Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/ae3cc8-ce74-4d57-819a-9fa02cc248e5/1/Tom7FOgJr_PsljCL2a6GUafndio.mft
File: Tom7FOgJr_PsljCL2a6GUafndio.mft (raw, json)
Hash identifier: MKJChBxPYopb/2I1CZk2/50F1JiT5Fku1Vh0KUpsSVE=
Subject key identifier: 77:87:67:01:FF:9A:0C:AB:FD:27:FA:0B:61:A2:8B:FA:B7:5B:77:3C
Authority key identifier: 4E:89:BB:14:E8:09:AF:F3:EC:96:30:8B:D9:AE:86:51:A7:E7:76:2A
Certificate issuer: /CN=4e89bb14e809aff3ec96308bd9ae8651a7e7762a
Certificate serial: 01976DABBABD0DAC9B24740FF81C3F3BB28E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tom7FOgJr_PsljCL2a6GUafndio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/ae3cc8-ce74-4d57-819a-9fa02cc248e5/1/Tom7FOgJr_PsljCL2a6GUafndio.mft
Manifest number: 158F
Signing time: Sat 14 Jun 2025 09:01:00 +0000
Manifest this update: Sat 14 Jun 2025 09:01:00 +0000
Manifest next update: Sun 15 Jun 2025 09:01:00 +0000
Files and hashes: 1: Tom7FOgJr_PsljCL2a6GUafndio.crl (hash: hyfxNa8uIM3+y9OT31brQBvEoLVWPG+6sYvguWI6suY=)
2: fxuqWXx_O_zewgAff6HXjyvgKp0.roa (hash: cm4JBhg0Zq8hHGX0z/7BWc/vnIZVK86NCDFtwq+RrhA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/ae3cc8-ce74-4d57-819a-9fa02cc248e5/1/Tom7FOgJr_PsljCL2a6GUafndio.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/ae3cc8-ce74-4d57-819a-9fa02cc248e5/1/Tom7FOgJr_PsljCL2a6GUafndio.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tom7FOgJr_PsljCL2a6GUafndio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 09:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:ab:ba:bd:0d:ac:9b:24:74:0f:f8:1c:3f:3b:b2:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e89bb14e809aff3ec96308bd9ae8651a7e7762a
Validity
Not Before: Jun 14 09:01:00 2025 GMT
Not After : Jun 15 09:01:00 2025 GMT
Subject: CN=77876701ff9a0cabfd27fa0b61a28bfab75b773c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6b:b5:db:eb:49:a4:3b:08:71:9a:8e:34:6a:
0d:d4:05:0b:b7:09:4b:95:92:e1:85:c8:68:cb:e1:
88:e0:de:2f:75:69:38:36:5a:90:08:ed:c3:be:cd:
7d:33:b7:76:0e:40:5c:42:4e:89:78:77:60:b2:b1:
f1:39:f8:85:72:70:a1:00:19:34:c3:ab:e8:59:6b:
be:09:45:71:5f:8d:82:c7:c2:85:c6:34:81:c3:24:
67:56:19:d5:a2:5c:06:a9:a5:cd:c7:b7:a4:b2:c5:
2c:38:af:40:98:47:6e:9a:b3:18:77:bb:f7:8e:e9:
d0:a6:99:0f:24:2e:48:32:96:4e:27:88:d4:b9:82:
98:3a:ba:c6:9f:b0:4e:eb:98:87:c9:4b:12:52:2b:
4d:7a:58:0c:c3:91:e9:f2:e5:77:fc:35:29:c2:9f:
3d:5d:fb:33:df:37:d7:4d:72:ea:e7:28:0b:52:41:
55:0f:5a:ee:fc:c7:ce:a2:ae:ef:b2:6e:86:69:fe:
0b:fc:a9:b1:ab:3c:4a:07:7e:96:7a:bb:0c:89:6f:
39:6d:64:38:e1:44:b6:aa:90:90:2e:d6:0b:1e:50:
f1:09:76:af:6d:e1:95:02:22:d7:95:42:e2:34:bd:
0c:bf:f3:d1:af:79:c0:5b:91:d5:88:d0:f2:6b:d6:
1a:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:87:67:01:FF:9A:0C:AB:FD:27:FA:0B:61:A2:8B:FA:B7:5B:77:3C
X509v3 Authority Key Identifier:
keyid:4E:89:BB:14:E8:09:AF:F3:EC:96:30:8B:D9:AE:86:51:A7:E7:76:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tom7FOgJr_PsljCL2a6GUafndio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/ae3cc8-ce74-4d57-819a-9fa02cc248e5/1/Tom7FOgJr_PsljCL2a6GUafndio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/ae3cc8-ce74-4d57-819a-9fa02cc248e5/1/Tom7FOgJr_PsljCL2a6GUafndio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:bb:fb:f8:55:82:7b:71:3e:c5:e2:09:e8:77:e0:d9:33:08:
ac:74:44:b4:2b:4e:d7:2f:bf:a0:a8:4a:f1:55:a7:81:66:30:
7d:4d:22:62:89:53:c4:92:a7:86:cb:59:dd:bc:d5:2d:f1:a7:
31:ca:10:0c:ad:ac:6a:82:d6:25:6f:39:4d:1c:69:1a:87:ea:
c8:36:21:af:b1:d8:6d:2e:ce:91:33:d3:51:d6:bc:98:35:d6:
58:8e:c5:04:05:44:6e:86:9a:70:f8:da:b6:87:a3:00:32:7c:
7a:c6:35:b0:c7:c4:a6:8d:c2:76:95:fa:51:8e:a1:aa:dd:26:
47:c8:98:d3:49:20:c1:c2:5c:63:91:ce:cc:1a:fc:df:21:b9:
37:dd:f5:c9:1f:57:b9:17:51:89:1f:86:8b:ad:b3:34:1b:7b:
27:0a:28:c7:b0:d0:fa:5c:de:b9:53:62:97:1f:e0:27:2c:6a:
5f:9f:52:2b:b7:f5:e4:c0:63:e2:de:4f:49:b7:db:56:1f:53:
f9:da:96:4b:db:4f:2b:c0:f2:5d:37:71:e7:bc:b9:77:02:69:
30:2b:26:9b:ef:47:ea:6c:2d:4e:7b:08:ff:1b:c4:9b:81:7e:
88:9f:e2:f7:5c:d8:c3:68:b7:1a:1f:52:31:72:77:69:70:c6:
89:b4:c1:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 20:15:57 2025 by rpki-client