Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.mft
File: tcfYHsTEBVxnP_VxzK0Hw6aZEF4.mft (raw, json)
Hash identifier: I2RRJS1wqRHCChjUjjRsFlwDVCuhasy4Y1YnvDntcTU=
Subject key identifier: 2F:40:43:99:C3:46:35:CB:3F:63:DB:F5:5C:EE:A2:57:AB:D8:BB:A6
Authority key identifier: B5:C7:D8:1E:C4:C4:05:5C:67:3F:F5:71:CC:AD:07:C3:A6:99:10:5E
Certificate issuer: /CN=b5c7d81ec4c4055c673ff571ccad07c3a699105e
Certificate serial: 0197789D1D55FDD3F5901FB212C125081A81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.mft
Manifest number: 08EE
Signing time: Mon 16 Jun 2025 12:00:51 +0000
Manifest this update: Mon 16 Jun 2025 12:00:51 +0000
Manifest next update: Tue 17 Jun 2025 12:00:51 +0000
Files and hashes: 1: Dnpb75XdwM7LxtjkYlloNVMA6rs.roa (hash: EzyV/txDtZvmkY6vt32XISbysVcisfy2gnGp9jREhPs=)
2: ZFlE4CwGV5oXv28o6nsvolZlI_Y.roa (hash: S5Q4DAjjTKxkiafJ6he6yLpO30RXNUCaXjGnLWKadCQ=)
3: tcfYHsTEBVxnP_VxzK0Hw6aZEF4.crl (hash: wUUCoCn/AheCb86crat1cnd5ogCwOUI9m5xRVJ2Fezg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.mft
rsync://rpki.ripe.net/repository/DEFAULT/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 12:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:78:9d:1d:55:fd:d3:f5:90:1f:b2:12:c1:25:08:1a:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5c7d81ec4c4055c673ff571ccad07c3a699105e
Validity
Not Before: Jun 16 12:00:51 2025 GMT
Not After : Jun 17 12:00:51 2025 GMT
Subject: CN=2f404399c34635cb3f63dbf55ceea257abd8bba6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ba:56:41:26:91:7c:51:3a:ca:b5:d1:e1:e2:
90:f4:a7:be:91:1c:35:a0:a3:49:e2:f7:13:46:cc:
19:12:0d:60:54:bd:4e:51:af:34:6e:34:e9:e9:20:
f9:0b:94:65:aa:4d:df:ca:c6:7a:ae:98:f6:d8:1e:
cb:f3:07:c0:4a:f7:3c:a6:44:dd:1f:98:a5:9f:aa:
fc:7f:10:b6:10:cc:11:a3:4c:0b:3c:24:8e:b5:36:
2e:81:dd:ca:a5:0d:bb:e1:2f:9f:41:5e:0b:67:10:
06:8f:ec:8c:a8:9e:fe:36:cf:ea:16:a7:65:c7:b7:
15:f6:df:7a:aa:95:93:69:4b:78:b1:89:93:27:c1:
29:bd:3d:cb:93:2f:f5:91:99:67:fb:2f:94:80:c6:
13:5b:03:f0:4a:95:c1:2d:d8:d2:67:d8:ec:01:ff:
e0:d0:26:ee:53:57:da:d9:cb:ed:1e:d7:98:a2:65:
a2:0d:42:b1:a2:e9:df:2c:3c:fd:78:c4:06:4d:da:
52:17:c4:36:04:87:f3:db:8e:df:42:27:d9:6d:36:
eb:5b:12:41:40:1e:e2:ee:af:82:b7:6f:07:bd:71:
a1:ac:64:10:fb:15:6e:82:12:e0:ea:90:bb:9f:e7:
49:b3:27:77:1b:eb:d5:04:c5:ff:1e:60:b9:5f:46:
d4:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:40:43:99:C3:46:35:CB:3F:63:DB:F5:5C:EE:A2:57:AB:D8:BB:A6
X509v3 Authority Key Identifier:
keyid:B5:C7:D8:1E:C4:C4:05:5C:67:3F:F5:71:CC:AD:07:C3:A6:99:10:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:00:83:c4:03:5f:86:26:4a:27:a9:45:68:43:69:92:fa:b1:
69:1f:ef:c0:bf:a7:a8:b7:ec:6c:1d:97:61:98:37:fe:9b:6a:
bb:c0:7c:2a:96:87:46:3b:73:43:73:5a:d3:3a:a4:19:3b:31:
ad:28:f3:a2:6f:c4:e1:97:24:cc:c8:b2:51:35:a7:a7:34:5e:
c8:87:86:e2:31:b4:95:8b:14:91:61:82:f0:8c:5d:36:b7:d6:
8d:04:fd:ce:e9:b8:16:24:0e:67:2b:1f:b4:2f:ec:7d:5b:dd:
21:80:e1:26:a4:6d:02:6c:02:63:9a:16:fc:c7:ef:86:09:ef:
29:4b:cf:e5:86:01:36:f6:62:e9:01:de:49:1a:4e:44:10:b4:
e8:be:28:80:9f:75:0d:ed:dd:f6:eb:bc:e1:72:37:fb:14:a7:
f0:db:71:6b:25:1f:77:83:48:d1:60:33:df:cb:e5:48:a5:a9:
ee:49:cb:50:e2:77:e9:a9:56:83:3e:b9:d4:0c:c2:dd:a4:4a:
a6:db:5e:1a:62:25:6b:29:44:81:fa:47:f3:cd:91:a3:58:f2:
32:f4:ff:ca:68:06:79:36:f6:0d:eb:f6:11:a1:14:d9:5c:2c:
52:6c:2d:2d:8c:9a:aa:f9:b8:65:21:29:9e:6e:94:5f:ad:81:
a0:ad:41:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 20:06:36 2025 by rpki-client