Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/1d0c39-2555-468f-be66-ff9bab90af18/1/tmxJhc1gZDIg4GSi4RTXj1sDnCs.mft
File: tmxJhc1gZDIg4GSi4RTXj1sDnCs.mft (raw, json)
Hash identifier: Vxgj+SMGvG0zB9Vu/cnY4WPUIZ9gC79JXOAhtWlJJos=
Subject key identifier: A5:E6:99:64:A7:EC:0B:25:AE:4C:68:68:9B:55:70:68:23:2D:EC:60
Authority key identifier: B6:6C:49:85:CD:60:64:32:20:E0:64:A2:E1:14:D7:8F:5B:03:9C:2B
Certificate issuer: /CN=b66c4985cd60643220e064a2e114d78f5b039c2b
Certificate serial: 01976960E94F8385308596374D2EC8E17618
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tmxJhc1gZDIg4GSi4RTXj1sDnCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/1d0c39-2555-468f-be66-ff9bab90af18/1/tmxJhc1gZDIg4GSi4RTXj1sDnCs.mft
Manifest number: 07DA
Signing time: Fri 13 Jun 2025 13:00:48 +0000
Manifest this update: Fri 13 Jun 2025 13:00:48 +0000
Manifest next update: Sat 14 Jun 2025 13:00:48 +0000
Files and hashes: 1: tmxJhc1gZDIg4GSi4RTXj1sDnCs.crl (hash: 3cCoHWbHPzPtAEjeqb3+etGtJkOmyRaMU6FXFpOd5N4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/1d0c39-2555-468f-be66-ff9bab90af18/1/tmxJhc1gZDIg4GSi4RTXj1sDnCs.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/1d0c39-2555-468f-be66-ff9bab90af18/1/tmxJhc1gZDIg4GSi4RTXj1sDnCs.mft
rsync://rpki.ripe.net/repository/DEFAULT/tmxJhc1gZDIg4GSi4RTXj1sDnCs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:60:e9:4f:83:85:30:85:96:37:4d:2e:c8:e1:76:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b66c4985cd60643220e064a2e114d78f5b039c2b
Validity
Not Before: Jun 13 13:00:48 2025 GMT
Not After : Jun 14 13:00:48 2025 GMT
Subject: CN=a5e69964a7ec0b25ae4c68689b557068232dec60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c0:ec:9a:55:df:3b:3a:0e:c7:f1:db:e8:f7:
e6:06:be:89:17:b1:12:7d:e9:c0:b8:46:ca:3d:92:
24:89:0d:5e:1c:f5:91:17:0b:9d:72:a6:35:89:56:
d6:d5:f0:af:10:25:9e:f4:fa:90:5c:14:a8:69:0b:
14:aa:9a:83:2b:1b:e8:86:5b:ae:93:06:73:64:11:
5c:bb:76:78:63:c9:02:bc:05:ec:61:5f:60:13:2d:
25:20:0c:89:9e:03:01:0c:1d:a4:9b:5b:2b:ad:c9:
d5:96:c3:42:2f:88:f8:65:f9:6c:43:c8:b0:1d:b8:
13:b9:27:44:85:5b:a6:b1:30:aa:ad:21:22:88:e0:
7d:44:6a:10:4d:61:b4:15:da:7a:f2:a0:3f:31:b1:
32:39:b6:ee:39:fe:60:44:76:86:3d:84:ce:af:cb:
e1:e1:39:f5:62:1d:28:0e:c6:97:11:f8:3e:8a:72:
50:8b:23:64:27:c6:89:6d:c6:dd:59:3a:48:89:eb:
b3:ef:34:6d:05:8f:8a:0d:89:4d:38:49:88:5a:2a:
cc:90:33:ef:03:f5:a4:95:52:bd:de:11:e8:fe:fd:
85:73:27:65:22:ab:a7:2f:79:71:f5:ad:c5:0b:18:
1d:87:e3:e4:4f:fe:4b:80:ca:6f:e0:57:f1:43:f7:
a1:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:E6:99:64:A7:EC:0B:25:AE:4C:68:68:9B:55:70:68:23:2D:EC:60
X509v3 Authority Key Identifier:
keyid:B6:6C:49:85:CD:60:64:32:20:E0:64:A2:E1:14:D7:8F:5B:03:9C:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tmxJhc1gZDIg4GSi4RTXj1sDnCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1d0c39-2555-468f-be66-ff9bab90af18/1/tmxJhc1gZDIg4GSi4RTXj1sDnCs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1d0c39-2555-468f-be66-ff9bab90af18/1/tmxJhc1gZDIg4GSi4RTXj1sDnCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:d1:da:ed:4a:31:82:ec:19:ce:85:a1:bb:be:3e:55:12:cd:
4e:07:6b:09:40:64:ba:90:b5:9a:a7:33:f6:b6:cb:d5:fe:ec:
81:c0:ce:12:28:25:19:d2:50:5f:c4:ca:0e:40:b7:1a:b7:b5:
d7:b8:e7:b2:56:11:af:d4:31:b8:00:d3:94:db:f5:81:16:15:
25:2b:af:b6:01:bf:8a:0d:5c:02:d5:a4:19:af:69:5c:4e:e4:
5b:c3:af:e1:a1:3d:9b:20:e5:08:be:dd:bc:8b:1d:78:9c:32:
a8:47:44:f5:41:06:7f:1c:36:cf:ff:64:8e:37:0f:5c:89:8f:
71:7a:1c:86:ff:14:75:ea:55:cf:c7:2a:31:7b:fe:1b:77:5f:
2a:46:c4:36:ef:36:15:11:9f:dd:75:82:c4:4c:e0:f2:c9:30:
c9:00:59:08:bc:56:3f:e8:bf:99:b1:47:9e:c4:80:3c:33:67:
d1:aa:7b:94:3a:26:d1:6e:48:8c:5d:b8:b3:a7:d1:dd:e5:9d:
69:7c:08:a9:f0:4b:bc:da:5b:e8:a7:fd:36:6a:c4:d7:d7:70:
28:2d:45:b0:24:b2:d6:ed:eb:72:d6:72:26:34:50:92:c9:50:
da:3a:f9:3f:72:3a:93:95:f8:a4:1a:0a:ad:b3:07:d1:cd:98:
78:4a:d0:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:20:04 2025 by rpki-client