d:50:
38:2c:20:64:1c:4c:d2:6a:24:aa:9c:28:b8:52:88:
16:eb:09:a6:fa:fe:a3:7f:fe:51:d1:8d:40:9b:4c:
25:58:3c:88:2f:1a:2f:f9:3b:79:30:1f:f3:bf:ae:
1e:6a:87:41:14:97:03:79:03:a9:54:7b:22:02:63:
ec:8a:7c:ce:63:0a:b6:76:9a:b4:b1:d0:93:e9:86:
a1:2e:68:8e:99:46:0c:0f:6e:1b:a4:4f:53:70:ea:
22:3c:28:96:55:dd:17:0a:82:7d:5e:c6:fc:98:3e:
42:3c:81:60:10:03:86:b2:5b:52:5c:13:57:e6:bc:
d4:bf:54:cf:b6:b6:36:43:1d:ea:db:b5:07:20:2e:
d5:9c:76:8f:dd:da:11:21:ef:68:3f:6e:82:13:4c:
49:e8:92:60:04:81:71:40:99:63:58:4d:c6:ed:61:
b1:dc:83:b0:c2:a4:51:02:1c:15:f3:46:36:19:b3:
97:9e:1d:eb:6a:db:ba:95:d3:bf:29:c2:6a:f0:51:
08:52:d4:77:67:14:68:de:2d:05:89:8c:19:73:be:
3f:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:78:B8:D3:3C:BC:4F:12:65:E4:05:1A:ED:EF:F3:AA:F2:A0:0E:8C
X509v3 Authority Key Identifier:
keyid:B5:02:6C:99:74:09:2E:22:05:42:40:12:81:F9:BD:FD:35:6C:28:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tQJsmXQJLiIFQkASgfm9_TVsKEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:45:e0:5d:28:51:6d:66:49:aa:98:ba:6f:61:c6:07:08:7e:
ab:23:02:fb:27:5d:c4:1a:dd:7a:04:66:de:72:54:2e:b2:ad:
a2:7f:25:3d:37:e2:62:f7:1d:82:8c:c8:03:d5:70:bf:60:28:
cb:4f:b0:34:1e:17:4b:b1:a2:1c:e1:c1:e2:9f:2c:0a:d0:1b:
bf:cd:43:4b:50:dc:8f:f5:20:7f:47:70:67:7d:d0:57:df:62:
ba:fe:2a:63:f5:1f:ae:7b:68:e5:b5:15:0d:fb:83:4d:0c:8f:
7a:7f:4f:24:38:af:d0:57:ec:25:74:8e:ff:3d:8e:64:79:77:
04:9c:25:38:8b:9f:fd:4d:48:01:b4:98:b0:7f:88:a8:17:04:
3a:26:85:7e:7d:e2:87:04:6a:f8:c1:7d:f3:44:ce:af:64:f8:
60:63:da:1e:3b:4c:79:f6:ea:5c:26:d3:1a:84:60:0f:af:db:
c5:97:7c:41:15:f5:fe:8e:cb:14:dd:78:39:47:13:80:da:48:
35:9c:9b:61:b6:11:d9:88:84:42:77:5b:7b:ff:8e:0a:53:be:
5f:d9:c4:f8:00:32:be:92:b1:cc:d9:ef:32:da:67:f9:75:90:
d6:b7:e8:ee:fb:19:33:d3:d2:2d:38:aa:29:c3:01:62:f3:be:
34:61:d0:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 14:07:16 2025 by rpki-client