Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.mft
File: tMgU_8pTEIYqIiTwr9kMqpasC1Q.mft (raw, json)
Hash identifier: ISRqtXE4URw9gmNTjEmWbfGuJBlsjjhPbxkUQJ2WR1g=
Subject key identifier: D0:1E:1A:40:AE:7F:C7:1C:79:C9:55:85:09:0A:A4:85:A5:12:B7:CB
Authority key identifier: B4:C8:14:FF:CA:53:10:86:2A:22:24:F0:AF:D9:0C:AA:96:AC:0B:54
Certificate issuer: /CN=b4c814ffca5310862a2224f0afd90caa96ac0b54
Certificate serial: 01976C2AA0B302E4C3A614A97FAB0DA776D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tMgU_8pTEIYqIiTwr9kMqpasC1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.mft
Manifest number: 04D8
Signing time: Sat 14 Jun 2025 02:00:22 +0000
Manifest this update: Sat 14 Jun 2025 02:00:22 +0000
Manifest next update: Sun 15 Jun 2025 02:00:22 +0000
Files and hashes: 1: JboF5duYkSjIw0cFCDow2D7hhYA.roa (hash: 5ee85IvEdLLZLBu0IK/0DK9QgLyt71g8oPTMmxnM7ss=)
2: bPHOfPhRt9UxNoPYUZyx6NkEcPE.roa (hash: l5CD77LRDYrviJN2I+kUm6dy7C8YOi2kiqH568j84ZE=)
3: tMgU_8pTEIYqIiTwr9kMqpasC1Q.crl (hash: boCmWbDOVHKYy7BdgKGFowwQlZljQvhSzQvZHXi20eU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/tMgU_8pTEIYqIiTwr9kMqpasC1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:2a:a0:b3:02:e4:c3:a6:14:a9:7f:ab:0d:a7:76:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4c814ffca5310862a2224f0afd90caa96ac0b54
Validity
Not Before: Jun 14 02:00:22 2025 GMT
Not After : Jun 15 02:00:22 2025 GMT
Subject: CN=d01e1a40ae7fc71c79c95585090aa485a512b7cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:85:a1:9f:ec:8e:a7:6c:18:c9:7d:cc:31:1f:
92:f3:7f:81:cc:36:d0:f0:93:91:24:80:5b:33:34:
3a:72:c4:95:f0:29:3b:f0:67:19:65:2a:d2:42:09:
77:ad:6b:6c:ca:5c:1e:c3:98:3c:bd:6a:c3:5b:38:
c1:5b:a7:5b:7f:e6:80:e8:98:8d:3b:73:07:0b:a8:
d6:ad:ce:dc:32:29:25:91:64:a0:82:30:fe:c3:7a:
6e:65:b1:11:44:e0:31:ae:25:56:78:b3:fd:4e:7b:
3e:0b:0c:fc:00:08:44:da:ca:70:d8:3c:bc:5b:3c:
9b:a0:67:3d:9c:78:4d:2a:6f:b1:1b:31:eb:01:02:
ce:19:7a:5d:f2:a6:fc:e1:f8:1c:ce:fd:0f:97:9b:
e7:02:d6:6f:2b:52:23:d5:05:08:1f:aa:f7:24:bb:
0f:ec:6c:fd:7f:5e:99:a4:66:7e:af:74:0b:56:bb:
ad:a8:0a:df:10:e5:43:46:0d:ba:91:da:9e:c0:2b:
6d:c8:ae:a1:a1:48:d2:fd:a0:39:b9:51:39:af:39:
8e:ef:b3:bc:67:17:da:63:84:a7:a2:54:cc:65:ee:
8f:c1:44:8b:1d:85:d4:0d:29:f4:eb:96:b9:0d:f8:
62:61:5f:e9:2b:08:87:7c:34:ce:13:8b:05:c4:6d:
d9:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:1E:1A:40:AE:7F:C7:1C:79:C9:55:85:09:0A:A4:85:A5:12:B7:CB
X509v3 Authority Key Identifier:
keyid:B4:C8:14:FF:CA:53:10:86:2A:22:24:F0:AF:D9:0C:AA:96:AC:0B:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tMgU_8pTEIYqIiTwr9kMqpasC1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:49:4e:a0:17:cc:3c:14:f5:67:20:3e:17:0f:54:61:1e:5f:
c5:85:5b:94:69:8a:8c:5f:44:b5:9b:41:18:b2:b6:06:00:b8:
c3:90:a3:65:4a:94:4c:a9:03:f0:12:ee:af:d3:12:e3:01:29:
ba:d5:f8:ed:48:13:e7:02:87:fb:b8:75:d3:55:2b:d7:40:95:
38:58:3b:ef:91:d7:9e:f7:80:8c:e2:92:93:71:e9:52:cd:b5:
d2:37:aa:84:33:1e:97:cc:d7:b1:b3:8f:b0:f5:83:82:68:58:
77:45:db:9a:50:3c:ec:78:bf:5d:ee:42:4b:71:49:fb:7e:b6:
2d:ac:6c:12:4a:c9:a7:68:58:3c:38:28:bc:88:3f:40:9d:9f:
6a:75:b0:49:4a:00:bc:97:d7:72:fb:c1:0c:50:fb:cd:0b:1d:
d4:bd:08:93:14:e8:f9:7b:80:6d:2b:26:66:ab:fb:8c:91:fa:
19:2a:b7:65:8c:92:18:e9:73:fe:88:94:45:d3:4f:cb:cc:f2:
ce:31:c7:44:59:2a:90:47:17:43:79:3f:92:5f:85:f1:3f:16:
00:6f:02:15:eb:a2:27:b9:bd:bc:40:73:19:98:6b:94:2c:ec:
81:9a:3e:9d:87:51:aa:cd:3f:99:4b:05:4c:fd:3b:f2:03:4a:
51:62:70:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:25:30 2025 by rpki-client