Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/55d584-19a1-47c0-95a6-bc8e0b69ac12/1/tEjWJqkg5C2s0OlI6Wal5LzDwRw.mft
File: tEjWJqkg5C2s0OlI6Wal5LzDwRw.mft (raw, json)
Hash identifier: Ij3f4AUVAS57SVb4E3UVvS7yxL3lshd//X610I9xUFg=
Subject key identifier: A3:B6:FF:CC:49:65:2A:05:0A:AB:B8:B3:E9:79:67:4F:88:9F:51:39
Authority key identifier: B4:48:D6:26:A9:20:E4:2D:AC:D0:E9:48:E9:66:A5:E4:BC:C3:C1:1C
Certificate issuer: /CN=b448d626a920e42dacd0e948e966a5e4bcc3c11c
Certificate serial: 019769CEF793BF0414BB976765C9ACA7BCE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tEjWJqkg5C2s0OlI6Wal5LzDwRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/55d584-19a1-47c0-95a6-bc8e0b69ac12/1/tEjWJqkg5C2s0OlI6Wal5LzDwRw.mft
Manifest number: 0FEC
Signing time: Fri 13 Jun 2025 15:01:00 +0000
Manifest this update: Fri 13 Jun 2025 15:01:00 +0000
Manifest next update: Sat 14 Jun 2025 15:01:00 +0000
Files and hashes: 1: Tm8yT_3vBgLrxw1Lr4A3GN1Cjk4.roa (hash: cpwfuPoZQp9+xwJvstUEZKWWh0LDOj40EbCeSJBVSfw=)
2: tEjWJqkg5C2s0OlI6Wal5LzDwRw.crl (hash: n7mcZFyR337JUGmEVwZEkuKl2npury1DQ8wDs+iBghg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/55d584-19a1-47c0-95a6-bc8e0b69ac12/1/tEjWJqkg5C2s0OlI6Wal5LzDwRw.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/55d584-19a1-47c0-95a6-bc8e0b69ac12/1/tEjWJqkg5C2s0OlI6Wal5LzDwRw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tEjWJqkg5C2s0OlI6Wal5LzDwRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:ce:f7:93:bf:04:14:bb:97:67:65:c9:ac:a7:bc:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b448d626a920e42dacd0e948e966a5e4bcc3c11c
Validity
Not Before: Jun 13 15:01:00 2025 GMT
Not After : Jun 14 15:01:00 2025 GMT
Subject: CN=a3b6ffcc49652a050aabb8b3e979674f889f5139
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:64:30:10:4c:0a:a4:00:db:05:0c:30:75:96:
55:c8:58:c6:9a:34:4d:fc:a2:2a:ff:e4:e5:c9:a0:
e9:2f:f7:83:f5:fb:8e:60:e8:e1:48:b6:cc:80:5f:
00:98:18:e4:54:ff:b3:40:46:40:88:89:df:e4:41:
2a:07:95:a2:73:df:3d:cf:db:07:28:35:40:25:9c:
f1:cd:a3:f9:de:fe:04:d1:e4:08:a5:80:60:b8:5d:
28:fd:dd:47:8d:9f:21:94:67:ce:dc:d9:2a:24:a8:
1a:4b:8f:8e:14:35:d4:df:6d:b3:3c:84:2f:e9:ef:
f1:94:e3:14:be:52:1a:04:07:ca:60:60:a6:a7:af:
e3:ff:84:ec:3c:2e:9c:00:3d:db:46:c7:bf:24:f4:
91:d6:a4:28:38:c6:8f:07:7c:9b:ec:51:b4:f2:12:
80:84:7a:dc:50:7a:60:c3:c6:c1:ec:f0:d0:ec:63:
56:37:85:20:1f:8d:91:55:5e:5b:3e:e8:cf:78:21:
b8:48:17:cf:19:8e:3a:0b:0e:3d:40:6e:4a:c1:93:
a1:b7:67:e7:83:e7:cd:14:79:6c:24:eb:82:5b:34:
34:e5:89:d9:19:04:88:f0:10:1d:d0:31:81:d5:ab:
e6:b9:a6:75:aa:e3:cf:e0:6f:ca:4c:02:ce:42:0f:
f1:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:B6:FF:CC:49:65:2A:05:0A:AB:B8:B3:E9:79:67:4F:88:9F:51:39
X509v3 Authority Key Identifier:
keyid:B4:48:D6:26:A9:20:E4:2D:AC:D0:E9:48:E9:66:A5:E4:BC:C3:C1:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tEjWJqkg5C2s0OlI6Wal5LzDwRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/55d584-19a1-47c0-95a6-bc8e0b69ac12/1/tEjWJqkg5C2s0OlI6Wal5LzDwRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/55d584-19a1-47c0-95a6-bc8e0b69ac12/1/tEjWJqkg5C2s0OlI6Wal5LzDwRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:bb:68:25:6a:34:5a:e3:fd:60:df:08:72:9a:05:6d:b5:ba:
c4:aa:f0:7b:c6:69:30:91:45:f7:db:23:e2:ea:0f:ac:d4:84:
e3:f9:c3:c9:c7:ec:c4:16:eb:8d:35:b8:a8:70:0f:7a:33:02:
be:d0:09:57:e5:57:00:9a:cd:22:ee:2f:c1:f5:8c:f3:39:03:
98:76:de:7b:1c:d4:36:16:cd:c2:fa:72:6d:01:67:e1:c5:43:
fa:8c:0e:15:69:4a:82:56:f7:5b:27:d9:5a:90:2a:6f:19:35:
b7:97:79:4e:7f:6a:8e:55:f0:b7:9f:b6:ba:6f:a0:4a:19:d1:
95:e7:f0:7c:b3:f6:80:72:7b:6a:78:93:62:e7:27:b0:97:f7:
19:17:ff:c2:8e:eb:bb:63:4b:83:f6:14:c6:71:08:a6:97:22:
12:1b:bf:87:57:d8:08:c1:86:ff:24:07:bf:f9:ea:aa:15:b0:
18:8d:aa:e1:54:78:96:a1:ae:35:a5:f8:51:0a:4f:26:50:4f:
e6:db:f3:46:9e:23:25:c1:46:4e:a5:bf:81:be:cd:36:08:61:
f4:ba:fd:70:0f:11:dd:c2:1a:60:a8:62:00:fb:60:65:78:5e:
7b:90:cb:8c:9d:21:8f:2f:ae:9d:61:39:5f:e8:d9:18:38:8c:
52:26:d2:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:21:47 2025 by rpki-client