Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/3fe931-7dd6-443b-aade-d9a61937a1e5/1/TfGBHzmXuVCsieQQ6j7wGKZz1fw.mft
File: TfGBHzmXuVCsieQQ6j7wGKZz1fw.mft (raw, json)
Hash identifier: 6HZrljqhaBCZyWPxtEj4VKuKi86qlLdTbKN7ArUkn2A=
Subject key identifier: EB:86:BF:BB:F8:88:33:9E:27:FD:1C:BA:4F:91:64:64:E5:58:31:D1
Authority key identifier: 4D:F1:81:1F:39:97:B9:50:AC:89:E4:10:EA:3E:F0:18:A6:73:D5:FC
Certificate issuer: /CN=4df1811f3997b950ac89e410ea3ef018a673d5fc
Certificate serial: 01977E9F51BCA93A7EF9181218CAA325D2A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TfGBHzmXuVCsieQQ6j7wGKZz1fw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/3fe931-7dd6-443b-aade-d9a61937a1e5/1/TfGBHzmXuVCsieQQ6j7wGKZz1fw.mft
Manifest number: 0557
Signing time: Tue 17 Jun 2025 16:00:59 +0000
Manifest this update: Tue 17 Jun 2025 16:00:59 +0000
Manifest next update: Wed 18 Jun 2025 16:00:59 +0000
Files and hashes: 1: 4m_ZlqWE1YEBP4kWtbELic7ECzg.roa (hash: t8PO7dqvDfBV4dwcfBXHsLynSbU2oXoJqnNbzqZG81g=)
2: TfGBHzmXuVCsieQQ6j7wGKZz1fw.crl (hash: Q/+EV7WBZ1Gnsn8+9M+ieEuaTEB5SoYqtJkTgSBpLxA=)
3: risExVobQciJpjckh7R5a6pHayQ.roa (hash: smtSJjRXs0E72dzCfhCCARBzkZPKWKCqhHgp8E/C6HY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/3fe931-7dd6-443b-aade-d9a61937a1e5/1/TfGBHzmXuVCsieQQ6j7wGKZz1fw.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/3fe931-7dd6-443b-aade-d9a61937a1e5/1/TfGBHzmXuVCsieQQ6j7wGKZz1fw.mft
rsync://rpki.ripe.net/repository/DEFAULT/TfGBHzmXuVCsieQQ6j7wGKZz1fw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 13:26:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7e:9f:51:bc:a9:3a:7e:f9:18:12:18:ca:a3:25:d2:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4df1811f3997b950ac89e410ea3ef018a673d5fc
Validity
Not Before: Jun 17 16:00:59 2025 GMT
Not After : Jun 18 16:00:59 2025 GMT
Subject: CN=eb86bfbbf888339e27fd1cba4f916464e55831d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:72:21:f4:3c:af:da:fc:3a:0f:2f:8c:a1:31:
83:c0:cc:da:33:bf:4b:d1:ce:0b:50:c2:63:b0:c5:
b0:05:5e:39:26:70:b5:d6:4c:02:28:e6:c1:b1:1d:
c4:1a:ec:ec:85:54:ae:0d:7c:f4:44:ff:e6:9c:f4:
8d:0f:49:1c:0f:aa:af:de:ef:a4:32:c2:bf:07:42:
d3:ad:8c:54:52:1d:98:5e:5f:de:77:f9:fe:ff:14:
e1:09:c5:24:4a:f2:b0:91:b9:cb:61:95:b7:9a:5b:
7c:62:b5:1f:ee:40:3c:19:a9:81:c7:f2:b3:e4:19:
63:2b:ae:2a:54:79:0d:fd:ee:ac:c8:3b:82:79:9e:
c6:a3:a7:96:f6:c8:b5:da:f8:ec:d6:d2:04:ea:db:
f5:c6:dd:83:da:2b:36:c6:20:c4:5c:56:c0:cc:6e:
92:ba:ac:58:ed:96:75:40:83:d3:3c:a5:10:23:23:
02:05:56:e7:32:d3:42:56:0b:c0:f0:e1:3b:e1:d6:
b1:c1:1f:e0:43:e0:82:1f:b7:71:97:7f:52:19:e2:
79:7a:9c:6d:e9:78:2f:90:ee:ed:be:02:2e:71:85:
66:01:88:61:29:cc:a1:37:01:e5:4c:32:08:cc:8b:
58:cd:be:b0:5f:da:00:e2:f3:f2:35:a8:4a:06:06:
04:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:86:BF:BB:F8:88:33:9E:27:FD:1C:BA:4F:91:64:64:E5:58:31:D1
X509v3 Authority Key Identifier:
keyid:4D:F1:81:1F:39:97:B9:50:AC:89:E4:10:EA:3E:F0:18:A6:73:D5:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TfGBHzmXuVCsieQQ6j7wGKZz1fw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3fe931-7dd6-443b-aade-d9a61937a1e5/1/TfGBHzmXuVCsieQQ6j7wGKZz1fw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3fe931-7dd6-443b-aade-d9a61937a1e5/1/TfGBHzmXuVCsieQQ6j7wGKZz1fw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:aa:cb:25:d8:2c:45:0c:28:c4:17:7f:2f:2d:a2:b7:52:7e:
2f:1d:86:ab:9f:44:e0:77:fb:5f:ea:aa:93:37:5b:ed:2a:61:
91:f8:47:7c:e4:45:25:2d:15:a1:24:e0:69:dd:2d:20:fc:eb:
8e:69:c4:d2:ef:26:55:b6:0f:56:78:4e:b4:cd:22:1e:9e:27:
af:7b:b0:02:7f:2f:39:2c:d8:f0:07:78:c0:e1:e6:9d:86:eb:
97:a5:79:a4:02:ad:45:db:6a:8a:df:43:84:4b:3c:de:c3:8c:
8c:31:a7:59:dc:e5:f4:e4:fb:18:01:f4:a0:3b:d3:1b:f9:9b:
26:eb:9a:31:56:cd:0a:9b:45:4f:f4:df:f2:93:b3:47:b7:c7:
a7:6d:f5:48:3e:e9:d4:66:d4:d8:4e:23:af:b7:01:a3:e3:31:
f3:d2:cb:15:e8:37:74:b5:5c:b4:02:8a:1d:2f:f4:83:ba:8f:
11:e3:6e:64:de:fa:f6:e9:e4:7b:ec:72:a7:aa:0a:2c:d1:f6:
fc:31:e8:ce:08:9c:82:6a:2b:a8:ee:d1:75:ad:91:84:3c:23:
7a:a5:d5:ea:5c:eb:45:1c:d6:f1:8a:1d:b1:c7:f7:9b:c2:c6:
e3:c7:9d:e4:22:b8:00:d6:3f:05:bc:60:0b:fb:03:6c:c6:b7:
d0:49:70:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 19:43:18 2025 by rpki-client