Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/b22c1e-ca4c-481e-91a2-5c93239e5e2e/1/tp0ot9AoyruWhKgOFLqvFcpv0vY.mft
File: tp0ot9AoyruWhKgOFLqvFcpv0vY.mft (raw, json)
Hash identifier: mZMLAexhDROf52ZbXGbbqVwFo+8rUbfYvfpSM8stN7o=
Subject key identifier: 7A:7B:84:73:92:42:90:D5:2A:56:A0:BA:54:5D:0C:8D:06:C7:92:DD
Authority key identifier: B6:9D:28:B7:D0:28:CA:BB:96:84:A8:0E:14:BA:AF:15:CA:6F:D2:F6
Certificate issuer: /CN=b69d28b7d028cabb9684a80e14baaf15ca6fd2f6
Certificate serial: 019848C047CAD36333BD846C59AAD9F72C84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tp0ot9AoyruWhKgOFLqvFcpv0vY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/b22c1e-ca4c-481e-91a2-5c93239e5e2e/1/tp0ot9AoyruWhKgOFLqvFcpv0vY.mft
Manifest number: 1601
Signing time: Sat 26 Jul 2025 22:00:17 +0000
Manifest this update: Sat 26 Jul 2025 22:00:17 +0000
Manifest next update: Sun 27 Jul 2025 22:00:17 +0000
Files and hashes: 1: BWKFYtuMXyE_lLT4h0W6XfTBenI.roa (hash: fLpCOLgiuzK6uz2EqJr6SiyMyUYxX5Pc6xAMSALFqDM=)
2: tp0ot9AoyruWhKgOFLqvFcpv0vY.crl (hash: Wb2VZxRyYfT8V8KjGlkks06wg2VyAjAcF7Wp+oKWx6k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/b22c1e-ca4c-481e-91a2-5c93239e5e2e/1/tp0ot9AoyruWhKgOFLqvFcpv0vY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/b22c1e-ca4c-481e-91a2-5c93239e5e2e/1/tp0ot9AoyruWhKgOFLqvFcpv0vY.mft
rsync://rpki.ripe.net/repository/DEFAULT/tp0ot9AoyruWhKgOFLqvFcpv0vY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:c0:47:ca:d3:63:33:bd:84:6c:59:aa:d9:f7:2c:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b69d28b7d028cabb9684a80e14baaf15ca6fd2f6
Validity
Not Before: Jul 26 22:00:17 2025 GMT
Not After : Jul 27 22:00:17 2025 GMT
Subject: CN=7a7b8473924290d52a56a0ba545d0c8d06c792dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:ec:e4:6c:91:d5:b2:07:12:d7:26:bb:34:0b:
f4:20:f2:d1:21:c5:05:67:47:e9:d8:a2:54:b7:bc:
ad:ad:18:21:87:05:bb:d5:54:ca:a8:d2:da:5b:ce:
0b:31:3a:c9:4f:32:ba:e4:78:a9:15:0e:e2:c6:77:
00:87:df:89:0e:6f:94:de:9d:ea:84:fe:e5:97:9b:
bf:e0:45:bb:8e:cf:e6:75:7a:50:42:38:17:7f:0e:
61:db:46:80:fe:af:01:8e:a9:23:fd:09:f3:90:98:
37:9a:8c:fe:35:be:dd:48:82:fa:88:b5:9f:2b:ef:
bb:f1:ab:4a:67:05:ba:ca:d0:4e:78:49:63:5d:62:
b2:51:39:64:d2:ca:d8:39:2e:ea:af:46:0b:93:1f:
be:92:3e:b9:e3:be:2e:e7:2f:bc:72:a2:ba:40:75:
9c:80:29:e6:15:20:ac:89:78:98:45:8b:b7:a6:6e:
8c:a9:4f:c7:d3:e4:60:e3:92:a7:ab:fc:48:6a:66:
54:62:a9:8a:ad:90:09:71:17:62:db:56:cd:cf:f8:
21:6c:ac:0b:c9:d3:a6:7e:13:1c:b3:49:69:e6:f8:
a3:5a:01:be:c0:51:b8:b0:d6:3f:7c:01:b5:a0:9b:
49:50:48:77:9f:b0:9b:e6:cd:df:ce:62:53:fe:2e:
af:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:7B:84:73:92:42:90:D5:2A:56:A0:BA:54:5D:0C:8D:06:C7:92:DD
X509v3 Authority Key Identifier:
keyid:B6:9D:28:B7:D0:28:CA:BB:96:84:A8:0E:14:BA:AF:15:CA:6F:D2:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tp0ot9AoyruWhKgOFLqvFcpv0vY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/b22c1e-ca4c-481e-91a2-5c93239e5e2e/1/tp0ot9AoyruWhKgOFLqvFcpv0vY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/b22c1e-ca4c-481e-91a2-5c93239e5e2e/1/tp0ot9AoyruWhKgOFLqvFcpv0vY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:5f:8a:22:3f:2a:a1:bc:7c:9b:dc:ea:26:d1:49:61:67:b2:
a1:7b:ef:e4:1e:80:ed:ef:4e:f3:14:18:d9:e8:fa:be:64:71:
04:30:fa:a1:d1:94:ad:5a:4d:85:56:32:f0:b3:c0:0f:80:57:
41:eb:15:2e:82:77:c1:90:2b:61:71:79:d8:c1:51:f8:60:67:
d6:76:b5:96:8c:26:c0:72:f2:5b:d5:8a:4a:80:f3:47:04:17:
82:cf:49:d8:f7:cf:52:8d:4c:ee:1e:70:ab:5f:db:27:5f:88:
89:16:84:5f:cd:a5:ed:ca:63:6e:35:b8:bd:ea:1e:e0:8d:3a:
6c:e2:f5:98:19:40:06:7d:60:f2:1d:37:0c:f2:00:95:03:97:
1e:78:d7:63:a7:9a:3d:27:05:65:5f:4d:2e:0f:97:67:7e:b6:
58:31:4c:57:d6:43:f0:26:72:32:6e:e4:38:26:67:8d:69:22:
9c:b6:69:20:44:4a:a5:88:dd:bd:36:72:bf:92:dd:0e:2c:8f:
20:5b:c0:0a:d4:fd:0e:98:1e:33:22:d8:94:43:18:43:cb:3a:
bb:0f:a6:49:3e:3f:f4:79:e1:9c:28:53:22:28:dc:85:67:3f:
1d:4a:cc:bb:6f:8c:a0:81:01:9c:19:c2:63:ab:80:e8:c8:0a:
b9:cd:b1:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:14:10 2025 by rpki-client