Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/220b38-77ca-4de4-8b86-9f845c546470/1/TjbM4hQsoYtQWJcVjSblg50rQX8.mft
File: TjbM4hQsoYtQWJcVjSblg50rQX8.mft (raw, json)
Hash identifier: UgPp7iIWoCsLEBH5JtVfUfIlDOY5fxxLTTeK2vsB2mQ=
Subject key identifier: 43:D1:07:C5:A2:40:54:9E:F5:6C:40:0A:C8:CA:2B:57:A9:0D:7C:75
Authority key identifier: 4E:36:CC:E2:14:2C:A1:8B:50:58:97:15:8D:26:E5:83:9D:2B:41:7F
Certificate issuer: /CN=4e36cce2142ca18b505897158d26e5839d2b417f
Certificate serial: 01978847246B29FC8828AC12BAB8472CFDB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TjbM4hQsoYtQWJcVjSblg50rQX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/220b38-77ca-4de4-8b86-9f845c546470/1/TjbM4hQsoYtQWJcVjSblg50rQX8.mft
Manifest number: 159D
Signing time: Thu 19 Jun 2025 13:00:52 +0000
Manifest this update: Thu 19 Jun 2025 13:00:52 +0000
Manifest next update: Fri 20 Jun 2025 13:00:52 +0000
Files and hashes: 1: TjbM4hQsoYtQWJcVjSblg50rQX8.crl (hash: lUYBL2CRIDY9oFDcYG9zPyBw/hZZbNWZg2yPmQT2o+A=)
2: XbP44H3vmNpq_6C_0jvpv9umOf0.roa (hash: DcrY51YDFwazT333yz0LqnUGv8gSeHfRdQ2uMNMEV+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/220b38-77ca-4de4-8b86-9f845c546470/1/TjbM4hQsoYtQWJcVjSblg50rQX8.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/220b38-77ca-4de4-8b86-9f845c546470/1/TjbM4hQsoYtQWJcVjSblg50rQX8.mft
rsync://rpki.ripe.net/repository/DEFAULT/TjbM4hQsoYtQWJcVjSblg50rQX8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 13:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:88:47:24:6b:29:fc:88:28:ac:12:ba:b8:47:2c:fd:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e36cce2142ca18b505897158d26e5839d2b417f
Validity
Not Before: Jun 19 13:00:52 2025 GMT
Not After : Jun 20 13:00:52 2025 GMT
Subject: CN=43d107c5a240549ef56c400ac8ca2b57a90d7c75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:78:b6:ed:9d:ae:1e:17:c3:d0:e1:c0:ef:5e:
eb:c5:66:c1:05:57:be:74:85:8a:85:75:5a:da:93:
c2:41:04:de:60:99:4c:91:d8:dc:83:07:92:5d:74:
2b:7e:c9:3f:ec:9f:af:a5:ec:4a:5d:b8:08:95:d7:
f6:7a:60:0d:97:cf:5d:53:4a:a2:86:5a:04:37:6a:
8b:a5:01:1e:d6:99:26:06:05:3c:6d:02:77:59:15:
b4:4b:d2:25:de:b8:b8:ed:97:cf:08:9d:5b:0b:3a:
59:9c:c8:d2:58:bf:7e:c6:4c:0e:27:59:ff:8e:f8:
ca:dd:4d:14:e8:f7:60:08:27:25:80:7d:d4:93:b3:
f4:bf:0e:c7:a3:8e:6a:c0:51:51:28:77:69:2c:a2:
43:44:0d:29:3d:bd:5d:d0:38:f5:7e:15:a5:cf:60:
f3:dd:24:42:48:43:73:1b:ef:1b:ff:e2:62:9f:f5:
ca:24:c2:7b:3d:85:67:b4:10:36:fd:fb:48:e4:7d:
f0:08:96:d0:29:57:f3:70:b9:c9:99:d1:b2:78:57:
25:09:ee:27:38:9e:00:b5:38:6e:02:43:ef:c0:a9:
a0:6c:6f:60:08:54:6b:c8:e3:c7:88:a2:39:47:5e:
4f:76:38:94:29:da:10:9d:77:b9:8b:e6:3c:58:83:
0f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:D1:07:C5:A2:40:54:9E:F5:6C:40:0A:C8:CA:2B:57:A9:0D:7C:75
X509v3 Authority Key Identifier:
keyid:4E:36:CC:E2:14:2C:A1:8B:50:58:97:15:8D:26:E5:83:9D:2B:41:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TjbM4hQsoYtQWJcVjSblg50rQX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/220b38-77ca-4de4-8b86-9f845c546470/1/TjbM4hQsoYtQWJcVjSblg50rQX8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/220b38-77ca-4de4-8b86-9f845c546470/1/TjbM4hQsoYtQWJcVjSblg50rQX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:6c:11:aa:2b:e3:83:c1:1d:e5:30:10:d4:48:21:f6:4e:7c:
76:dd:ae:ee:be:b2:cf:1e:ec:74:6b:f1:29:c7:8c:ae:04:a0:
28:8d:31:4c:85:82:2f:94:3a:3e:94:fe:71:0b:fe:cf:e0:c7:
bc:1d:98:2d:6b:8b:9c:26:81:27:e3:94:53:f4:99:13:9b:6c:
b3:de:af:f6:48:92:53:05:f0:cb:77:98:2f:20:38:38:48:06:
e7:29:52:9c:37:f3:a8:53:3d:46:08:6f:9c:2d:cf:de:27:07:
15:73:50:78:28:ca:fd:bb:83:51:6b:3f:f2:a6:14:fe:ed:7b:
44:26:fd:69:f1:db:f1:c4:03:09:ad:eb:2f:d1:a1:a1:2a:dc:
89:cd:fe:cb:a4:24:bc:07:57:b1:8a:c2:5b:2f:67:f4:2b:67:
f2:da:c7:09:07:fe:7c:58:aa:14:30:a9:e2:07:4a:58:bf:ca:
18:f7:8d:6f:9b:e2:e8:4e:b0:99:d4:55:22:e7:c8:93:60:8c:
76:66:62:b6:cd:25:c0:04:e5:39:14:9f:73:39:34:dd:60:ea:
c9:6e:5f:05:77:60:24:cc:5c:6a:55:08:8e:1c:c0:30:8b:f2:
7a:ce:d3:1d:95:01:7b:ec:e8:38:70:53:9f:20:df:c7:c8:ff:
4d:2b:92:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 21:32:46 2025 by rpki-client