Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/0b4cdf-b486-4a58-800d-8ed5a79de835/1/TnzINx7SS6z2esqLkCzucGr8Yks.mft
File: TnzINx7SS6z2esqLkCzucGr8Yks.mft (raw, json)
Hash identifier: kyGDhjkmFMf4EnuPxIoiXl9lFjh3Z6bL+Od9u/e0SRc=
Subject key identifier: B4:AD:B3:2B:DB:42:AF:07:BD:23:32:9A:A5:61:66:9E:4E:B0:50:3A
Authority key identifier: 4E:7C:C8:37:1E:D2:4B:AC:F6:7A:CA:8B:90:2C:EE:70:6A:FC:62:4B
Certificate issuer: /CN=4e7cc8371ed24bacf67aca8b902cee706afc624b
Certificate serial: 019742F7F7AA01E991995E8661DE7BDC0762
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TnzINx7SS6z2esqLkCzucGr8Yks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/0b4cdf-b486-4a58-800d-8ed5a79de835/1/TnzINx7SS6z2esqLkCzucGr8Yks.mft
Manifest number: 157A
Signing time: Fri 06 Jun 2025 02:00:36 +0000
Manifest this update: Fri 06 Jun 2025 02:00:36 +0000
Manifest next update: Sat 07 Jun 2025 02:00:36 +0000
Files and hashes: 1: AFXKRWkq4CEJ7e_q_TT8oCKNDgs.roa (hash: vvcSpEWzby7j1iGxx2OT88XWdiMYKYH4weh98eM4dfY=)
2: TnzINx7SS6z2esqLkCzucGr8Yks.crl (hash: hVAmTrcyBozgAIEjfdYH/uVbY4brIfke/OLhMi6hDcE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/0b4cdf-b486-4a58-800d-8ed5a79de835/1/TnzINx7SS6z2esqLkCzucGr8Yks.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/0b4cdf-b486-4a58-800d-8ed5a79de835/1/TnzINx7SS6z2esqLkCzucGr8Yks.mft
rsync://rpki.ripe.net/repository/DEFAULT/TnzINx7SS6z2esqLkCzucGr8Yks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:42:f7:f7:aa:01:e9:91:99:5e:86:61:de:7b:dc:07:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e7cc8371ed24bacf67aca8b902cee706afc624b
Validity
Not Before: Jun 6 02:00:36 2025 GMT
Not After : Jun 7 02:00:36 2025 GMT
Subject: CN=b4adb32bdb42af07bd23329aa561669e4eb0503a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:8d:bc:a7:54:de:57:c3:f2:39:fe:6c:ff:0c:
2f:cd:b8:cc:fd:26:da:06:19:30:75:24:7d:9c:34:
e9:c8:c9:1c:48:71:05:90:ff:c3:50:1a:21:eb:6f:
4a:51:3a:c9:21:86:d0:fc:e9:9a:f3:56:1a:f9:87:
67:01:26:71:a0:6d:c9:9e:bd:47:7d:51:fa:74:d5:
65:09:27:f6:29:52:09:ec:e3:ea:1e:64:52:ac:d0:
45:a0:dd:2e:50:e7:73:e7:8d:81:17:29:1d:bf:ab:
91:55:1d:d3:9f:37:2b:16:af:4d:a8:93:a1:f1:4c:
ae:4b:09:93:36:9c:09:c8:5b:d5:ee:3e:0e:51:c1:
43:74:3d:7f:71:31:4f:49:77:d1:8c:c4:ed:e7:1a:
3b:be:05:8c:e7:dd:d4:26:66:66:fe:8b:44:e2:1e:
00:cc:8a:70:81:b6:9a:a5:7a:4e:48:9e:0e:8b:d8:
cb:10:3c:3d:e8:34:c7:6a:1e:0e:05:c3:d7:88:9b:
b7:ff:e8:bb:3d:4d:83:e5:b5:4c:a6:3e:58:dc:d7:
0a:fa:f9:0d:5a:0f:d4:8e:9c:c3:66:20:34:49:b5:
5e:63:e0:07:03:27:d4:95:60:83:0b:22:67:ca:40:
27:cd:ad:04:c3:17:e3:b9:c3:17:39:48:5f:ca:21:
4e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:AD:B3:2B:DB:42:AF:07:BD:23:32:9A:A5:61:66:9E:4E:B0:50:3A
X509v3 Authority Key Identifier:
keyid:4E:7C:C8:37:1E:D2:4B:AC:F6:7A:CA:8B:90:2C:EE:70:6A:FC:62:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TnzINx7SS6z2esqLkCzucGr8Yks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/0b4cdf-b486-4a58-800d-8ed5a79de835/1/TnzINx7SS6z2esqLkCzucGr8Yks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/0b4cdf-b486-4a58-800d-8ed5a79de835/1/TnzINx7SS6z2esqLkCzucGr8Yks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:04:50:2a:25:ce:83:90:45:b1:a4:15:f8:3c:20:89:86:3d:
22:2a:1a:72:f9:a4:5a:7a:86:19:6e:3b:e0:98:ac:4c:4e:b3:
1a:d3:f9:09:cb:3c:f5:78:17:da:9f:d4:e0:cc:be:dd:cf:31:
75:18:4f:f6:27:4a:38:eb:23:54:19:73:d5:40:ce:39:d5:ff:
a8:f0:67:76:10:41:74:82:f3:10:7a:73:c0:c9:28:3f:e4:f8:
7d:28:b7:98:d6:78:2e:07:f4:93:3d:a7:41:05:ba:fd:eb:71:
cf:fe:25:d0:ca:3e:6c:74:aa:1a:86:16:85:c5:e7:8e:89:c7:
ef:64:fc:2c:cb:f4:ef:49:d6:47:09:c2:16:ab:53:b4:3e:73:
b1:f0:43:81:32:2e:ab:06:03:57:c4:c3:aa:d9:1d:ce:b7:82:
69:1d:e0:5e:c3:5b:29:df:e6:31:19:83:5b:95:81:35:c9:2a:
32:47:79:69:08:95:98:79:79:4a:e9:47:a4:e1:33:51:92:9b:
27:eb:7f:7b:42:c7:89:94:21:e7:63:32:13:5d:4a:55:37:98:
48:f6:c8:19:94:2a:d7:52:2d:c8:30:67:dc:80:1e:c2:13:6b:
53:eb:6a:83:c1:a9:f9:0b:cf:25:46:a8:8a:55:53:f6:1a:0b:
a6:49:af:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 08:55:26 2025 by rpki-client