Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/533416-5192-4944-ab50-813c76ff40b4/1/tUXkNLukc3BtqDNv2gFrsuaLNiM.mft
File: tUXkNLukc3BtqDNv2gFrsuaLNiM.mft (raw, json)
Hash identifier: 30hoZ+/nA8CSjUhMURS+JKmZZ5Bl830B5VoDnufSWf4=
Subject key identifier: 20:87:8E:F1:39:84:93:72:9D:F1:16:60:09:E1:9C:24:97:5E:E5:2C
Authority key identifier: B5:45:E4:34:BB:A4:73:70:6D:A8:33:6F:DA:01:6B:B2:E6:8B:36:23
Certificate issuer: /CN=b545e434bba473706da8336fda016bb2e68b3623
Certificate serial: 0197500EF9BE361871FBF45DEE4EB76F1D22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tUXkNLukc3BtqDNv2gFrsuaLNiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/533416-5192-4944-ab50-813c76ff40b4/1/tUXkNLukc3BtqDNv2gFrsuaLNiM.mft
Manifest number: 1580
Signing time: Sun 08 Jun 2025 15:00:48 +0000
Manifest this update: Sun 08 Jun 2025 15:00:48 +0000
Manifest next update: Mon 09 Jun 2025 15:00:48 +0000
Files and hashes: 1: 8c1jWLNSWx4cTuK9ZEnAPJAmwwU.roa (hash: zNldb7jsDCF4ycQz0X2hLLJLeALZnhbBqN35ToOj1oI=)
2: tUXkNLukc3BtqDNv2gFrsuaLNiM.crl (hash: ihd3/BbWPMcu2/7Cdf7sVdeGGQwHTYx0xmln3tx0sYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/533416-5192-4944-ab50-813c76ff40b4/1/tUXkNLukc3BtqDNv2gFrsuaLNiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/533416-5192-4944-ab50-813c76ff40b4/1/tUXkNLukc3BtqDNv2gFrsuaLNiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/tUXkNLukc3BtqDNv2gFrsuaLNiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 15:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:0e:f9:be:36:18:71:fb:f4:5d:ee:4e:b7:6f:1d:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b545e434bba473706da8336fda016bb2e68b3623
Validity
Not Before: Jun 8 15:00:48 2025 GMT
Not After : Jun 9 15:00:48 2025 GMT
Subject: CN=20878ef1398493729df1166009e19c24975ee52c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:76:2e:23:65:a8:9e:b5:17:a4:ce:2a:70:bc:
60:c0:7d:a0:37:e5:2a:cb:78:1c:7b:2b:34:3d:2b:
fe:0c:90:8b:86:c5:33:be:86:64:c2:c2:23:b4:73:
75:9a:a3:9d:33:8e:27:dc:1d:a3:88:08:2c:de:84:
33:e2:0d:a0:cb:19:88:64:20:22:dc:2c:9d:27:09:
a5:35:56:73:ce:0d:91:a5:b4:a8:6d:2e:cc:a4:7a:
b8:aa:fd:72:de:ad:b4:4e:af:c3:02:10:28:8c:54:
40:32:ea:46:36:a9:be:9d:34:71:08:ef:ca:89:e1:
e2:87:82:c9:e1:6b:e6:a2:a3:1f:a9:30:21:3e:be:
eb:f2:d8:8f:72:b3:4a:1d:11:8b:24:93:d8:71:cf:
e8:b0:f9:a3:a8:62:89:0d:43:db:03:83:14:67:0d:
97:49:ae:0a:e0:35:e7:97:85:bf:89:ce:f8:7d:fc:
be:e8:56:4c:4e:e8:05:71:5b:99:fc:49:d7:85:78:
48:30:d0:9b:38:7f:d6:48:c3:c7:cc:98:47:18:d9:
c4:dd:72:68:87:bf:a9:a4:7a:ca:eb:04:e2:4e:d9:
0a:45:e6:40:31:47:a8:13:d9:6a:4d:ed:7b:e2:94:
5a:68:5d:08:c2:f5:da:62:96:25:1e:08:55:77:f9:
bd:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:87:8E:F1:39:84:93:72:9D:F1:16:60:09:E1:9C:24:97:5E:E5:2C
X509v3 Authority Key Identifier:
keyid:B5:45:E4:34:BB:A4:73:70:6D:A8:33:6F:DA:01:6B:B2:E6:8B:36:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tUXkNLukc3BtqDNv2gFrsuaLNiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/533416-5192-4944-ab50-813c76ff40b4/1/tUXkNLukc3BtqDNv2gFrsuaLNiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/533416-5192-4944-ab50-813c76ff40b4/1/tUXkNLukc3BtqDNv2gFrsuaLNiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:75:45:d1:f4:2c:e4:16:66:92:95:85:de:04:96:29:4c:6d:
45:f5:8e:b3:ff:51:11:0e:d3:10:22:7e:d0:24:e5:e3:b2:24:
ea:d7:58:6b:24:20:5f:0b:71:55:15:9c:ff:5b:95:3c:01:0b:
38:ea:ff:74:93:78:c4:f7:d6:42:79:6b:e4:95:19:74:23:97:
1c:ca:d4:c6:41:6e:9b:85:55:a5:5c:32:55:25:8c:a7:0e:82:
02:e6:46:3b:b4:59:8a:ad:4f:b8:b5:71:6e:67:4b:da:ef:63:
cc:5a:0a:54:29:bd:a9:c4:24:5d:c6:4e:c7:aa:ea:b4:60:e9:
c2:3b:c5:d1:21:c4:dd:89:73:2c:29:55:52:a3:63:60:84:da:
c8:9c:89:b9:1d:b9:24:b5:69:d6:fc:43:b5:69:34:5c:6f:d7:
bb:b6:50:0b:e1:7f:00:9f:93:71:78:66:1e:26:9a:4a:b8:42:
e5:1d:a1:61:38:04:12:3a:65:1f:a5:25:20:b5:88:fc:55:35:
0c:50:07:ae:2d:cd:95:62:1a:90:55:1f:64:1e:3b:a7:44:56:
be:b7:7c:7c:b2:f3:66:fa:7c:62:c0:20:bc:c1:0d:82:07:47:
0a:f4:b0:1d:e2:de:bf:d2:7a:19:8e:11:71:8d:3a:95:8f:b9:
83:f2:17:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:16:07 2025 by rpki-client