Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/d7fb6d-ebbe-43a2-b119-393c45742259/1/tyDzzrDmtZejgUXFp0M2nH9JZuA.mft
File: tyDzzrDmtZejgUXFp0M2nH9JZuA.mft (raw, json)
Hash identifier: T3PegUX5Mtw/BAVoeLZjt0UW/QfSNRLGie6zMzgeFsU=
Subject key identifier: DB:61:07:DF:CB:F2:51:3C:31:55:DA:65:C4:5C:7C:56:D3:82:3D:52
Authority key identifier: B7:20:F3:CE:B0:E6:B5:97:A3:81:45:C5:A7:43:36:9C:7F:49:66:E0
Certificate issuer: /CN=b720f3ceb0e6b597a38145c5a743369c7f4966e0
Certificate serial: 0197C726B2D5BFFC69355446E0E5312D5520
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tyDzzrDmtZejgUXFp0M2nH9JZuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/d7fb6d-ebbe-43a2-b119-393c45742259/1/tyDzzrDmtZejgUXFp0M2nH9JZuA.mft
Manifest number: 0FF9
Signing time: Tue 01 Jul 2025 18:01:31 +0000
Manifest this update: Tue 01 Jul 2025 18:01:31 +0000
Manifest next update: Wed 02 Jul 2025 18:01:31 +0000
Files and hashes: 1: ggC5V29BMdNUn59EruOGoGZJaaQ.roa (hash: ttIpUsiJ4qeM8pCSgboK+Vkbkx0DrAYP7DxfAZL+EN4=)
2: tyDzzrDmtZejgUXFp0M2nH9JZuA.crl (hash: whm480rCiOkn/2HzsmTAir8YDSIuQImN7vK3DciWGhM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/d7fb6d-ebbe-43a2-b119-393c45742259/1/tyDzzrDmtZejgUXFp0M2nH9JZuA.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/d7fb6d-ebbe-43a2-b119-393c45742259/1/tyDzzrDmtZejgUXFp0M2nH9JZuA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tyDzzrDmtZejgUXFp0M2nH9JZuA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 16:57:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c7:26:b2:d5:bf:fc:69:35:54:46:e0:e5:31:2d:55:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b720f3ceb0e6b597a38145c5a743369c7f4966e0
Validity
Not Before: Jul 1 18:01:31 2025 GMT
Not After : Jul 2 18:01:31 2025 GMT
Subject: CN=db6107dfcbf2513c3155da65c45c7c56d3823d52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:00:4a:4f:36:9d:f8:83:ca:d3:27:93:73:9b:
25:0f:b6:ea:4f:2f:e2:9a:97:e7:c8:73:02:5c:dc:
35:f7:e3:37:42:6c:79:1f:d8:89:27:7a:71:aa:fb:
79:86:e5:d1:4b:c3:54:23:5b:75:18:de:39:36:78:
28:34:53:89:a9:7c:73:da:50:20:be:a1:04:a7:2f:
b3:00:02:9a:89:5f:38:c4:15:72:d9:9d:30:e0:87:
72:a6:b9:43:79:0e:33:ff:db:28:05:28:ef:61:92:
0e:22:cd:1f:b9:8b:39:61:40:cf:47:7f:cc:2b:43:
76:03:ea:1d:9f:f3:2c:c1:b8:fc:b0:21:80:13:c6:
a4:34:d7:4b:75:72:19:bc:d7:05:67:47:96:b8:2c:
e7:ff:b2:f7:b2:58:21:1f:93:84:4b:da:db:4b:01:
53:1c:cd:6c:8e:da:37:1d:5c:34:5b:56:c7:b7:4c:
7d:40:af:58:1e:d5:0e:15:af:ab:93:25:30:6f:cc:
2a:ad:86:f8:b7:06:eb:88:fc:c3:72:88:7a:97:3d:
5a:5f:a5:22:24:88:f6:ea:69:38:d8:8e:2f:e2:43:
82:96:29:ce:85:75:a8:4c:52:81:3e:42:9b:a6:3a:
6b:e3:ec:92:93:87:6c:e5:76:8c:26:60:35:24:08:
89:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:61:07:DF:CB:F2:51:3C:31:55:DA:65:C4:5C:7C:56:D3:82:3D:52
X509v3 Authority Key Identifier:
keyid:B7:20:F3:CE:B0:E6:B5:97:A3:81:45:C5:A7:43:36:9C:7F:49:66:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tyDzzrDmtZejgUXFp0M2nH9JZuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/d7fb6d-ebbe-43a2-b119-393c45742259/1/tyDzzrDmtZejgUXFp0M2nH9JZuA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/d7fb6d-ebbe-43a2-b119-393c45742259/1/tyDzzrDmtZejgUXFp0M2nH9JZuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:b9:6f:5d:10:9f:e9:b8:b5:2b:f7:1e:82:d0:12:ee:4b:86:
2d:3e:11:59:28:b8:aa:ae:53:2a:56:f1:ac:eb:88:af:10:77:
73:27:d4:f7:07:80:1e:f8:ef:0d:4f:32:6a:5a:30:28:b5:e6:
fe:e3:b5:57:09:26:61:52:b4:2a:64:ad:ff:34:bf:cd:e6:37:
50:34:c1:15:c2:70:28:0c:d0:d9:f0:49:1d:cd:6c:35:d7:64:
68:ca:9e:19:1a:b7:bc:f2:88:90:ef:95:15:3b:45:52:5c:8b:
87:4f:96:70:31:be:b6:4b:3e:1a:53:e3:61:d5:d2:1e:ef:0c:
d8:79:5e:38:fb:0c:a6:52:1c:e3:88:f6:05:b7:90:6f:d9:73:
6e:0b:38:29:15:94:ab:1d:2f:ff:56:9c:d0:33:d9:9e:d4:cf:
68:f2:b7:37:1d:23:ab:11:04:f9:e1:98:8f:61:8f:f9:21:ae:
34:cb:0b:ee:21:87:2c:c4:97:58:c4:e7:d0:d0:48:10:9c:01:
9a:24:b2:1f:86:58:b6:a3:85:e0:1e:45:40:eb:0e:85:fd:2d:
2d:22:fd:6c:82:22:67:44:71:7e:42:4b:43:1d:ad:fa:52:fb:
08:b0:94:d7:45:0c:07:63:09:b7:b8:22:64:87:0f:2a:74:1e:
9e:44:96:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 00:39:34 2025 by rpki-client