Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/132ba8-7676-49f6-afcc-7d0423bda74c/1/tNftFLjVGiC67HtmDwioDNz4F78.mft
File: tNftFLjVGiC67HtmDwioDNz4F78.mft (raw, json)
Hash identifier: mQREC6WU/XWr67UapYD/CRbAlgW//mqPNnPdJUUcD/I=
Subject key identifier: 96:F0:F3:8B:88:45:72:3E:31:56:3C:0C:CF:B0:69:98:6C:8F:A7:C4
Authority key identifier: B4:D7:ED:14:B8:D5:1A:20:BA:EC:7B:66:0F:08:A8:0C:DC:F8:17:BF
Certificate issuer: /CN=b4d7ed14b8d51a20baec7b660f08a80cdcf817bf
Certificate serial: 01977075B009E890A3563CBA3A5F9D3BAB83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tNftFLjVGiC67HtmDwioDNz4F78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/132ba8-7676-49f6-afcc-7d0423bda74c/1/tNftFLjVGiC67HtmDwioDNz4F78.mft
Manifest number: 14F1
Signing time: Sat 14 Jun 2025 22:00:50 +0000
Manifest this update: Sat 14 Jun 2025 22:00:50 +0000
Manifest next update: Sun 15 Jun 2025 22:00:50 +0000
Files and hashes: 1: VhTYh9Iw5PVI--2GM6MQuLQlHfw.roa (hash: 4Hkp0WmvBYBS95p1FHn/M3/EZ2GIH50SPjU4ACziYZE=)
2: YVY9twtvMqgJ8wFpvv3lKZVmEkQ.roa (hash: 17qlPl9D+uyL5rzeTz5pj3TELME7ziHzDZ+/fRR9Vec=)
3: tNftFLjVGiC67HtmDwioDNz4F78.crl (hash: ST/J6FpsSa+seyaCfFc0BUYKdjdFooEwImBzmNz4WC0=)
4: y_HvmHHGVlKjcbTPtfwbbemE9ts.roa (hash: 8SIoZagJaVQOy82S0A9ugj7Iv6sEqZZHPMha1KNQ3uM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/132ba8-7676-49f6-afcc-7d0423bda74c/1/tNftFLjVGiC67HtmDwioDNz4F78.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/132ba8-7676-49f6-afcc-7d0423bda74c/1/tNftFLjVGiC67HtmDwioDNz4F78.mft
rsync://rpki.ripe.net/repository/DEFAULT/tNftFLjVGiC67HtmDwioDNz4F78.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:75:b0:09:e8:90:a3:56:3c:ba:3a:5f:9d:3b:ab:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4d7ed14b8d51a20baec7b660f08a80cdcf817bf
Validity
Not Before: Jun 14 22:00:50 2025 GMT
Not After : Jun 15 22:00:50 2025 GMT
Subject: CN=96f0f38b8845723e31563c0ccfb069986c8fa7c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:fb:26:09:be:39:bd:ce:5b:ab:a8:e4:07:90:
5e:f6:67:e4:2b:65:0d:b2:69:4e:e2:31:ad:3e:c5:
6d:7c:5b:79:eb:4f:0e:d2:9d:04:e2:2e:e2:ad:96:
22:0f:de:2b:98:d8:bb:1e:12:97:b2:90:3f:98:cf:
07:bc:60:cc:af:6d:3b:e5:43:f9:98:56:c6:d5:c5:
c9:ac:a0:d8:35:42:3a:a4:2b:11:eb:3c:b0:e3:34:
98:b7:94:b3:82:2d:d4:c7:3d:5b:97:1a:70:93:bf:
ea:c9:a2:99:9c:44:c3:71:1a:12:e3:ba:f3:97:cd:
21:d5:d0:3c:b8:2d:01:5d:24:03:01:df:4d:b9:00:
04:d1:0e:d1:4c:88:23:81:a5:71:70:a0:44:10:0b:
e0:a8:ec:ca:dc:0b:ef:da:6f:ca:75:b1:e5:a6:3f:
d8:27:6a:00:f4:0b:0b:b7:b9:bf:60:d9:05:eb:64:
a4:43:c2:88:ae:10:2d:06:d5:5a:de:83:51:61:d8:
90:21:d5:d4:2a:63:41:a4:ac:9c:5e:8e:8a:14:d2:
21:ff:b5:9b:35:e6:8c:3c:87:05:c7:9b:e5:ba:28:
bc:9f:5a:c5:aa:90:60:46:21:be:be:2e:09:78:d1:
2c:85:04:54:ab:f4:9a:83:98:b8:29:6e:40:a7:b8:
54:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:F0:F3:8B:88:45:72:3E:31:56:3C:0C:CF:B0:69:98:6C:8F:A7:C4
X509v3 Authority Key Identifier:
keyid:B4:D7:ED:14:B8:D5:1A:20:BA:EC:7B:66:0F:08:A8:0C:DC:F8:17:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tNftFLjVGiC67HtmDwioDNz4F78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/132ba8-7676-49f6-afcc-7d0423bda74c/1/tNftFLjVGiC67HtmDwioDNz4F78.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/132ba8-7676-49f6-afcc-7d0423bda74c/1/tNftFLjVGiC67HtmDwioDNz4F78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:c0:58:d8:1f:64:cc:3c:8b:4d:74:e4:dd:fa:aa:07:7d:db:
31:f4:cd:79:d0:70:5c:e7:3e:bb:29:6f:5a:e5:b1:44:2f:68:
1b:8e:29:94:9f:97:58:cd:6b:24:7b:8c:c6:33:42:89:d2:51:
f0:8a:8c:26:ad:3f:6a:40:6c:41:7f:6c:cd:6b:c5:91:5b:60:
3e:f1:a3:74:06:bc:10:51:7e:84:9d:f9:eb:27:0a:ab:cd:4c:
60:57:d4:16:6c:f4:a2:bc:ce:1a:d4:75:85:70:a4:9d:5a:de:
e1:60:91:ac:6c:b5:70:92:f2:65:ec:b0:c3:4b:e0:21:28:30:
a6:0a:47:2a:0a:e6:30:57:5c:cf:c0:b7:bc:6c:6d:47:02:64:
86:75:ba:7e:3d:6b:e1:18:38:a5:d3:0e:19:23:ec:ba:d3:15:
26:51:d5:e2:0d:0f:96:6b:58:59:43:2f:40:60:b0:59:cb:6a:
70:9c:cd:3a:17:54:ce:71:f0:1f:4a:a2:5a:9d:1d:24:f8:05:
ed:f8:47:33:a1:e1:06:f7:93:2a:01:0e:a8:ad:ec:b1:21:a2:
7d:79:6b:4e:6c:0b:bf:9d:9f:7f:20:79:b2:43:73:a7:ee:1b:
9d:08:5c:70:31:ea:90:f0:fc:72:6d:ad:7f:97:b0:c3:15:85:
b1:c7:36:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:36:53 2025 by rpki-client