Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.mft
File: TahNJHzjfNzPBuFXHSJqK4Vne80.mft (raw, json)
Hash identifier: 6Bh7CWH+caKC2hsqZz4Z+6cv7ui+xrnCZ4vOMfaiz90=
Subject key identifier: 8F:C2:4E:4E:49:E2:23:C2:E0:62:6A:8B:4D:31:3A:79:AA:5D:5D:45
Authority key identifier: 4D:A8:4D:24:7C:E3:7C:DC:CF:06:E1:57:1D:22:6A:2B:85:67:7B:CD
Certificate issuer: /CN=4da84d247ce37cdccf06e1571d226a2b85677bcd
Certificate serial: 0197771CE74960D71505DAF07FE3D5452B7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TahNJHzjfNzPBuFXHSJqK4Vne80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.mft
Manifest number: 15AD
Signing time: Mon 16 Jun 2025 05:01:12 +0000
Manifest this update: Mon 16 Jun 2025 05:01:12 +0000
Manifest next update: Tue 17 Jun 2025 05:01:12 +0000
Files and hashes: 1: 5Tj38Bsn0hJUYrmVNSahq5IYxas.roa (hash: GZ7T7PHhO62jK4WQFKNvOrwYNZYOPPS6icOBzwnz7nI=)
2: Dn1x9nqC0rA_VncF-BuvaeIn_Yc.roa (hash: HSjxAg+X+QFqjbXeKMYZbr1j8n6ewv+Jo99Iqhyk6hE=)
3: IhsNkpEObyOhrdScw0XLGeqSfjU.roa (hash: cYBkSPS8A7jki3ADlXunYLfb3jaAdvC2BeR0D6SyyQw=)
4: NGPkgc-gMBPWvfnpR_WESooqffM.roa (hash: h7f13JmtNSfs0kxRIebuhHcsUGxQLBWtTWJQue5vIeg=)
5: RLeyW7lqx5hu9s9VIH-LZ4c9FSQ.roa (hash: 8qkFZX4fO9IGCK+/hjULowdb/hcL+0qKwz4xQec6iUE=)
6: TahNJHzjfNzPBuFXHSJqK4Vne80.crl (hash: jcIbVKylxZDjAPCDrbleJYUXqUzmXKw2zsNY1bjfytc=)
7: lRLrr8PrmpyLA1Ah6iT6M53B97s.roa (hash: KztLb5hpOs++pyJMXHsFQs+/mWS279OT4VXn2Nei8oY=)
8: pmDvMLO2RE0O4Ex_JrEkUC8Orjc.roa (hash: EobRSKgdMhfP9qw1zU6ZKGGyelmEJlJ7Zo4kdI4/8FI=)
9: sTgj5gtBXlZvbQkuD303wv14ZJM.roa (hash: 2lGTVGTpWSlL4AKzK4tCKidrFOFRYmSZ+Qh+p4OiuBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.mft
rsync://rpki.ripe.net/repository/DEFAULT/TahNJHzjfNzPBuFXHSJqK4Vne80.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 05:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:77:1c:e7:49:60:d7:15:05:da:f0:7f:e3:d5:45:2b:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4da84d247ce37cdccf06e1571d226a2b85677bcd
Validity
Not Before: Jun 16 05:01:12 2025 GMT
Not After : Jun 17 05:01:12 2025 GMT
Subject: CN=8fc24e4e49e223c2e0626a8b4d313a79aa5d5d45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:9c:c3:bb:b8:3c:11:8c:78:a7:cb:bc:a7:e8:
a2:d3:ad:0a:2b:80:7c:d9:8c:56:d4:d3:66:cf:6e:
d8:65:55:ae:a3:d5:f9:eb:71:da:dc:58:11:58:25:
61:a6:15:30:07:f3:bf:b1:bb:28:a1:2f:46:76:c6:
c1:9f:38:aa:71:ce:d6:19:20:91:86:74:64:88:4a:
3f:5e:95:3a:f6:74:c6:49:11:9e:f4:68:dd:9e:f7:
a0:c6:2a:de:71:84:86:38:41:43:d7:b3:63:23:c1:
b7:c0:25:65:ba:e8:c9:6f:dd:72:9f:2a:ee:69:0c:
39:e1:b1:fd:98:16:52:9d:d7:d1:99:9a:1e:31:10:
e7:08:f5:e8:87:de:3f:fa:b9:0a:98:79:30:3a:af:
26:0f:72:34:26:bd:c8:ec:a2:53:34:c2:23:48:65:
71:49:e8:b7:6f:15:c4:20:95:01:39:86:00:9a:4f:
bf:1d:77:17:aa:4e:87:1c:91:1f:0c:f4:e2:fa:41:
60:dc:43:ac:a1:95:56:1f:ce:19:c8:89:1c:1d:26:
97:17:2c:62:e4:b1:e0:c6:83:27:86:99:99:93:f7:
de:63:b4:84:ba:86:1f:a0:53:dd:04:cb:45:b1:22:
5c:a3:90:29:37:58:e2:7e:f9:17:f7:4a:db:84:91:
3f:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:C2:4E:4E:49:E2:23:C2:E0:62:6A:8B:4D:31:3A:79:AA:5D:5D:45
X509v3 Authority Key Identifier:
keyid:4D:A8:4D:24:7C:E3:7C:DC:CF:06:E1:57:1D:22:6A:2B:85:67:7B:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TahNJHzjfNzPBuFXHSJqK4Vne80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:43:60:72:82:23:68:4c:b2:e8:8d:46:88:f4:90:2a:be:43:
60:df:a0:38:7d:dd:b1:af:37:51:0a:ea:09:97:48:3f:af:a4:
7f:06:0e:24:de:4b:81:17:b6:8d:df:c5:e9:ca:83:b8:7b:c5:
2d:d1:5e:4b:45:c6:08:b3:81:70:c4:be:0f:35:f7:a5:ac:5a:
9e:f0:7f:3f:f0:e1:c1:29:3b:8b:25:2d:40:6a:76:43:93:d7:
51:a6:29:89:de:f3:9a:cd:4f:48:18:96:c0:9f:3a:2d:8f:d3:
1e:5a:ff:99:1b:7c:92:ea:76:7b:bd:c9:2c:db:f7:91:52:7d:
01:21:41:f5:1d:c4:4a:05:87:70:af:1d:0b:03:df:97:0f:10:
33:60:fb:97:dd:9a:a2:ad:d4:46:a8:e9:fc:3d:16:ae:f1:4f:
a7:02:86:da:27:c5:78:97:9e:e9:21:c9:87:65:7b:a4:85:2b:
c1:e6:83:a3:aa:a2:d0:42:c8:eb:10:3b:5d:30:d0:95:98:23:
e6:d6:d5:61:d9:b3:e7:19:65:3b:0c:34:92:79:cd:52:fd:56:
7a:83:65:b1:f4:6d:9c:43:a3:95:c3:01:95:19:16:21:83:0f:
d8:11:f0:d5:3b:7c:ac:97:ce:0b:6a:fb:1d:17:43:71:fc:b1:
2f:49:c2:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 14:43:19 2025 by rpki-client