Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/7edbcf-b90f-4707-b289-a3d377c6feef/1/tv5j7ooj9JFuQFNTHmlQ22wx6AU.mft
File: tv5j7ooj9JFuQFNTHmlQ22wx6AU.mft (raw, json)
Hash identifier: pRaIALgNCHus+aaEiQvSwt0XzBVKRKE5LbGoUo5HUNM=
Subject key identifier: E8:58:AE:93:E5:F6:50:8B:79:6B:94:CE:0B:C8:10:0D:4B:21:AB:E1
Authority key identifier: B6:FE:63:EE:8A:23:F4:91:6E:40:53:53:1E:69:50:DB:6C:31:E8:05
Certificate issuer: /CN=b6fe63ee8a23f4916e4053531e6950db6c31e805
Certificate serial: 019758DAFCFBA4AADB33E53AF5E046FAE931
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tv5j7ooj9JFuQFNTHmlQ22wx6AU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/7edbcf-b90f-4707-b289-a3d377c6feef/1/tv5j7ooj9JFuQFNTHmlQ22wx6AU.mft
Manifest number: 1583
Signing time: Tue 10 Jun 2025 08:00:35 +0000
Manifest this update: Tue 10 Jun 2025 08:00:35 +0000
Manifest next update: Wed 11 Jun 2025 08:00:35 +0000
Files and hashes: 1: TDDnhsWgxkGdG7BfGlC4CIB8hXc.roa (hash: mAFWPEFNFtu12Nez2hG2dDFI+Ij+KVUdoJCzsE5w8Wg=)
2: tv5j7ooj9JFuQFNTHmlQ22wx6AU.crl (hash: tI9DlKepIL89mu09KxylMPWOsA7OF5CwSVHPJCr6Epw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/7edbcf-b90f-4707-b289-a3d377c6feef/1/tv5j7ooj9JFuQFNTHmlQ22wx6AU.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/7edbcf-b90f-4707-b289-a3d377c6feef/1/tv5j7ooj9JFuQFNTHmlQ22wx6AU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tv5j7ooj9JFuQFNTHmlQ22wx6AU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 08:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:58:da:fc:fb:a4:aa:db:33:e5:3a:f5:e0:46:fa:e9:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6fe63ee8a23f4916e4053531e6950db6c31e805
Validity
Not Before: Jun 10 08:00:35 2025 GMT
Not After : Jun 11 08:00:35 2025 GMT
Subject: CN=e858ae93e5f6508b796b94ce0bc8100d4b21abe1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:45:8e:cb:02:9b:83:d2:01:aa:62:47:bc:aa:
fb:e1:7c:e0:99:c8:0f:a5:86:04:98:04:83:1f:2e:
95:5b:ce:0e:fe:69:bf:7e:c6:6d:c8:e0:ed:df:b2:
c2:f5:09:85:6f:8e:38:d2:4e:16:df:17:bc:0e:d6:
57:6b:f6:1e:d9:6c:e4:d3:4b:d4:dd:e6:83:bd:ad:
19:cf:cf:58:cf:cd:9a:a4:08:84:5c:9e:1c:b3:96:
d3:b2:5c:fa:b9:62:64:b2:c9:a7:d7:ad:66:ea:ca:
4f:35:06:68:2d:0d:1e:52:1d:e6:78:d6:be:47:04:
b1:d7:e8:6a:88:56:17:21:c5:a0:f8:b1:1a:28:41:
c3:49:1e:8c:5b:86:e3:65:bd:f6:67:9a:9a:01:d0:
72:84:00:55:2b:fc:89:86:76:b6:c6:c4:0c:a1:74:
de:ea:6d:f7:82:a6:d7:89:77:7d:37:dc:07:47:08:
da:38:a8:58:e8:75:70:38:16:04:02:bc:8d:c9:e3:
2b:b1:d0:85:e3:eb:27:5a:d0:4c:27:87:2e:58:9c:
5b:4a:e7:59:aa:6d:9b:25:d2:87:39:a5:5b:64:24:
a0:1c:2c:97:7c:fe:2c:c3:9e:d2:02:18:f1:30:78:
c7:a8:5d:36:fb:6b:ed:de:10:19:9e:ad:75:7f:fa:
b6:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:58:AE:93:E5:F6:50:8B:79:6B:94:CE:0B:C8:10:0D:4B:21:AB:E1
X509v3 Authority Key Identifier:
keyid:B6:FE:63:EE:8A:23:F4:91:6E:40:53:53:1E:69:50:DB:6C:31:E8:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tv5j7ooj9JFuQFNTHmlQ22wx6AU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/7edbcf-b90f-4707-b289-a3d377c6feef/1/tv5j7ooj9JFuQFNTHmlQ22wx6AU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/7edbcf-b90f-4707-b289-a3d377c6feef/1/tv5j7ooj9JFuQFNTHmlQ22wx6AU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:ba:db:88:35:f3:59:15:7a:7c:f2:a6:be:32:25:03:fc:ee:
dd:23:03:82:d3:46:9e:bc:6c:e6:f8:27:03:a8:d9:94:f2:f9:
6d:2d:5b:8b:97:5b:24:ec:55:0a:ae:76:04:c0:fd:9b:72:02:
c6:34:3e:eb:ce:c3:61:81:cc:e2:24:ce:9d:cc:ba:7a:86:a1:
f0:54:b6:85:6c:b9:b9:93:f5:b5:06:e5:53:b3:61:a3:99:cf:
1b:3b:0a:8d:75:97:ca:ca:05:c7:a0:d1:0f:a7:9c:f3:fb:4b:
82:43:77:f2:25:0a:84:cf:99:10:86:37:91:d4:f0:cb:89:41:
4e:bf:c7:e1:93:e8:55:fe:f0:87:18:c1:ac:ca:d1:b8:d8:a6:
03:73:27:da:16:7d:2b:b8:88:66:1a:7b:bf:54:80:ef:9f:5a:
43:76:4a:6c:73:c7:ff:54:21:e0:d6:cc:c7:9d:8e:da:d7:7f:
bf:5e:fe:66:84:a8:a3:bb:3a:8b:60:09:94:e7:96:cb:eb:12:
e7:ef:a7:a4:45:85:0c:18:93:9e:17:97:81:4e:d3:67:88:f2:
03:48:02:89:f1:7d:fc:fc:56:f1:ca:07:aa:a9:3a:2b:71:67:
52:7a:35:97:a1:a5:b2:2a:48:f6:82:5f:4a:91:8e:dc:0c:5e:
bb:a0:82:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 17:15:32 2025 by rpki-client