Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/4afeab-02b9-4ebd-bfa2-8e80b496a03e/1/TgTgpximE5qcZfDUiGu4JxTaZoI.mft
File: TgTgpximE5qcZfDUiGu4JxTaZoI.mft (raw, json)
Hash identifier: SitTh3H63gZCI5LrEJx3vLpAJq3nO8wkz0AnC46BJBo=
Subject key identifier: BC:D7:D5:6A:4D:DF:D4:BD:50:AF:05:24:B5:74:21:78:B9:8A:41:25
Authority key identifier: 4E:04:E0:A7:18:A6:13:9A:9C:65:F0:D4:88:6B:B8:27:14:DA:66:82
Certificate issuer: /CN=4e04e0a718a6139a9c65f0d4886bb82714da6682
Certificate serial: 0197696155545AA4B0FDF6915A0AEB6812B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TgTgpximE5qcZfDUiGu4JxTaZoI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/4afeab-02b9-4ebd-bfa2-8e80b496a03e/1/TgTgpximE5qcZfDUiGu4JxTaZoI.mft
Manifest number: 158D
Signing time: Fri 13 Jun 2025 13:01:15 +0000
Manifest this update: Fri 13 Jun 2025 13:01:15 +0000
Manifest next update: Sat 14 Jun 2025 13:01:15 +0000
Files and hashes: 1: TgTgpximE5qcZfDUiGu4JxTaZoI.crl (hash: v0RtfjBDJijCK5uOwiTlE/v35z0KxuCE55h/qo9ei50=)
2: _DVbXJIlrc4WueVJodx5_dUQQGU.roa (hash: qLnLYdx/R1C59idEfb9lAoJsSeK5qnRHJhL7xW0LEkE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/4afeab-02b9-4ebd-bfa2-8e80b496a03e/1/TgTgpximE5qcZfDUiGu4JxTaZoI.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/4afeab-02b9-4ebd-bfa2-8e80b496a03e/1/TgTgpximE5qcZfDUiGu4JxTaZoI.mft
rsync://rpki.ripe.net/repository/DEFAULT/TgTgpximE5qcZfDUiGu4JxTaZoI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:61:55:54:5a:a4:b0:fd:f6:91:5a:0a:eb:68:12:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e04e0a718a6139a9c65f0d4886bb82714da6682
Validity
Not Before: Jun 13 13:01:15 2025 GMT
Not After : Jun 14 13:01:15 2025 GMT
Subject: CN=bcd7d56a4ddfd4bd50af0524b5742178b98a4125
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:3c:f0:8b:5f:33:4e:b2:2e:67:a6:36:a9:95:
7d:10:f8:45:8f:9f:56:8a:1e:d5:dc:83:bb:d4:89:
3d:92:34:9c:d6:e4:c4:ff:1c:fc:3e:33:19:00:59:
2e:7d:db:b1:d4:a0:df:98:af:9e:76:f7:53:7b:2d:
ed:e6:8c:e2:b4:e9:bf:e6:1b:27:2e:ba:92:cb:5b:
6c:f0:1b:85:b0:2c:49:26:4f:da:09:f4:cf:90:d3:
bd:25:b1:e0:13:f3:cd:ad:14:3e:e5:37:f7:81:47:
f8:40:7f:63:a0:be:0a:48:3f:4e:bf:b2:90:f2:21:
41:29:54:5c:42:17:bf:19:08:8a:b8:4c:f0:4f:1a:
09:4a:3a:a1:47:56:c2:ed:4b:2f:71:fc:c3:91:c0:
4a:74:ce:cb:e3:d7:a5:44:2a:e0:d7:6e:c4:f4:6f:
06:8f:3c:b8:2d:be:9c:c8:02:2a:80:32:70:5c:10:
77:5b:fe:8d:00:09:e3:b0:07:4b:e1:9b:68:4a:c0:
a5:6e:c8:f1:8a:1b:e8:3f:97:a2:de:07:6d:e2:f8:
bc:30:20:0c:7b:97:89:dd:0d:b6:f8:3e:4b:33:2d:
bf:59:da:05:29:d1:9f:8e:97:f6:00:84:85:dc:f4:
82:36:c7:ba:95:a9:67:53:13:22:fa:6d:fa:88:7b:
8a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:D7:D5:6A:4D:DF:D4:BD:50:AF:05:24:B5:74:21:78:B9:8A:41:25
X509v3 Authority Key Identifier:
keyid:4E:04:E0:A7:18:A6:13:9A:9C:65:F0:D4:88:6B:B8:27:14:DA:66:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TgTgpximE5qcZfDUiGu4JxTaZoI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4afeab-02b9-4ebd-bfa2-8e80b496a03e/1/TgTgpximE5qcZfDUiGu4JxTaZoI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4afeab-02b9-4ebd-bfa2-8e80b496a03e/1/TgTgpximE5qcZfDUiGu4JxTaZoI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:4c:15:40:a2:57:7a:05:26:47:7b:32:bc:98:fc:02:c6:37:
95:39:9b:f6:22:8d:cc:cc:29:dc:e1:dd:d0:19:bd:fc:ec:2c:
27:13:1a:97:2e:41:2f:d9:de:83:47:cd:dc:84:4f:29:5d:ee:
51:f5:59:31:85:58:a9:08:45:7d:c1:5b:92:46:ef:3d:43:b0:
6f:61:35:6a:b1:fb:12:4b:dd:07:9f:18:89:af:18:e7:10:b3:
84:bc:df:47:d2:5d:c1:0a:29:23:59:94:d1:26:7b:d3:67:15:
4d:25:17:bc:95:c4:6a:95:5b:87:91:b0:65:bc:56:bd:e3:f1:
0f:73:c1:21:35:c9:ae:29:11:4d:23:68:e5:35:90:6d:31:ce:
47:15:6b:fe:6c:a1:23:27:7b:ad:22:c9:67:a2:cb:b4:f8:c4:
67:4f:5a:a7:0f:7c:ba:ec:6e:7c:ea:d9:88:3f:a2:29:a0:c3:
03:d2:01:f4:8f:77:f8:5f:0e:7e:6c:23:c1:af:1d:ff:98:14:
95:66:13:80:bf:fe:24:38:a9:18:48:1d:09:41:87:57:59:20:
84:b9:9a:6d:59:c5:1b:e4:98:a2:50:66:ce:8e:7f:4e:e6:f2:
f7:a3:18:d4:40:d9:7b:9e:da:65:1c:55:e1:3c:b2:9a:20:0d:
8d:73:65:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:58:20 2025 by rpki-client