Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/7e7ee7-1bd4-4435-871f-6cf8e567ff1c/1/tNc6atd6j4WbQD2yznFegtHPMv4.mft
File: tNc6atd6j4WbQD2yznFegtHPMv4.mft (raw, json)
Hash identifier: GYxpD1pzZbKhUiMYeLKs3li72nlJgWhqE6CZosdek5k=
Subject key identifier: F0:1F:D5:3A:9B:E2:F5:F5:7E:B9:22:95:C6:DF:6B:87:BF:DB:3B:D2
Authority key identifier: B4:D7:3A:6A:D7:7A:8F:85:9B:40:3D:B2:CE:71:5E:82:D1:CF:32:FE
Certificate issuer: /CN=b4d73a6ad77a8f859b403db2ce715e82d1cf32fe
Certificate serial: 01977ED5FFD5B8F64F83543970CB27872187
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tNc6atd6j4WbQD2yznFegtHPMv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/7e7ee7-1bd4-4435-871f-6cf8e567ff1c/1/tNc6atd6j4WbQD2yznFegtHPMv4.mft
Manifest number: 1598
Signing time: Tue 17 Jun 2025 17:00:43 +0000
Manifest this update: Tue 17 Jun 2025 17:00:43 +0000
Manifest next update: Wed 18 Jun 2025 17:00:43 +0000
Files and hashes: 1: YO-tGwbdqI4YYY7I1KqnEaElBoQ.roa (hash: XZFdc4B2lVuIwGuWp8Gzl21H5s/bjgOkXy1zS/FUzmY=)
2: r8uOOwHL3Wt4pGrUJebg8yZ8WaY.roa (hash: Eioa5I9ONK/XZQXZG+CzeC8xkMTpLpCoDVH43Ycxzzc=)
3: tNc6atd6j4WbQD2yznFegtHPMv4.crl (hash: GRjNBZ2yRNnkcxoh2paTRAviMslOK6oTV3nW6S6NIiM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/7e7ee7-1bd4-4435-871f-6cf8e567ff1c/1/tNc6atd6j4WbQD2yznFegtHPMv4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/7e7ee7-1bd4-4435-871f-6cf8e567ff1c/1/tNc6atd6j4WbQD2yznFegtHPMv4.mft
rsync://rpki.ripe.net/repository/DEFAULT/tNc6atd6j4WbQD2yznFegtHPMv4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 13:26:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7e:d5:ff:d5:b8:f6:4f:83:54:39:70:cb:27:87:21:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4d73a6ad77a8f859b403db2ce715e82d1cf32fe
Validity
Not Before: Jun 17 17:00:43 2025 GMT
Not After : Jun 18 17:00:43 2025 GMT
Subject: CN=f01fd53a9be2f5f57eb92295c6df6b87bfdb3bd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:95:9b:9d:d1:91:89:c5:84:88:9c:2e:db:a7:
c6:ba:30:0f:3b:3b:5f:ae:23:5f:27:24:36:cd:c0:
62:98:6a:1c:6a:92:3a:35:0a:5d:c0:5f:b5:8d:2c:
9b:be:14:d4:20:ff:28:d5:6f:3c:f0:9d:13:78:1c:
25:53:c7:13:f7:ae:2a:7b:e9:c2:ed:0d:b0:11:6c:
55:bc:b5:a8:07:a3:6c:ff:f3:d2:d9:76:17:21:5e:
15:7a:fa:76:1e:48:65:0e:da:e9:60:d2:4b:76:56:
95:d7:c0:30:e3:5f:a2:19:cf:25:2d:aa:91:47:51:
ef:fd:8e:b6:21:e9:d3:49:ea:ba:a9:e3:91:87:60:
46:56:4b:61:cd:94:56:e5:ee:e6:03:2e:c1:2e:8a:
a6:ca:de:56:c9:19:0a:75:84:db:95:bb:60:d7:53:
a9:0a:c8:26:83:53:6a:ba:22:87:e6:51:09:db:ed:
35:ea:22:f8:87:e9:63:f6:f1:19:85:91:84:35:eb:
1a:db:60:62:77:60:3f:bf:cf:c0:01:fe:67:24:1c:
c0:16:77:b6:a8:1a:6b:23:43:0c:8d:5c:d6:98:7f:
c9:af:be:50:8f:7a:1d:77:ce:f8:1a:23:ac:a0:e5:
d8:85:22:bc:52:3d:1c:1f:d2:a6:36:e4:0b:3e:3e:
e9:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:1F:D5:3A:9B:E2:F5:F5:7E:B9:22:95:C6:DF:6B:87:BF:DB:3B:D2
X509v3 Authority Key Identifier:
keyid:B4:D7:3A:6A:D7:7A:8F:85:9B:40:3D:B2:CE:71:5E:82:D1:CF:32:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tNc6atd6j4WbQD2yznFegtHPMv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/7e7ee7-1bd4-4435-871f-6cf8e567ff1c/1/tNc6atd6j4WbQD2yznFegtHPMv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/7e7ee7-1bd4-4435-871f-6cf8e567ff1c/1/tNc6atd6j4WbQD2yznFegtHPMv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:ba:cb:fb:a4:5b:3f:db:41:31:22:43:a2:da:4b:14:25:d4:
f5:96:e5:2f:39:f0:0a:e0:60:39:70:df:4d:67:1b:b8:45:9d:
46:2c:1a:d4:a8:b0:12:38:9d:a7:57:e1:bf:e9:81:53:c6:e2:
63:b4:46:c8:72:14:43:79:46:e3:a3:57:23:89:c7:68:a0:b9:
9b:fd:ee:31:7b:fe:fe:87:47:a2:64:a4:da:7c:43:f2:d8:ae:
32:9c:82:b2:86:1f:96:1a:77:00:86:70:29:21:2e:b4:2a:69:
39:08:4b:d7:53:79:31:6c:03:d0:a5:a0:41:c2:71:f5:8e:fc:
77:f2:5e:2b:4b:8f:51:a1:b6:fb:83:2d:fd:0b:01:15:f6:0a:
8e:a4:09:4e:48:ec:26:01:68:ed:51:3f:ac:a5:d1:8e:7a:01:
41:5c:e7:e7:0c:89:fc:96:ae:f8:26:ab:66:ed:57:f2:6d:b6:
2d:1d:ca:7b:e7:26:1e:aa:3c:c6:a5:03:e7:82:a5:3f:55:cf:
5a:45:10:4f:bc:97:3f:f4:ef:08:08:91:d5:a2:d0:77:99:d8:
b7:c4:05:16:7e:ee:cc:9e:c5:42:ff:4c:f1:47:bd:7e:d2:15:
66:26:62:0e:60:3e:99:03:c9:4c:10:eb:a8:22:a5:9d:b0:2d:
49:59:e3:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 20:44:48 2025 by rpki-client