Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.mft
File: tOxsCl6-xYF9kbkeeaa8YTLrnSw.mft (raw, json)
Hash identifier: CAAtBN7fo0H1mipm90Z2KNN0RvQkEQ8tGczoiRmXlP4=
Subject key identifier: 72:48:81:39:EA:A3:21:DB:C8:A5:2A:38:8C:45:18:E7:9E:22:59:2B
Authority key identifier: B4:EC:6C:0A:5E:BE:C5:81:7D:91:B9:1E:79:A6:BC:61:32:EB:9D:2C
Certificate issuer: /CN=b4ec6c0a5ebec5817d91b91e79a6bc6132eb9d2c
Certificate serial: 0197711A99BD1AFEB2070F8DE2DF11F93C00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tOxsCl6-xYF9kbkeeaa8YTLrnSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.mft
Manifest number: 1594
Signing time: Sun 15 Jun 2025 01:00:58 +0000
Manifest this update: Sun 15 Jun 2025 01:00:58 +0000
Manifest next update: Mon 16 Jun 2025 01:00:58 +0000
Files and hashes: 1: 0WgKhjREJrZPp5eivCc5Ledwy08.roa (hash: g1cMz695Vu5b1v4C7JspTc1yMqOrx6XRuND1g3o80ZU=)
2: c4XFDsuP3oiOPuoN5dW6Mp7swps.roa (hash: RShjOJ6yyL7rh4X46zYbqRc79tC1/dWZp0uZXHk88jM=)
3: tOxsCl6-xYF9kbkeeaa8YTLrnSw.crl (hash: Y76mN5dlLyx6UkHgBn7BYZcbbs/BddtI/ncOJbhcrI0=)
4: x8qy1V86ggKXIYJ47lPp7-bEQ08.roa (hash: Tid2ObTc99hFnnGIy0KhVlQV4ZEsaX9AQcsvz/R/sw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tOxsCl6-xYF9kbkeeaa8YTLrnSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:1a:99:bd:1a:fe:b2:07:0f:8d:e2:df:11:f9:3c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4ec6c0a5ebec5817d91b91e79a6bc6132eb9d2c
Validity
Not Before: Jun 15 01:00:58 2025 GMT
Not After : Jun 16 01:00:58 2025 GMT
Subject: CN=72488139eaa321dbc8a52a388c4518e79e22592b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:96:f4:ff:e1:0a:93:1c:7c:1b:77:55:e1:bd:
01:c8:af:3b:2a:39:25:30:aa:46:59:29:f2:d7:61:
cb:8d:48:97:6d:f7:65:92:06:dd:0d:a0:85:dc:04:
3b:38:dd:85:e5:29:57:86:9c:de:ae:d0:b0:eb:03:
64:ac:4b:d8:90:70:b0:a9:d4:da:c1:c2:3f:a1:04:
84:b5:2b:88:41:8b:57:b8:99:31:44:35:42:d2:ab:
23:c1:19:42:d6:97:a7:c0:4c:22:83:03:97:28:55:
7d:0d:75:d7:79:05:cb:c2:90:53:90:69:ba:1b:92:
d9:27:4c:7c:f8:ff:fd:48:b8:1f:16:d1:57:4c:52:
e1:d0:ae:63:ee:53:49:1c:11:d8:56:ca:7f:1a:2e:
91:c6:9c:1b:09:62:c0:2e:c0:75:64:70:f6:97:fd:
d3:20:92:28:7b:67:f3:9f:ea:37:b8:fc:df:0e:1c:
08:94:91:a0:1a:d4:38:fc:c8:e4:8c:11:ef:f5:7d:
68:0b:19:ef:96:74:d5:ef:31:88:e3:a4:67:8c:ab:
d9:cd:65:88:cb:f4:2e:00:4a:2c:0a:37:06:55:5a:
12:b8:b1:ea:c4:7a:17:99:30:bb:d6:09:6d:9b:b4:
a6:5c:35:b0:c5:c1:74:d2:e9:c9:f4:8e:55:69:9d:
b2:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:48:81:39:EA:A3:21:DB:C8:A5:2A:38:8C:45:18:E7:9E:22:59:2B
X509v3 Authority Key Identifier:
keyid:B4:EC:6C:0A:5E:BE:C5:81:7D:91:B9:1E:79:A6:BC:61:32:EB:9D:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tOxsCl6-xYF9kbkeeaa8YTLrnSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:b5:f8:fb:a1:11:12:47:2f:10:7a:e5:65:d3:e2:d5:16:1a:
30:ff:46:80:73:35:e4:9f:86:87:97:d5:18:12:8c:dc:a6:82:
4c:d4:48:e9:b4:d1:e5:ae:33:73:67:01:70:2d:5b:8c:e0:dc:
35:02:d0:f5:6c:5d:20:fd:9e:bd:aa:07:ed:b2:b0:53:f7:74:
31:88:99:bd:35:45:7d:73:e3:5c:ce:21:46:d6:6a:ce:3b:69:
33:fc:db:dc:c5:f6:38:d4:01:99:08:5e:09:90:f9:94:b7:bd:
41:87:18:0e:e3:cf:15:46:fa:b6:ea:2d:3f:f8:f1:fb:eb:2e:
6f:df:28:8e:7a:34:4b:e1:21:c3:1a:59:9d:52:82:9a:1c:d3:
70:8b:b2:a6:ff:74:8b:98:1c:26:b4:19:b3:95:ca:da:f7:5a:
77:7b:c7:29:6f:21:0f:4c:24:96:04:9e:18:cb:bc:57:23:d6:
34:ad:ff:01:b6:25:ad:5a:aa:bb:a3:96:5f:0e:c4:f9:c6:8f:
39:f5:8e:26:2f:6e:e7:ed:ff:07:f7:a5:2a:17:6a:b0:ee:9a:
c0:2a:54:f4:85:39:3e:a6:55:6c:d8:fe:9f:cc:9b:91:f0:8d:
71:1e:91:13:e8:5a:5a:08:0f:6f:ab:75:52:ae:db:97:c9:ae:
36:e3:8c:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 08:52:04 2025 by rpki-client