Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/649a98-339a-4f4b-8750-6e9d3b732b08/1/tWyxebPbXGs2zTMINAgB_tsrfRk.mft
File: tWyxebPbXGs2zTMINAgB_tsrfRk.mft (raw, json)
Hash identifier: neaMX+TqMOCDbnWCkuIXyB1MzM+dN52O7m9Pydo+194=
Subject key identifier: DF:C7:FF:1B:A0:51:78:65:70:46:90:29:58:91:D6:37:F5:09:38:FE
Authority key identifier: B5:6C:B1:79:B3:DB:5C:6B:36:CD:33:08:34:08:01:FE:DB:2B:7D:19
Certificate issuer: /CN=b56cb179b3db5c6b36cd3308340801fedb2b7d19
Certificate serial: 019748FA1A0BBC9E561102E2DFA497DD8A0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tWyxebPbXGs2zTMINAgB_tsrfRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/649a98-339a-4f4b-8750-6e9d3b732b08/1/tWyxebPbXGs2zTMINAgB_tsrfRk.mft
Manifest number: 157E
Signing time: Sat 07 Jun 2025 06:00:39 +0000
Manifest this update: Sat 07 Jun 2025 06:00:39 +0000
Manifest next update: Sun 08 Jun 2025 06:00:39 +0000
Files and hashes: 1: egERklG4JDoNVaiZcO7pQtm8HwI.roa (hash: UCPCOxDDKaXVSI1SbOM7CcRIC7mRuotxlKVUCRUv8VQ=)
2: tWyxebPbXGs2zTMINAgB_tsrfRk.crl (hash: didQdVhlKrZqyu49S8EV3W5SWevHi6iVcvXtrGLKjC8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/649a98-339a-4f4b-8750-6e9d3b732b08/1/tWyxebPbXGs2zTMINAgB_tsrfRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/649a98-339a-4f4b-8750-6e9d3b732b08/1/tWyxebPbXGs2zTMINAgB_tsrfRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/tWyxebPbXGs2zTMINAgB_tsrfRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:1a:0b:bc:9e:56:11:02:e2:df:a4:97:dd:8a:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b56cb179b3db5c6b36cd3308340801fedb2b7d19
Validity
Not Before: Jun 7 06:00:39 2025 GMT
Not After : Jun 8 06:00:39 2025 GMT
Subject: CN=dfc7ff1ba0517865704690295891d637f50938fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d9:a2:8a:c8:de:87:f7:ff:68:d7:00:ae:66:
8e:d8:c0:0f:43:f0:b3:07:7c:09:4f:fb:a2:f3:ac:
e5:ec:ab:5c:26:cb:7b:d6:dd:b7:ef:c5:1f:19:82:
c7:fa:66:9a:27:02:f9:41:6b:a5:6a:63:0a:e3:67:
54:44:c9:52:8d:4f:39:00:4b:c7:f7:f7:bd:38:3a:
eb:cb:c4:60:fc:2a:6b:f3:6d:04:8d:1d:2e:30:09:
c6:32:58:d1:03:b7:31:43:d9:47:de:10:c3:fd:9e:
b9:d6:50:12:a5:c7:87:ec:5c:12:97:7b:ba:ec:39:
a4:6e:50:22:0b:3d:d3:c4:b9:f2:10:b1:5d:1c:89:
05:27:2b:d8:21:f9:1a:c9:53:6d:f2:2c:80:ca:04:
19:8d:fc:b1:2f:79:ec:22:e4:6d:2d:4e:77:1e:37:
ec:e5:56:ea:0d:20:90:11:75:05:a3:0c:6b:32:35:
5b:95:e4:2f:06:de:8e:4a:63:c7:29:ed:dc:a5:fc:
43:5f:89:a6:f0:3e:9b:32:84:1a:c3:64:58:32:13:
d2:95:a0:98:00:7e:95:da:9f:b4:07:1f:ad:81:0a:
39:bb:0f:cb:02:3a:9a:c2:79:60:24:c5:af:7f:f2:
8a:50:3f:96:1c:f1:2d:00:05:0c:69:cc:ba:45:e2:
fc:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:C7:FF:1B:A0:51:78:65:70:46:90:29:58:91:D6:37:F5:09:38:FE
X509v3 Authority Key Identifier:
keyid:B5:6C:B1:79:B3:DB:5C:6B:36:CD:33:08:34:08:01:FE:DB:2B:7D:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tWyxebPbXGs2zTMINAgB_tsrfRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/649a98-339a-4f4b-8750-6e9d3b732b08/1/tWyxebPbXGs2zTMINAgB_tsrfRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/649a98-339a-4f4b-8750-6e9d3b732b08/1/tWyxebPbXGs2zTMINAgB_tsrfRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:42:8a:2d:99:1b:ec:f4:25:77:30:7f:4d:f5:f6:01:01:2e:
81:38:78:2d:8e:b7:4a:73:02:5c:c3:8d:e7:6b:2d:3f:6b:29:
c0:81:7a:96:e0:67:d5:42:f8:4d:30:1f:97:b1:ae:fb:a1:f6:
f3:19:55:3c:35:f8:7b:b9:7f:e6:da:7a:30:62:9e:ab:6a:98:
4a:7e:71:ea:59:69:2e:d4:50:37:58:f6:24:be:23:7b:f1:16:
1b:5c:95:60:f1:a0:ec:6b:0a:a8:20:30:f5:38:d5:86:58:fc:
5f:e2:cd:b7:1e:04:c7:ad:f1:40:ed:92:66:e5:ea:9e:cb:0c:
6f:14:46:8a:1d:bb:98:95:f5:08:1c:ea:be:9c:e9:b2:f2:33:
c9:b9:bd:ca:a0:53:78:a8:06:91:2d:13:31:95:08:f4:3a:b7:
69:89:eb:3c:26:26:44:e1:94:fd:e9:bb:68:3a:a1:e1:a7:46:
58:1d:d6:82:ab:a2:69:55:fd:a2:33:29:5d:bc:79:2a:7d:4d:
e0:a5:13:af:af:19:c8:41:c8:ed:73:4c:e7:a3:ca:44:b8:08:
4a:a6:42:b7:72:55:4c:0a:4f:63:14:5b:5f:2b:70:f3:73:52:
95:e5:91:10:8a:7f:83:92:62:46:7e:a8:78:90:02:97:5f:4a:
a4:05:21:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 11:40:51 2025 by rpki-client