Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/ba4640-163e-465f-90f9-ea587fd658b2/1/a-tglLyrS9Ox9vVsUYK6EiDiK28.mft
File: a-tglLyrS9Ox9vVsUYK6EiDiK28.mft (raw, json)
Hash identifier: 8M072XYGkCZxiA7bGRcRciXt6du6dDjiDfS9//j0sks=
Subject key identifier: 2F:F3:2A:37:61:EF:C0:91:53:C0:30:60:06:A8:77:73:E5:62:1F:85
Authority key identifier: 6B:EB:60:94:BC:AB:4B:D3:B1:F6:F5:6C:51:82:BA:12:20:E2:2B:6F
Certificate issuer: /CN=6beb6094bcab4bd3b1f6f56c5182ba1220e22b6f
Certificate serial: 01976C61D9506B3C4481FE3666BB88CD3310
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a-tglLyrS9Ox9vVsUYK6EiDiK28.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/ba4640-163e-465f-90f9-ea587fd658b2/1/a-tglLyrS9Ox9vVsUYK6EiDiK28.mft
Manifest number: 040D
Signing time: Sat 14 Jun 2025 03:00:41 +0000
Manifest this update: Sat 14 Jun 2025 03:00:41 +0000
Manifest next update: Sun 15 Jun 2025 03:00:41 +0000
Files and hashes: 1: a-tglLyrS9Ox9vVsUYK6EiDiK28.crl (hash: 6DmL+gNEnXf+vqZOWZ99qackwLeFhLNhcCENOXg0VJs=)
2: br9nNW8HTMSPThu0IYs9YJPit9M.roa (hash: +GZtKTMjwkIHJlC7o9X+rvG+Xi3NBXRyc3GslA3d0UQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/ba4640-163e-465f-90f9-ea587fd658b2/1/a-tglLyrS9Ox9vVsUYK6EiDiK28.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/ba4640-163e-465f-90f9-ea587fd658b2/1/a-tglLyrS9Ox9vVsUYK6EiDiK28.mft
rsync://rpki.ripe.net/repository/DEFAULT/a-tglLyrS9Ox9vVsUYK6EiDiK28.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:61:d9:50:6b:3c:44:81:fe:36:66:bb:88:cd:33:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6beb6094bcab4bd3b1f6f56c5182ba1220e22b6f
Validity
Not Before: Jun 14 03:00:41 2025 GMT
Not After : Jun 15 03:00:41 2025 GMT
Subject: CN=2ff32a3761efc09153c0306006a87773e5621f85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d6:8f:5f:db:3c:08:e3:42:93:3c:a5:eb:8e:
54:32:d4:c7:96:ff:96:fb:ca:54:48:6d:52:d8:2e:
8d:69:56:92:1b:06:7b:9a:e8:28:40:a3:02:e0:5e:
a3:a0:a2:6a:33:a0:15:6e:bb:ae:62:ad:04:7a:2f:
9a:83:7b:ca:47:82:14:ce:4f:fd:33:6f:fd:df:f0:
3c:c8:77:76:94:43:69:cc:a2:f5:a9:63:de:b8:a3:
e3:c2:32:fc:17:d7:b4:58:12:c0:1f:00:f7:d4:5d:
b7:ca:6b:16:22:55:85:91:c7:8f:e9:98:84:83:9d:
49:d9:76:af:14:7c:dd:a5:37:7d:dc:5e:fb:50:38:
5e:fd:5f:e4:f4:ff:c5:5b:eb:8f:d6:f7:53:d9:f7:
e7:de:a8:03:71:bb:4c:6a:50:81:65:97:81:83:8e:
b8:78:04:85:75:f3:56:af:65:66:fd:11:f8:c2:be:
9b:68:bc:74:d8:5a:a0:9a:73:05:79:f8:37:a5:94:
5c:6a:24:60:f0:f3:f2:f6:1b:21:c6:f5:30:0f:db:
8e:ab:e9:f2:2e:5b:87:ea:c6:e3:84:ae:b8:22:e4:
ab:61:ba:45:a5:63:55:f7:cc:2a:69:14:21:96:96:
63:c2:78:c3:17:d6:5b:69:03:25:c0:8f:24:70:a9:
fb:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:F3:2A:37:61:EF:C0:91:53:C0:30:60:06:A8:77:73:E5:62:1F:85
X509v3 Authority Key Identifier:
keyid:6B:EB:60:94:BC:AB:4B:D3:B1:F6:F5:6C:51:82:BA:12:20:E2:2B:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a-tglLyrS9Ox9vVsUYK6EiDiK28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ba4640-163e-465f-90f9-ea587fd658b2/1/a-tglLyrS9Ox9vVsUYK6EiDiK28.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ba4640-163e-465f-90f9-ea587fd658b2/1/a-tglLyrS9Ox9vVsUYK6EiDiK28.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:d4:79:a9:ba:50:e8:3d:f0:a3:2e:2f:0e:9d:fe:25:2a:3c:
6d:e8:75:07:5a:35:ac:a6:29:79:95:f7:9b:1f:c8:d4:d7:4c:
51:db:22:63:e1:68:17:da:ad:d5:c7:fc:85:10:81:8a:0a:d8:
b0:21:16:ce:e8:d5:40:43:a4:f2:69:8e:67:22:de:74:39:82:
d8:57:f8:7f:3c:47:e5:d9:dc:5f:91:af:0e:02:29:3b:43:c9:
41:a5:d0:da:25:94:f5:ad:04:7b:5c:b5:92:36:af:d5:1f:21:
79:bd:db:04:63:b3:62:75:19:36:aa:d0:32:e4:da:28:15:19:
2e:a2:ad:68:f5:33:70:bb:a1:2f:1a:3d:87:c8:47:61:9e:f5:
da:42:41:22:d3:13:59:ac:3f:e5:b5:fc:3b:f3:c8:ec:6b:fb:
23:43:b0:2a:9e:34:44:7f:dd:a3:40:22:76:1c:78:67:4d:8d:
96:cc:9b:8f:7e:4b:f4:bc:f0:cc:c9:c7:90:0b:10:8b:7e:47:
7a:a6:f1:92:8e:b9:7e:90:63:30:a0:7e:cf:08:ca:93:ed:4a:
f7:19:c0:82:75:d3:49:6a:a7:b4:31:56:cd:f6:1b:92:b9:da:
91:88:fd:a6:1b:7b:8b:af:ee:23:ac:b6:6f:cd:d3:82:ae:53:
9e:7c:25:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:29:04 2025 by rpki-client