Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/4c3e19-a489-4e3a-a3a2-7e52e749c3ad/1/tYe8Eust4poQJrj1a-jUafL1jPM.mft
File: tYe8Eust4poQJrj1a-jUafL1jPM.mft (raw, json)
Hash identifier: pip7/X69iedVDq/hwD/tI1S+IqnySfv7+7eHZ1kMSOE=
Subject key identifier: 85:59:70:9E:09:EB:00:50:CA:8A:C6:DE:20:1F:E5:BF:AD:F2:25:9F
Authority key identifier: B5:87:BC:12:EB:2D:E2:9A:10:26:B8:F5:6B:E8:D4:69:F2:F5:8C:F3
Certificate issuer: /CN=b587bc12eb2de29a1026b8f56be8d469f2f58cf3
Certificate serial: 0197481E1C894E9F776B481E97A98EA11221
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tYe8Eust4poQJrj1a-jUafL1jPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/4c3e19-a489-4e3a-a3a2-7e52e749c3ad/1/tYe8Eust4poQJrj1a-jUafL1jPM.mft
Manifest number: 157B
Signing time: Sat 07 Jun 2025 02:00:22 +0000
Manifest this update: Sat 07 Jun 2025 02:00:22 +0000
Manifest next update: Sun 08 Jun 2025 02:00:22 +0000
Files and hashes: 1: SRbcYTDvBK2K42GBZURfc-9owLk.roa (hash: ou7G18aw8/QVFexo/f3lobAxj/5Hzi02IWmge/V7dxQ=)
2: tYe8Eust4poQJrj1a-jUafL1jPM.crl (hash: /e2vRkZocZ0AKkiPvqJ3OBuO5aE1vJ8UHfVhB7266Ts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/4c3e19-a489-4e3a-a3a2-7e52e749c3ad/1/tYe8Eust4poQJrj1a-jUafL1jPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/4c3e19-a489-4e3a-a3a2-7e52e749c3ad/1/tYe8Eust4poQJrj1a-jUafL1jPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/tYe8Eust4poQJrj1a-jUafL1jPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:1e:1c:89:4e:9f:77:6b:48:1e:97:a9:8e:a1:12:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b587bc12eb2de29a1026b8f56be8d469f2f58cf3
Validity
Not Before: Jun 7 02:00:22 2025 GMT
Not After : Jun 8 02:00:22 2025 GMT
Subject: CN=8559709e09eb0050ca8ac6de201fe5bfadf2259f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:a8:af:53:71:6f:d3:60:f7:dc:ca:f9:4f:e3:
e6:a4:af:09:b8:a1:37:6b:2e:e0:14:02:6d:41:64:
dc:27:fd:11:07:bd:ec:a8:3e:e2:85:10:d8:19:44:
1f:b7:45:ca:34:d4:25:fd:04:d0:ba:a4:2a:10:02:
3a:fe:b2:00:1e:1e:88:75:9c:ad:ca:1d:ac:1e:6d:
35:33:aa:26:a7:9d:9c:5a:2b:c8:d8:f2:d2:e0:41:
21:aa:68:0b:b2:ff:3e:fb:9d:25:c3:46:57:e4:5a:
e8:1d:56:62:10:d1:1a:c5:5b:e3:77:d8:16:fb:ba:
f2:c2:9f:50:56:68:56:f8:fa:a1:bc:37:00:cc:6c:
d9:ac:fb:f6:44:d2:30:cf:ef:7f:f0:98:c7:47:09:
05:2c:b5:76:34:52:fe:04:bc:7e:18:3f:67:c4:7d:
e2:e4:72:a4:27:24:ba:fc:b1:91:45:23:86:ee:2d:
29:69:bb:4c:38:c2:1e:d6:19:51:74:93:98:22:7a:
e3:02:99:dd:b7:fd:62:f8:a7:53:6f:bd:9a:8b:01:
af:04:b4:f7:b7:9f:5a:b0:bf:74:93:49:3a:7b:9b:
f5:a9:56:34:00:0a:ef:9e:81:cb:d2:4d:c1:e3:fe:
2d:69:bd:29:38:00:a1:a0:b7:fd:fd:7c:9c:69:d9:
af:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:59:70:9E:09:EB:00:50:CA:8A:C6:DE:20:1F:E5:BF:AD:F2:25:9F
X509v3 Authority Key Identifier:
keyid:B5:87:BC:12:EB:2D:E2:9A:10:26:B8:F5:6B:E8:D4:69:F2:F5:8C:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tYe8Eust4poQJrj1a-jUafL1jPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/4c3e19-a489-4e3a-a3a2-7e52e749c3ad/1/tYe8Eust4poQJrj1a-jUafL1jPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/4c3e19-a489-4e3a-a3a2-7e52e749c3ad/1/tYe8Eust4poQJrj1a-jUafL1jPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:a4:95:00:d3:0e:f0:53:66:80:7b:e1:e6:1d:dd:dc:fe:92:
5e:11:ad:b4:0b:3a:4c:09:9f:dc:bd:3e:fc:83:9a:10:3f:5c:
a7:37:9e:b0:10:71:e7:83:0a:0b:18:8e:00:20:c1:15:33:b4:
ff:0a:04:e4:3e:c1:b4:67:73:8d:82:a2:eb:ab:5a:5b:07:74:
68:09:91:a0:82:01:43:f4:2f:c1:d7:1f:2c:05:18:f0:e0:59:
99:31:cc:17:9a:b8:a0:0e:c9:ff:a3:df:5e:00:53:5a:73:31:
6a:01:07:4b:13:53:11:c8:15:ee:e9:1a:8d:11:bd:a5:5e:29:
2e:c4:d5:9f:8f:e7:50:b5:9b:a8:fb:fa:6a:5e:9f:66:cf:90:
17:75:cf:7c:43:0a:2f:5a:4a:f6:47:86:be:69:64:1c:da:ff:
ef:34:bc:15:ba:09:27:ac:7d:3d:e7:a1:4e:34:0c:bf:8f:48:
9b:ab:26:9c:46:15:6c:bf:47:26:2b:fc:9a:9b:da:16:e0:ee:
08:5c:c1:50:8d:05:7c:51:ae:99:47:3f:8f:2c:9d:45:7d:00:
8d:bf:b8:07:15:b4:a2:55:83:c4:f8:64:93:d0:70:68:3c:b5:
17:9d:a9:81:b3:2d:f7:65:8a:c8:64:d1:c9:44:7a:80:5d:29:
fd:7c:fa:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:01:21 2025 by rpki-client