Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/68c296-69b2-4070-9ff9-4243decad360/1/tfrsS42ZLda5zYmoSJ08OmUq7NI.mft
File: tfrsS42ZLda5zYmoSJ08OmUq7NI.mft (raw, json)
Hash identifier: KdBBvdGUREFvtpvhhOoO43SjPcxCn/BrXKzTFornJ28=
Subject key identifier: B6:03:E9:0D:1C:DB:5E:FD:E0:40:51:19:18:84:23:E7:11:E4:4F:D7
Authority key identifier: B5:FA:EC:4B:8D:99:2D:D6:B9:CD:89:A8:48:9D:3C:3A:65:2A:EC:D2
Certificate issuer: /CN=b5faec4b8d992dd6b9cd89a8489d3c3a652aecd2
Certificate serial: 01976C2B3D36FFFAE319A48D1750AD33DA62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tfrsS42ZLda5zYmoSJ08OmUq7NI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/68c296-69b2-4070-9ff9-4243decad360/1/tfrsS42ZLda5zYmoSJ08OmUq7NI.mft
Manifest number: 158D
Signing time: Sat 14 Jun 2025 02:01:02 +0000
Manifest this update: Sat 14 Jun 2025 02:01:02 +0000
Manifest next update: Sun 15 Jun 2025 02:01:02 +0000
Files and hashes: 1: 4yLFcyM54Hv8nF5ON-TIrD-1oYQ.roa (hash: hE+OT4FiIcXi0TRuDiRDYqpuBeR4hhUYci4sdFCd/CY=)
2: jKEy0LJLh7AqTPNLnCDWho1dIJ0.roa (hash: BKRsVG5h+FxIv9YJSObhtgL9EqcN1BIPxpc/4d7NHx4=)
3: tfrsS42ZLda5zYmoSJ08OmUq7NI.crl (hash: qilkvSni7aMc7VcSDN4v49q4+po7GcNq5p/STBDxyQE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/68c296-69b2-4070-9ff9-4243decad360/1/tfrsS42ZLda5zYmoSJ08OmUq7NI.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/68c296-69b2-4070-9ff9-4243decad360/1/tfrsS42ZLda5zYmoSJ08OmUq7NI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tfrsS42ZLda5zYmoSJ08OmUq7NI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:2b:3d:36:ff:fa:e3:19:a4:8d:17:50:ad:33:da:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5faec4b8d992dd6b9cd89a8489d3c3a652aecd2
Validity
Not Before: Jun 14 02:01:02 2025 GMT
Not After : Jun 15 02:01:02 2025 GMT
Subject: CN=b603e90d1cdb5efde0405119188423e711e44fd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:37:de:18:62:c5:c3:3e:40:86:bb:b9:cb:8e:
4b:96:5c:4b:44:7e:19:cb:93:5e:db:72:ff:9e:d9:
7a:e1:21:ba:14:f8:01:df:9e:f2:5e:cf:8d:9c:e3:
e8:e9:be:41:4a:45:b8:3b:f9:9a:32:07:20:b5:aa:
e9:16:e0:fd:65:da:b0:9b:e9:00:45:a9:55:3d:e9:
88:b5:8d:0a:fc:96:c2:cb:f0:e2:ee:50:b7:a8:20:
33:26:b9:2a:79:ee:08:20:02:9b:dc:63:ff:78:e1:
52:4d:77:7a:e4:fc:b2:80:55:d6:db:41:cc:30:09:
52:2a:10:24:66:27:a0:db:cc:13:7b:29:a9:2d:37:
84:ae:f3:18:6b:b6:4f:07:44:88:f1:62:00:64:8e:
49:f7:ea:ef:21:89:05:f9:f8:d2:ce:d2:43:40:37:
ba:1d:41:a1:93:ef:2d:8f:c9:34:ef:12:72:40:c1:
a4:bb:9c:fc:f3:6b:99:8f:30:51:1e:4f:ca:5c:c1:
5d:c0:3c:34:99:c1:ad:68:3f:f8:e0:e0:b5:79:11:
b9:82:a4:3b:7b:f7:e1:66:73:81:f4:d7:74:6e:1f:
ca:df:b0:c6:10:26:65:9b:1e:1c:8d:3a:4b:5f:b7:
3b:c1:04:34:68:d4:a3:79:d7:bf:da:fe:f5:8f:57:
83:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:03:E9:0D:1C:DB:5E:FD:E0:40:51:19:18:84:23:E7:11:E4:4F:D7
X509v3 Authority Key Identifier:
keyid:B5:FA:EC:4B:8D:99:2D:D6:B9:CD:89:A8:48:9D:3C:3A:65:2A:EC:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tfrsS42ZLda5zYmoSJ08OmUq7NI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/68c296-69b2-4070-9ff9-4243decad360/1/tfrsS42ZLda5zYmoSJ08OmUq7NI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/68c296-69b2-4070-9ff9-4243decad360/1/tfrsS42ZLda5zYmoSJ08OmUq7NI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:ee:c8:94:c2:6b:aa:9a:a3:fd:a3:f8:a1:00:75:7f:a6:fb:
f6:36:d4:81:a8:64:75:38:f2:4d:24:e3:7d:6d:d4:b9:f9:f9:
7c:f8:e4:87:cc:6f:fd:a8:4f:7c:20:7f:4a:66:15:69:9c:21:
f0:ea:e9:fb:71:a4:60:5e:9e:e9:5c:71:e8:fd:84:47:c8:95:
51:62:2f:80:48:23:6e:55:86:de:f2:f2:dd:45:c5:77:ad:0d:
c4:68:7f:95:47:10:42:2f:6a:db:8e:ac:98:71:f4:a4:27:e4:
3e:9b:32:fc:45:bc:ea:61:b4:3b:5f:c7:5b:38:54:00:50:a7:
1a:15:78:35:4a:9b:62:8d:0e:4a:22:a9:14:b5:ba:f6:09:de:
39:0c:ab:06:a2:d0:fc:56:a6:03:90:5e:0c:ca:2d:87:a9:34:
fc:0a:5f:c6:1c:bb:eb:05:c6:27:42:1d:ec:4a:7f:59:3e:38:
f2:e6:50:4a:9d:47:9b:5a:53:df:09:b4:36:b5:6f:4a:50:89:
a1:72:11:68:bf:c6:3b:8d:6f:f9:8d:2f:76:bd:52:66:3b:50:
d9:e8:3f:f8:10:b8:fd:00:68:95:49:9e:29:ef:cf:b1:2a:d5:
47:fb:a8:b6:97:08:79:de:dd:ac:42:8c:39:90:cb:d0:9d:b1:
54:7a:c5:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:03:36 2025 by rpki-client