Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/d2a9bc-13b1-4b30-b563-209e1f84224e/1/tuD-D69oRJiK8vdE1RbtucXf5xw.mft
File: tuD-D69oRJiK8vdE1RbtucXf5xw.mft (raw, json)
Hash identifier: eVfXmt+4doEEWpbhTMop8XdoIWkft5UvoPlaG9Z1og8=
Subject key identifier: 98:A6:63:C5:52:C2:10:0D:A5:DB:EF:10:39:B8:A5:4B:30:C3:2B:5F
Authority key identifier: B6:E0:FE:0F:AF:68:44:98:8A:F2:F7:44:D5:16:ED:B9:C5:DF:E7:1C
Certificate issuer: /CN=b6e0fe0faf6844988af2f744d516edb9c5dfe71c
Certificate serial: 0197C9827B7A9526B836873643A591058908
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tuD-D69oRJiK8vdE1RbtucXf5xw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/d2a9bc-13b1-4b30-b563-209e1f84224e/1/tuD-D69oRJiK8vdE1RbtucXf5xw.mft
Manifest number: 0D46
Signing time: Wed 02 Jul 2025 05:01:01 +0000
Manifest this update: Wed 02 Jul 2025 05:01:01 +0000
Manifest next update: Thu 03 Jul 2025 05:01:01 +0000
Files and hashes: 1: a_PNkPnx5ou35JrpXNK2_iqC5Yc.roa (hash: iMkdGKK1MTR9CDFy5rjVtC+a2w/5myXmTmA9XTMLkJo=)
2: tuD-D69oRJiK8vdE1RbtucXf5xw.crl (hash: eJ05OF9ow6zhGrRoOh8/iveHc5lnQtM7/+c+pXaUN/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/d2a9bc-13b1-4b30-b563-209e1f84224e/1/tuD-D69oRJiK8vdE1RbtucXf5xw.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/d2a9bc-13b1-4b30-b563-209e1f84224e/1/tuD-D69oRJiK8vdE1RbtucXf5xw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tuD-D69oRJiK8vdE1RbtucXf5xw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 05:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c9:82:7b:7a:95:26:b8:36:87:36:43:a5:91:05:89:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6e0fe0faf6844988af2f744d516edb9c5dfe71c
Validity
Not Before: Jul 2 05:01:01 2025 GMT
Not After : Jul 3 05:01:01 2025 GMT
Subject: CN=98a663c552c2100da5dbef1039b8a54b30c32b5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:6e:d8:f8:ff:e3:c0:2e:35:e2:95:7a:23:71:
26:e7:90:91:c0:af:35:57:b6:dd:02:a2:3a:e3:a9:
d3:00:ec:7a:b4:6c:47:47:dd:06:50:54:26:ef:34:
58:62:71:89:a7:61:db:60:d3:d9:76:e3:68:d7:38:
20:f7:e9:ff:54:63:1e:65:ea:2b:cd:83:7d:2a:79:
66:73:43:fb:53:d2:3a:16:46:d0:0f:31:16:c8:03:
a6:ac:b6:21:f8:4a:e6:b7:4f:c3:65:a0:60:9f:d8:
3f:34:48:e1:66:c9:f5:cc:f6:ee:53:8d:db:17:0e:
03:6a:34:40:77:b7:e1:33:f9:fd:3a:0e:a6:5b:89:
67:48:d0:34:b2:15:7d:70:70:93:06:2a:7e:01:e4:
54:6e:d7:56:66:9f:e8:69:1a:b8:a7:5d:48:44:3c:
42:4c:33:6c:cf:76:77:20:f0:57:db:30:2a:65:2b:
15:61:a4:1c:9e:48:15:f2:37:6a:17:ac:86:5d:ed:
34:c7:87:2c:ca:f9:7e:f9:cc:68:c5:3a:83:b9:29:
25:17:1c:ae:2e:b0:df:ad:01:05:51:03:13:ad:5c:
39:72:e2:65:34:d6:b6:64:1d:79:2b:8c:6c:08:10:
54:31:d3:d9:e7:85:50:0a:56:58:b8:a5:9f:fe:81:
c6:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:A6:63:C5:52:C2:10:0D:A5:DB:EF:10:39:B8:A5:4B:30:C3:2B:5F
X509v3 Authority Key Identifier:
keyid:B6:E0:FE:0F:AF:68:44:98:8A:F2:F7:44:D5:16:ED:B9:C5:DF:E7:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tuD-D69oRJiK8vdE1RbtucXf5xw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/d2a9bc-13b1-4b30-b563-209e1f84224e/1/tuD-D69oRJiK8vdE1RbtucXf5xw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/d2a9bc-13b1-4b30-b563-209e1f84224e/1/tuD-D69oRJiK8vdE1RbtucXf5xw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:bb:bd:f6:9e:ea:76:6c:5c:8a:66:cc:88:1b:b5:5a:b5:95:
49:21:e7:c1:92:4b:60:32:8c:06:e7:0a:6c:3d:a7:eb:65:fd:
15:94:75:95:31:eb:9d:7a:5b:83:50:c0:fd:2e:f1:12:bd:74:
18:64:4e:db:92:97:4a:57:76:b1:7f:f0:eb:cd:a4:c8:9d:c1:
83:44:5f:3a:59:73:c9:db:f8:30:7d:6c:09:0b:6c:b3:5f:b2:
f1:f9:1e:e9:dd:b7:47:3f:dd:96:d4:7c:e8:c0:ec:1f:a2:d1:
99:e7:e5:7f:52:ac:4d:3a:47:53:7a:0e:22:d5:96:3c:5e:e1:
f9:e8:ed:f0:bb:dc:6f:18:50:07:46:95:14:20:14:8f:44:e3:
40:e3:67:52:13:23:24:53:1f:93:7a:f2:39:8c:7c:7e:e2:e9:
1d:2f:4c:e5:5c:86:2e:b4:2a:f8:89:c4:95:86:2e:07:43:69:
21:ca:77:be:52:dd:6a:cd:65:bd:6d:94:9a:65:e7:de:62:c3:
11:12:09:63:a2:4c:e9:74:1c:65:9b:a5:5c:d5:cc:3c:29:23:
fe:4c:fe:42:26:70:70:fa:4c:87:b5:cc:b5:c9:d9:57:34:32:
23:1a:c4:53:20:60:41:10:b1:8b:5e:65:e9:98:67:a3:e8:9a:
9f:6e:33:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 13:19:57 2025 by rpki-client