Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/778af2-b2c0-4704-9fa2-2841013bccb4/1/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.mft
File: TCowVuYlkkn0ZvAFW7Ebg6ajCkI.mft (raw, json)
Hash identifier: QgMPA1Z1oRuLWNX7i2W+GWiuRL95cEzDK4hH8GPl1yk=
Subject key identifier: 6A:6A:1B:75:4D:4B:B9:18:85:9F:7E:9E:1F:FB:12:3E:A9:DE:22:39
Authority key identifier: 4C:2A:30:56:E6:25:92:49:F4:66:F0:05:5B:B1:1B:83:A6:A3:0A:42
Certificate issuer: /CN=4c2a3056e6259249f466f0055bb11b83a6a30a42
Certificate serial: 01977865ACFEEC488B1396B595EE45529914
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/778af2-b2c0-4704-9fa2-2841013bccb4/1/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.mft
Manifest number: 04E3
Signing time: Mon 16 Jun 2025 11:00:18 +0000
Manifest this update: Mon 16 Jun 2025 11:00:18 +0000
Manifest next update: Tue 17 Jun 2025 11:00:18 +0000
Files and hashes: 1: TCowVuYlkkn0ZvAFW7Ebg6ajCkI.crl (hash: b36XVMeAE5IJ2d7uLmlGL+EEaE5lyQfJ2tvLTK2qwYE=)
2: ypWsWp3lqcgm3orp5hClVetL1gs.roa (hash: gAI+ZENNE355QZzW1lVcF9M6FT+OGK0PoiiTAc8yFHM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/778af2-b2c0-4704-9fa2-2841013bccb4/1/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/778af2-b2c0-4704-9fa2-2841013bccb4/1/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.mft
rsync://rpki.ripe.net/repository/DEFAULT/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 11:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:78:65:ac:fe:ec:48:8b:13:96:b5:95:ee:45:52:99:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c2a3056e6259249f466f0055bb11b83a6a30a42
Validity
Not Before: Jun 16 11:00:18 2025 GMT
Not After : Jun 17 11:00:18 2025 GMT
Subject: CN=6a6a1b754d4bb918859f7e9e1ffb123ea9de2239
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e5:a3:46:fb:56:bf:06:d3:95:8a:e8:44:1b:
4d:b2:49:e9:d7:aa:cb:d6:69:87:ac:7d:ef:f0:e7:
35:94:ff:d8:f3:c2:82:9f:ae:e0:7e:07:77:53:f0:
cb:4c:1d:88:3c:d0:49:73:21:3f:fa:5c:71:8b:0d:
70:b3:fe:87:d1:b9:2f:24:e6:b2:e5:d2:db:6e:49:
7b:ae:78:80:d2:17:2a:df:54:cb:10:0c:e5:20:df:
68:82:5f:66:a9:61:91:6c:7c:ed:26:cb:4a:d6:75:
39:43:56:15:f4:0b:68:94:6c:6a:80:db:f1:6b:6b:
08:7e:90:e2:65:72:4c:68:86:5c:12:c7:f3:c3:18:
2f:bb:a0:53:46:c8:8b:89:cc:a8:78:ae:b6:9d:ae:
ee:0a:38:1f:f0:d7:88:2f:40:48:7f:38:12:25:97:
5e:fc:bc:93:7a:95:81:6a:39:08:f2:4e:6e:1f:7c:
69:f1:0d:48:af:8b:50:12:1a:13:74:f2:11:4c:78:
f7:c0:6c:07:49:15:3e:0f:c7:5e:fb:a2:83:d8:18:
86:c1:bb:33:2c:b7:af:f9:f9:c7:06:7d:80:d4:d7:
63:55:e1:3e:29:4c:de:a0:22:0e:a3:b1:6d:20:ae:
a0:ea:8a:c5:d6:8c:a1:ea:45:5b:cb:7e:1c:5b:f0:
15:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:6A:1B:75:4D:4B:B9:18:85:9F:7E:9E:1F:FB:12:3E:A9:DE:22:39
X509v3 Authority Key Identifier:
keyid:4C:2A:30:56:E6:25:92:49:F4:66:F0:05:5B:B1:1B:83:A6:A3:0A:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/778af2-b2c0-4704-9fa2-2841013bccb4/1/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/778af2-b2c0-4704-9fa2-2841013bccb4/1/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:65:d9:a5:08:92:b9:f6:51:d5:9e:f7:90:40:df:63:81:61:
34:b0:90:2d:d0:5b:2d:24:90:d7:e2:06:f0:97:d6:22:f4:ea:
85:d7:92:49:ae:fd:b7:9f:4e:01:0f:7c:f3:b4:6a:14:8b:b8:
f4:52:e9:b6:bf:40:d6:2f:f2:bb:f1:b5:7b:c4:5f:b0:ba:53:
5b:16:d9:7c:9b:af:8c:51:2c:27:55:e3:23:57:3f:70:62:33:
62:14:01:e8:f3:3b:95:75:d3:f7:1f:17:92:dd:e4:f9:80:0e:
c4:59:71:8e:aa:48:6b:db:f0:93:6d:a4:9e:e5:a5:34:8f:5c:
0e:ca:23:5c:d4:58:c5:67:83:00:7d:65:66:81:d5:b3:67:6b:
90:4f:1f:aa:26:27:ae:28:22:81:0e:25:aa:77:27:07:64:80:
15:54:dd:8f:32:2f:f1:18:4b:64:ee:46:bb:2e:df:a2:af:fc:
53:1c:17:1b:21:b3:80:3c:4f:4c:8b:bd:87:45:55:01:ed:dd:
23:b8:9d:33:db:33:6a:8c:63:9c:64:a2:4d:c6:7d:26:b2:77:
59:18:af:6e:5e:37:db:2c:67:99:cf:ae:5d:5c:a0:40:7c:26:
b4:5a:15:31:49:12:e0:eb:ae:83:7a:d4:55:a9:22:d3:3c:c2:
84:cc:63:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 15:45:33 2025 by rpki-client