Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/3182ce-9d2f-4b22-abcd-acd9a2eca33f/1/tAyVhnwwhMTBai_rtGZRCQ8yR-Q.mft
File: tAyVhnwwhMTBai_rtGZRCQ8yR-Q.mft (raw, json)
Hash identifier: m/RnDJL41ADOaVzG7jbcSV/vD7048AjPKZDUdgCvndc=
Subject key identifier: C3:09:FD:47:8C:4F:10:63:25:C4:18:DC:6A:69:CD:8A:A9:52:EC:F2
Authority key identifier: B4:0C:95:86:7C:30:84:C4:C1:6A:2F:EB:B4:66:51:09:0F:32:47:E4
Certificate issuer: /CN=b40c95867c3084c4c16a2febb46651090f3247e4
Certificate serial: 019774528EE9349467B1B719F2CD5AB0F868
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tAyVhnwwhMTBai_rtGZRCQ8yR-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/3182ce-9d2f-4b22-abcd-acd9a2eca33f/1/tAyVhnwwhMTBai_rtGZRCQ8yR-Q.mft
Manifest number: 0C10
Signing time: Sun 15 Jun 2025 16:00:56 +0000
Manifest this update: Sun 15 Jun 2025 16:00:56 +0000
Manifest next update: Mon 16 Jun 2025 16:00:56 +0000
Files and hashes: 1: lEEZzzybqBVZbE52j1UTaBha8S8.roa (hash: M0ghNe8I1TZs4KtvQ8xKIi7A+x2ciHjaRyld8EsOpko=)
2: tAyVhnwwhMTBai_rtGZRCQ8yR-Q.crl (hash: By6BjQWKixPDKkNCMpICqkQQKoTArXCqGLXMo1dM3WU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/3182ce-9d2f-4b22-abcd-acd9a2eca33f/1/tAyVhnwwhMTBai_rtGZRCQ8yR-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/3182ce-9d2f-4b22-abcd-acd9a2eca33f/1/tAyVhnwwhMTBai_rtGZRCQ8yR-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/tAyVhnwwhMTBai_rtGZRCQ8yR-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 16:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:74:52:8e:e9:34:94:67:b1:b7:19:f2:cd:5a:b0:f8:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b40c95867c3084c4c16a2febb46651090f3247e4
Validity
Not Before: Jun 15 16:00:56 2025 GMT
Not After : Jun 16 16:00:56 2025 GMT
Subject: CN=c309fd478c4f106325c418dc6a69cd8aa952ecf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:13:34:e2:c1:83:4f:68:0c:09:83:4c:21:ef:
2d:dc:14:ea:df:73:b2:1a:d5:57:cb:b5:eb:de:a6:
d8:48:9d:3e:cf:2f:67:d1:ac:d1:75:bb:b0:0f:d0:
72:86:5f:b6:0b:b1:b3:52:5b:0b:5b:f8:a8:72:a5:
6e:3a:db:d6:4e:ce:8c:e6:0f:1f:63:18:84:47:8f:
d7:52:f5:98:29:10:f3:2c:f1:74:52:a2:8e:9b:0a:
61:48:d4:07:45:12:6d:f0:a9:a2:41:47:01:31:c3:
e6:91:f4:ba:a2:12:18:6f:ca:48:c6:e7:cc:c1:91:
4e:82:bb:9e:22:7e:c0:fd:84:82:3d:70:f1:6e:16:
a3:34:0d:ff:04:f8:22:79:a2:87:e1:e0:ba:58:d4:
a1:b3:ac:88:f5:3e:94:28:67:4e:44:9e:e8:c9:7e:
dd:4d:97:f4:69:6e:a3:38:bf:d4:c3:d6:22:0f:b1:
e9:f4:21:b3:6f:45:0c:a7:25:11:c6:a4:53:95:4f:
fe:91:10:94:e4:5a:3d:2f:2f:00:68:d1:bc:df:c2:
b8:72:07:f6:bf:88:e2:8b:d0:87:7f:ee:88:e7:64:
b5:03:28:23:cc:05:f2:4a:58:d9:5f:47:73:03:87:
1e:0a:27:99:22:2e:bc:20:aa:fd:3f:4b:49:88:99:
95:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:09:FD:47:8C:4F:10:63:25:C4:18:DC:6A:69:CD:8A:A9:52:EC:F2
X509v3 Authority Key Identifier:
keyid:B4:0C:95:86:7C:30:84:C4:C1:6A:2F:EB:B4:66:51:09:0F:32:47:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tAyVhnwwhMTBai_rtGZRCQ8yR-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/3182ce-9d2f-4b22-abcd-acd9a2eca33f/1/tAyVhnwwhMTBai_rtGZRCQ8yR-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/3182ce-9d2f-4b22-abcd-acd9a2eca33f/1/tAyVhnwwhMTBai_rtGZRCQ8yR-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:c6:a7:97:c7:1c:68:4b:00:6e:4d:b2:d8:ce:69:e3:bf:fb:
b9:d0:b2:38:f4:54:d2:14:33:f9:2a:09:35:1a:58:02:35:40:
55:f8:6b:21:f2:b6:a9:e1:9c:35:e3:81:ce:69:52:87:af:c5:
4d:1c:57:ad:c1:12:9b:c6:73:c9:49:62:14:e1:d7:da:d9:5a:
74:40:e8:f0:d4:fe:20:4e:d4:71:97:a1:41:e0:1a:25:21:8c:
7f:e1:f3:a7:73:2f:b2:c1:be:e1:25:66:ec:a6:f8:1a:d7:e3:
83:b5:8e:1e:21:35:fa:79:4f:15:1c:cb:97:56:58:3c:f7:73:
b7:81:f2:4a:89:b4:41:9a:61:50:4c:9f:5e:49:84:fc:06:7f:
e0:d3:79:6d:c7:5c:19:51:21:be:2f:d5:39:a5:a9:8d:1c:ea:
97:d4:82:81:7d:82:f5:bf:c9:74:2e:f8:fa:ed:33:6a:36:e7:
a8:bd:a4:c1:d1:e9:4b:2d:22:87:df:b6:93:a5:a5:cb:a6:ed:
69:7c:4f:05:bf:83:c9:4e:83:82:fe:88:f5:c5:ec:1c:96:45:
9f:b3:fe:bc:83:47:ef:62:75:3d:7c:18:65:82:b5:65:46:ec:
52:ce:7b:7a:75:5e:76:b0:f1:de:d7:e1:f0:aa:91:0b:96:a4:
6c:f8:df:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 02:40:44 2025 by rpki-client