Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/8e1198-e50f-416f-9d6b-1e9bff5e4021/1/TfCXBITrJrxZ_Y-o1b98PHIS0BE.mft
File: TfCXBITrJrxZ_Y-o1b98PHIS0BE.mft (raw, json)
Hash identifier: YHDg0d6nOMqJ/ZYa1QdlsB0P9ra1dD7VCsSm7DjhTqU=
Subject key identifier: 4E:B0:CF:5B:40:0F:E4:FC:B4:79:65:57:61:87:4E:E6:9E:1F:99:F8
Authority key identifier: 4D:F0:97:04:84:EB:26:BC:59:FD:8F:A8:D5:BF:7C:3C:72:12:D0:11
Certificate issuer: /CN=4df0970484eb26bc59fd8fa8d5bf7c3c7212d011
Certificate serial: 01976C624F7615A2E74FE008382FC855E093
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TfCXBITrJrxZ_Y-o1b98PHIS0BE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/8e1198-e50f-416f-9d6b-1e9bff5e4021/1/TfCXBITrJrxZ_Y-o1b98PHIS0BE.mft
Manifest number: 0B2E
Signing time: Sat 14 Jun 2025 03:01:11 +0000
Manifest this update: Sat 14 Jun 2025 03:01:11 +0000
Manifest next update: Sun 15 Jun 2025 03:01:11 +0000
Files and hashes: 1: RdCbQ_v6C3AqgUPprLsURH8LT5w.roa (hash: kXBabjQsEi+6w0J2wLx2a1ynhFaoOMH+SG7D7xchscI=)
2: TfCXBITrJrxZ_Y-o1b98PHIS0BE.crl (hash: v9evF0NzzQeLGu8/ZgLyj5CmQfmy+QpYijoJGHrrA2w=)
3: lJrwoyCHk-KhLsTndl2kfTJmzS0.roa (hash: QQVDCU2+xswVxXyXjpbkieNuyjdGUltA6OYqC3/o4lo=)
4: ukETrBXaXN-UD0p_P4lkBp13yEg.roa (hash: 1tDW+L2GN0E1ucMKdwQbOBeshAxIT1tSiJJRpkDWW6c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/8e1198-e50f-416f-9d6b-1e9bff5e4021/1/TfCXBITrJrxZ_Y-o1b98PHIS0BE.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/8e1198-e50f-416f-9d6b-1e9bff5e4021/1/TfCXBITrJrxZ_Y-o1b98PHIS0BE.mft
rsync://rpki.ripe.net/repository/DEFAULT/TfCXBITrJrxZ_Y-o1b98PHIS0BE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:62:4f:76:15:a2:e7:4f:e0:08:38:2f:c8:55:e0:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4df0970484eb26bc59fd8fa8d5bf7c3c7212d011
Validity
Not Before: Jun 14 03:01:11 2025 GMT
Not After : Jun 15 03:01:11 2025 GMT
Subject: CN=4eb0cf5b400fe4fcb479655761874ee69e1f99f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:a6:d6:83:a6:4b:e4:a0:e0:fc:6b:80:b0:5a:
45:0f:23:0e:c4:32:a2:4a:b5:4d:c8:c2:82:26:68:
2a:20:93:07:68:e5:1d:59:dd:59:cb:e7:d9:7e:05:
18:f4:1c:f5:67:8a:c3:9b:d7:32:3b:13:4a:47:5e:
cf:9f:03:cb:22:9b:93:78:4c:8a:71:36:dc:f0:a1:
be:6a:22:40:00:bf:ad:7d:af:f9:ae:9f:72:4b:b0:
82:6c:c0:16:42:f3:b4:8e:61:37:3d:61:8a:50:dc:
7a:90:7f:5d:91:f0:5a:f3:9a:76:b5:a7:1c:fe:89:
5b:38:e5:d0:b4:b5:20:16:f2:d5:c0:c8:28:a2:7a:
52:5c:a0:e0:a7:04:01:e0:1d:a9:54:2a:17:67:69:
5f:c9:ed:63:86:2d:f2:97:86:6e:c2:43:04:ee:32:
f7:e4:83:91:0c:f2:1a:ea:f1:08:f0:c0:d3:3b:4b:
ca:e0:12:95:ec:50:2c:21:92:d8:5b:09:a4:0d:89:
73:28:0e:a3:a9:97:3c:a3:72:45:a6:0b:07:71:cc:
bd:65:3b:81:98:a1:42:01:b6:77:22:e3:d5:0d:95:
2e:31:cc:21:03:53:f0:3f:98:1d:8b:1f:33:e5:33:
0e:c1:34:e7:97:2d:3f:fd:e3:e4:95:26:ca:c5:d1:
76:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:B0:CF:5B:40:0F:E4:FC:B4:79:65:57:61:87:4E:E6:9E:1F:99:F8
X509v3 Authority Key Identifier:
keyid:4D:F0:97:04:84:EB:26:BC:59:FD:8F:A8:D5:BF:7C:3C:72:12:D0:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TfCXBITrJrxZ_Y-o1b98PHIS0BE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8e1198-e50f-416f-9d6b-1e9bff5e4021/1/TfCXBITrJrxZ_Y-o1b98PHIS0BE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8e1198-e50f-416f-9d6b-1e9bff5e4021/1/TfCXBITrJrxZ_Y-o1b98PHIS0BE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:d5:b0:ba:e4:d0:da:4d:83:63:0e:da:55:8e:09:de:16:28:
6b:ae:2a:5f:20:41:f2:ae:26:bf:65:25:2f:05:ef:d7:e7:12:
52:f9:de:7b:17:d8:8b:46:36:e4:8b:76:f4:96:89:f0:f8:41:
b1:17:77:0f:e7:26:d3:8b:29:ee:5d:18:b6:6a:28:a9:b1:81:
df:04:73:06:bb:c4:d6:3c:35:67:c3:93:52:a9:07:fb:a5:85:
99:d6:7d:04:b2:f3:ab:a1:df:15:da:93:88:db:81:9e:d5:99:
f5:dc:22:c3:4a:6c:f3:c6:55:d4:36:7b:d6:f8:43:ca:f5:ed:
0d:c3:db:be:14:17:e8:bf:1c:b7:10:ed:35:e1:23:c7:88:8a:
92:0d:ef:88:a9:c2:96:c9:72:0c:62:12:cf:6f:b3:84:c0:36:
26:cf:2d:63:ac:6f:c8:d9:77:58:49:b5:5e:8b:9f:fe:b4:4f:
40:b2:95:db:88:2c:e4:89:eb:20:8f:59:9e:00:c6:dd:51:c6:
c5:e2:85:49:9a:dd:16:da:bb:dc:57:4c:97:3f:3e:13:ec:4a:
c3:43:9f:c1:ff:9b:01:b7:ec:84:9a:1a:16:47:fd:91:a9:af:
2d:7b:ad:22:2e:61:8a:30:8a:4c:85:58:03:98:09:19:a9:e1:
a6:bf:8c:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:20:33 2025 by rpki-client