Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/4f943f-d16a-48da-b93a-1487c6020c46/1/Tj_pDw-taiXUa9fDNbki2gMbLHg.mft
File: Tj_pDw-taiXUa9fDNbki2gMbLHg.mft (raw, json)
Hash identifier: iLF4WKZMlbyesdQdRJ5bcPYH1jt7Bogeyy+cFIUl1OQ=
Subject key identifier: E5:D0:C6:85:B2:39:E4:E0:3F:33:33:4A:F6:35:E7:55:6D:95:4E:71
Authority key identifier: 4E:3F:E9:0F:0F:AD:6A:25:D4:6B:D7:C3:35:B9:22:DA:03:1B:2C:78
Certificate issuer: /CN=4e3fe90f0fad6a25d46bd7c335b922da031b2c78
Certificate serial: 0197700770A378017EDD73FF787B6A4C0179
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tj_pDw-taiXUa9fDNbki2gMbLHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/4f943f-d16a-48da-b93a-1487c6020c46/1/Tj_pDw-taiXUa9fDNbki2gMbLHg.mft
Manifest number: 0A38
Signing time: Sat 14 Jun 2025 20:00:24 +0000
Manifest this update: Sat 14 Jun 2025 20:00:24 +0000
Manifest next update: Sun 15 Jun 2025 20:00:24 +0000
Files and hashes: 1: Tj_pDw-taiXUa9fDNbki2gMbLHg.crl (hash: vyRK8IBHR5fub6G3fW/QZJJb8fOfH9ca+vDDjt4uwTw=)
2: xBLWMt7CnhdMhsDQsxTJKsgubzw.roa (hash: ZCdYsbGv+ldj13bvl4ML8UTblRYPsZ2+PffnDm+YrGQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/4f943f-d16a-48da-b93a-1487c6020c46/1/Tj_pDw-taiXUa9fDNbki2gMbLHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/4f943f-d16a-48da-b93a-1487c6020c46/1/Tj_pDw-taiXUa9fDNbki2gMbLHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tj_pDw-taiXUa9fDNbki2gMbLHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:07:70:a3:78:01:7e:dd:73:ff:78:7b:6a:4c:01:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e3fe90f0fad6a25d46bd7c335b922da031b2c78
Validity
Not Before: Jun 14 20:00:24 2025 GMT
Not After : Jun 15 20:00:24 2025 GMT
Subject: CN=e5d0c685b239e4e03f33334af635e7556d954e71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:54:32:16:41:12:d3:29:75:77:39:fb:22:98:
46:e2:ac:1d:8a:4c:fe:71:b3:78:5a:37:9e:0f:ba:
08:ba:2c:28:6d:e3:d5:30:a6:62:2d:a9:db:6b:e0:
9d:24:5c:66:65:b9:e7:3d:79:fd:47:4d:26:68:a3:
aa:de:20:43:61:80:73:76:fa:45:b5:b8:a0:bd:a7:
74:47:5f:27:21:27:d2:51:40:a0:d4:3d:9e:2e:d3:
3a:cb:62:2d:72:45:15:a0:56:92:81:8b:b9:30:34:
14:a3:65:f8:04:64:05:2b:b8:ba:01:30:18:64:ec:
49:68:5f:43:da:38:74:b3:7e:7d:78:9c:89:f1:69:
7f:b1:27:34:4a:00:05:8c:f2:6c:83:36:b8:07:06:
91:f3:23:21:30:d1:2c:c5:38:29:87:c7:9d:10:99:
d8:6f:3b:32:70:92:dd:df:59:f0:7d:a8:44:c4:5c:
9d:16:28:8b:cf:3d:a6:cc:44:62:b7:5f:2e:c9:ea:
83:e4:ac:95:12:6b:26:69:07:9a:c7:6b:a8:68:be:
71:b7:73:0a:74:ea:4e:90:51:17:3f:fc:06:ae:63:
a1:a0:c3:3d:68:7e:d2:28:8e:3b:50:4d:d2:1a:b8:
db:77:43:3e:4d:b9:97:c7:a4:e5:26:fc:94:eb:a4:
e5:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:D0:C6:85:B2:39:E4:E0:3F:33:33:4A:F6:35:E7:55:6D:95:4E:71
X509v3 Authority Key Identifier:
keyid:4E:3F:E9:0F:0F:AD:6A:25:D4:6B:D7:C3:35:B9:22:DA:03:1B:2C:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tj_pDw-taiXUa9fDNbki2gMbLHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4f943f-d16a-48da-b93a-1487c6020c46/1/Tj_pDw-taiXUa9fDNbki2gMbLHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4f943f-d16a-48da-b93a-1487c6020c46/1/Tj_pDw-taiXUa9fDNbki2gMbLHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:fc:0f:37:ef:2f:b8:71:a9:c6:b0:55:23:19:b6:c4:fe:0e:
ee:f9:b0:42:0b:b0:57:d7:ed:3c:76:29:f6:91:e0:ad:fd:f0:
67:bc:b6:20:b4:f3:38:84:0f:e9:fc:3d:8b:f2:2a:89:2e:2d:
91:93:d4:fb:4c:31:ca:28:56:bf:66:64:87:e6:ba:b1:20:04:
dd:88:14:c6:8c:1f:3a:0c:49:cf:63:59:59:64:5f:53:db:b5:
7c:c2:09:c2:5c:e6:73:2f:b4:39:88:68:3e:fc:a0:4a:e7:19:
a6:78:ee:e4:74:da:62:55:f2:ec:f5:d0:c8:a3:19:5d:ed:27:
82:ae:52:0f:e0:27:1c:50:83:70:9e:15:a6:8f:f4:cc:98:6d:
90:e7:13:1d:6b:17:5a:a7:38:74:bf:69:1a:b1:c8:30:a5:58:
e8:aa:ab:2f:98:2d:43:13:61:da:3f:9c:ff:2b:af:66:06:7c:
e7:9a:c1:52:e0:74:ce:0c:14:2f:7e:90:1d:ad:26:35:05:c1:
bb:6c:66:0e:46:95:57:cf:53:45:76:84:7a:0a:f5:2e:25:9b:
d3:4b:c5:50:b3:bd:41:87:b4:64:d3:fa:f6:18:1a:f8:b2:6e:
aa:b3:47:4b:f3:bb:5a:06:fe:c4:56:6c:3e:49:d9:a1:15:13:
ff:b4:fa:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:57:02 2025 by rpki-client