Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/03b79a-30ed-4d26-8585-9c5d351526b3/1/tDycG90eFSiKuTDUAFGzZTywnno.mft
File: tDycG90eFSiKuTDUAFGzZTywnno.mft (raw, json)
Hash identifier: 2rt/RxUb128WxXYk9dGNJ+n/MOC6e9qH9zsaGb8H5Co=
Subject key identifier: DB:7D:BE:76:91:71:7E:36:C5:10:3B:96:CE:A0:71:D5:C9:EC:7F:02
Authority key identifier: B4:3C:9C:1B:DD:1E:15:28:8A:B9:30:D4:00:51:B3:65:3C:B0:9E:7A
Certificate issuer: /CN=b43c9c1bdd1e15288ab930d40051b3653cb09e7a
Certificate serial: 019748F9F43C035B71852375806C1E399393
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDycG90eFSiKuTDUAFGzZTywnno.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/03b79a-30ed-4d26-8585-9c5d351526b3/1/tDycG90eFSiKuTDUAFGzZTywnno.mft
Manifest number: 157C
Signing time: Sat 07 Jun 2025 06:00:29 +0000
Manifest this update: Sat 07 Jun 2025 06:00:29 +0000
Manifest next update: Sun 08 Jun 2025 06:00:29 +0000
Files and hashes: 1: tDycG90eFSiKuTDUAFGzZTywnno.crl (hash: oY8fHyswrNDRZOcfG6J4q2iPjaxHPYZQnPYiIgeqO/U=)
2: yUpCnFh46Tqx7sCXg4QHc_cNe3o.roa (hash: cp+PmQthE9hblxpquCO9Uz9at9P5Zu4kvGvMw6tU+Ug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/03b79a-30ed-4d26-8585-9c5d351526b3/1/tDycG90eFSiKuTDUAFGzZTywnno.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/03b79a-30ed-4d26-8585-9c5d351526b3/1/tDycG90eFSiKuTDUAFGzZTywnno.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDycG90eFSiKuTDUAFGzZTywnno.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:f9:f4:3c:03:5b:71:85:23:75:80:6c:1e:39:93:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b43c9c1bdd1e15288ab930d40051b3653cb09e7a
Validity
Not Before: Jun 7 06:00:29 2025 GMT
Not After : Jun 8 06:00:29 2025 GMT
Subject: CN=db7dbe7691717e36c5103b96cea071d5c9ec7f02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:4b:07:43:c6:8f:d4:ca:ba:2e:33:9e:9c:ad:
cb:35:9b:29:49:4b:3f:24:da:70:90:fd:2d:77:71:
e3:59:ec:ba:74:35:bf:b6:54:f6:1b:39:39:5a:c0:
9d:6b:15:8f:33:de:01:ac:34:be:3c:6a:01:84:69:
48:df:81:83:e9:e3:6c:01:a9:d8:7c:7d:81:88:ff:
2f:29:8f:78:66:31:a2:32:5e:fc:d9:0d:32:d7:8f:
0a:62:15:93:5c:aa:a9:28:37:5d:13:0e:37:f5:b9:
03:31:9a:23:c1:19:22:cd:8e:69:64:cf:a8:a8:be:
9c:ee:59:84:09:aa:c8:16:e9:80:33:74:79:0b:47:
39:f7:3e:38:cc:5b:ff:a6:22:3e:e4:b7:c9:51:63:
4c:d0:c6:c7:27:f3:f8:bc:95:0c:3c:f3:49:da:eb:
ab:fb:31:0b:a2:45:b0:c4:47:e5:a9:1c:e7:5f:83:
ab:5f:e3:4c:e1:d8:a0:ef:c0:36:6a:b7:7a:75:91:
8e:aa:20:28:46:c2:18:05:c3:72:1a:ba:44:9e:49:
23:33:de:c9:7d:71:bd:91:af:f3:7d:66:66:4f:47:
98:62:ed:dc:dc:22:ad:a0:18:60:99:63:ed:3a:35:
3b:71:97:8d:31:f7:35:ab:87:8f:f3:92:fe:9f:4a:
63:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:7D:BE:76:91:71:7E:36:C5:10:3B:96:CE:A0:71:D5:C9:EC:7F:02
X509v3 Authority Key Identifier:
keyid:B4:3C:9C:1B:DD:1E:15:28:8A:B9:30:D4:00:51:B3:65:3C:B0:9E:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDycG90eFSiKuTDUAFGzZTywnno.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/03b79a-30ed-4d26-8585-9c5d351526b3/1/tDycG90eFSiKuTDUAFGzZTywnno.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/03b79a-30ed-4d26-8585-9c5d351526b3/1/tDycG90eFSiKuTDUAFGzZTywnno.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:fb:74:2c:28:19:ac:7f:c7:49:e0:1d:d5:c8:d4:fd:31:5d:
8f:0f:1f:8d:32:13:fb:a5:cd:83:60:1c:23:b1:b4:30:f9:ac:
12:b1:d4:36:2f:5d:e8:33:73:d0:fd:f8:18:b6:93:51:ab:0a:
6f:b4:12:09:5b:44:f8:fd:ce:0c:ea:a9:b6:3d:7f:fc:f9:a4:
50:6f:6a:7a:c1:2b:c2:9f:8d:8c:1a:f5:58:d7:ba:46:35:fa:
89:9d:d1:5a:ed:89:2e:64:e9:56:5d:35:f0:fa:2b:5a:e4:93:
bb:cd:e8:51:04:88:76:ad:c7:1c:43:d4:2f:29:c2:c2:bf:39:
f2:98:09:d9:77:1e:c4:38:02:56:dd:1e:dc:2e:ac:36:91:43:
5c:32:11:ca:55:77:53:5b:88:49:3e:9b:bf:ae:bb:82:0e:50:
f0:82:a4:e5:d9:93:6d:5d:d0:fb:64:0c:00:4d:1d:34:cf:61:
1a:a7:ba:a8:a4:1d:df:4e:75:bc:74:ff:a5:02:8e:37:5a:bd:
43:97:88:0e:75:bc:85:57:16:5f:7f:ab:07:96:e8:27:5e:f8:
00:f5:5b:7e:9b:3f:79:d3:32:10:f8:5d:be:fd:d6:63:0a:7b:
ee:f6:69:76:9b:50:55:48:99:0a:a5:6a:22:1c:a6:07:8d:cd:
5c:fa:4e:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:20:46 2025 by rpki-client