Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/c7bb18-df0b-450b-bd11-870828808f88/1/tSF6hPcV6kjlzDeDsTjOjH5wOYw.mft
File: tSF6hPcV6kjlzDeDsTjOjH5wOYw.mft (raw, json)
Hash identifier: uqKnixaAZgUcYEuD5nU9/wujt8nAPmz+8K+guvjJr/E=
Subject key identifier: B7:B9:A1:20:BA:E5:26:81:4F:89:4A:88:05:1B:2F:40:8F:2B:73:02
Authority key identifier: B5:21:7A:84:F7:15:EA:48:E5:CC:37:83:B1:38:CE:8C:7E:70:39:8C
Certificate issuer: /CN=b5217a84f715ea48e5cc3783b138ce8c7e70398c
Certificate serial: 0197500EDC9619064D4E8F25C8D84B3E7789
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tSF6hPcV6kjlzDeDsTjOjH5wOYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/c7bb18-df0b-450b-bd11-870828808f88/1/tSF6hPcV6kjlzDeDsTjOjH5wOYw.mft
Manifest number: 0B45
Signing time: Sun 08 Jun 2025 15:00:40 +0000
Manifest this update: Sun 08 Jun 2025 15:00:40 +0000
Manifest next update: Mon 09 Jun 2025 15:00:40 +0000
Files and hashes: 1: sEcAqep2NyLTkuYW41YUgHA9f4w.roa (hash: 3/7vZf5AuYQ6PDHss1zXReAWYubN+OUgtUWtMk8fZcY=)
2: tSF6hPcV6kjlzDeDsTjOjH5wOYw.crl (hash: 3zuJ4LBNNPPiqmUI8CJMbQujexljdIiqhf55Xr6pcX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/c7bb18-df0b-450b-bd11-870828808f88/1/tSF6hPcV6kjlzDeDsTjOjH5wOYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/c7bb18-df0b-450b-bd11-870828808f88/1/tSF6hPcV6kjlzDeDsTjOjH5wOYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tSF6hPcV6kjlzDeDsTjOjH5wOYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 15:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:0e:dc:96:19:06:4d:4e:8f:25:c8:d8:4b:3e:77:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5217a84f715ea48e5cc3783b138ce8c7e70398c
Validity
Not Before: Jun 8 15:00:40 2025 GMT
Not After : Jun 9 15:00:40 2025 GMT
Subject: CN=b7b9a120bae526814f894a88051b2f408f2b7302
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:19:e6:f1:18:77:6b:c8:d7:1e:fe:e0:70:6e:
2f:24:73:13:03:d0:0b:84:ac:77:87:86:b9:b5:e5:
49:9f:e2:d0:51:05:7e:20:4e:0a:8a:dd:e8:4d:6a:
b2:7c:f6:1e:5b:1d:d0:f9:07:6b:db:4d:d0:82:a3:
64:fb:72:f3:b3:5c:12:06:86:06:4c:b6:72:38:01:
1c:0c:4e:d8:c9:fd:f4:89:1a:bc:5a:fa:8d:ce:1d:
53:5d:75:41:ea:ef:cf:aa:cf:5f:36:7e:3c:00:08:
16:4e:b0:05:23:a5:0d:01:8f:3a:7b:9b:64:34:a6:
ba:ea:b7:e6:bf:b7:da:c7:f8:20:a1:b1:12:5a:a0:
75:2e:41:e4:b0:7a:27:04:c5:6d:22:19:83:f7:7b:
c5:59:ff:6a:97:f2:25:17:ed:da:8c:3e:0e:76:c1:
cb:1b:3c:df:84:7e:c8:88:6c:92:4f:67:a7:f6:3f:
14:47:a0:30:f2:3c:f9:37:44:e6:9c:1b:b9:55:76:
99:20:e6:da:fe:8b:7e:84:3d:1c:6b:ba:fe:b5:20:
92:af:d9:df:47:7c:26:5b:f9:bb:3b:6c:a9:7a:5e:
a2:4d:a1:79:ea:52:1a:ac:d9:6b:17:16:33:b8:94:
b4:45:eb:3e:e7:7a:cd:5a:3f:81:b6:d0:66:ba:1e:
28:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:B9:A1:20:BA:E5:26:81:4F:89:4A:88:05:1B:2F:40:8F:2B:73:02
X509v3 Authority Key Identifier:
keyid:B5:21:7A:84:F7:15:EA:48:E5:CC:37:83:B1:38:CE:8C:7E:70:39:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tSF6hPcV6kjlzDeDsTjOjH5wOYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c7bb18-df0b-450b-bd11-870828808f88/1/tSF6hPcV6kjlzDeDsTjOjH5wOYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c7bb18-df0b-450b-bd11-870828808f88/1/tSF6hPcV6kjlzDeDsTjOjH5wOYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:0d:77:a7:42:e4:d2:a7:3b:eb:74:ce:ff:4a:88:0a:7d:cf:
e7:5e:53:84:84:49:e9:aa:b9:4c:be:ca:f6:1c:7a:8a:4d:fa:
a9:45:2a:1f:02:d5:36:0c:a0:a3:cb:bd:d6:12:d8:82:8e:fa:
b4:5d:d8:1e:e6:b1:a6:fd:8a:69:1d:b7:61:aa:87:ee:d1:ea:
c8:10:41:bb:a6:15:40:95:40:e0:d9:24:11:4f:25:8a:f0:bf:
49:83:e1:bf:90:4b:22:01:01:bc:5b:b3:80:d5:95:12:a6:ae:
24:30:7a:5f:ea:f2:2b:e9:4e:73:b2:5f:fe:15:e3:3a:18:6d:
3e:a9:1c:47:2e:d8:0e:ad:4f:21:af:bd:e8:fc:92:d1:a2:7e:
21:a0:ce:1b:ae:71:db:b2:d5:f5:57:96:f2:a3:1a:d9:14:c1:
80:43:16:9c:94:c0:9a:67:9d:7a:75:fb:8a:16:a5:af:a6:cf:
da:f1:27:03:a2:5d:ad:48:63:f2:8d:ff:ce:1a:d1:bd:4d:1d:
97:2a:6d:06:8b:73:29:2a:9a:71:77:7a:37:c2:6a:cf:ae:19:
13:89:2c:92:83:60:99:04:b0:91:28:82:0c:88:cc:a2:69:f3:
a9:4a:51:2d:3b:ee:ab:16:df:be:90:9e:0a:e1:54:99:34:31:
2f:08:29:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:31:36 2025 by rpki-client