Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/cbfd1e-1202-40c1-bdf0-c24ee0494541/1/TZRvTfIjdJGmjfpAe-QfroS72mY.mft
File: TZRvTfIjdJGmjfpAe-QfroS72mY.mft (raw, json)
Hash identifier: 14tZPTvPJEuhDV2umEQg8eI6+hDoyS7n+4M52zAYVvE=
Subject key identifier: 90:49:F3:BF:B0:F3:77:0E:23:1D:69:43:C9:99:1C:90:91:D5:B5:86
Authority key identifier: 4D:94:6F:4D:F2:23:74:91:A6:8D:FA:40:7B:E4:1F:AE:84:BB:DA:66
Certificate issuer: /CN=4d946f4df2237491a68dfa407be41fae84bbda66
Certificate serial: 019771513AF0A7D50DB450F1920D1178692A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TZRvTfIjdJGmjfpAe-QfroS72mY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/cbfd1e-1202-40c1-bdf0-c24ee0494541/1/TZRvTfIjdJGmjfpAe-QfroS72mY.mft
Manifest number: 0EF3
Signing time: Sun 15 Jun 2025 02:00:38 +0000
Manifest this update: Sun 15 Jun 2025 02:00:38 +0000
Manifest next update: Mon 16 Jun 2025 02:00:38 +0000
Files and hashes: 1: C8PR4XXWsjpP8PHYuoN78zoE9nY.roa (hash: uu2Jn3Slz9u+yGZ22j4LqOkp9lCOWyyfMINckydLJ3E=)
2: TZRvTfIjdJGmjfpAe-QfroS72mY.crl (hash: jgvl4WTEXJBlwUeZSqTTKB1Bo9cTQZOryXFcY6oDl1c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/cbfd1e-1202-40c1-bdf0-c24ee0494541/1/TZRvTfIjdJGmjfpAe-QfroS72mY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/cbfd1e-1202-40c1-bdf0-c24ee0494541/1/TZRvTfIjdJGmjfpAe-QfroS72mY.mft
rsync://rpki.ripe.net/repository/DEFAULT/TZRvTfIjdJGmjfpAe-QfroS72mY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 02:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:51:3a:f0:a7:d5:0d:b4:50:f1:92:0d:11:78:69:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d946f4df2237491a68dfa407be41fae84bbda66
Validity
Not Before: Jun 15 02:00:38 2025 GMT
Not After : Jun 16 02:00:38 2025 GMT
Subject: CN=9049f3bfb0f3770e231d6943c9991c9091d5b586
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:0b:dd:4b:ca:e5:5d:fb:e4:23:4a:a2:1d:0f:
e2:c8:e9:53:d9:df:dd:5d:9c:3e:51:3c:26:d5:77:
09:6d:e2:1a:02:33:08:24:0e:1c:84:71:67:8a:a4:
f5:56:d5:b8:51:5a:7d:79:17:a4:77:78:55:88:07:
dd:dc:66:62:3b:f0:16:15:30:a3:b3:be:6f:74:d7:
47:f0:3b:42:86:e6:f8:6e:4f:0c:07:6a:58:0f:43:
34:91:9f:9c:86:0c:ed:97:30:6e:79:1d:aa:06:ee:
47:0e:8f:8b:92:79:ba:41:99:dd:f2:a8:4b:cc:9a:
f7:99:17:14:0e:72:d0:c1:df:c6:b2:a5:7d:99:7a:
4a:77:0a:5d:72:2f:68:26:ef:f8:94:20:88:c9:b5:
90:84:30:2c:5d:00:57:83:a0:e5:6f:72:67:37:35:
5c:07:da:8b:3d:74:88:b3:50:2e:eb:e3:1a:eb:25:
cb:9b:79:a2:6c:46:24:3c:9d:e0:86:48:e9:85:b5:
ce:f9:79:67:cd:08:98:68:b3:cc:69:a3:06:79:56:
b1:14:ca:36:d8:b7:96:01:f2:4e:15:17:b8:3d:48:
bc:77:b5:bd:57:6c:1e:53:22:7a:49:ee:0f:1e:ee:
22:f6:da:1b:0f:3f:12:06:a8:04:83:2a:ce:80:e5:
8f:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:49:F3:BF:B0:F3:77:0E:23:1D:69:43:C9:99:1C:90:91:D5:B5:86
X509v3 Authority Key Identifier:
keyid:4D:94:6F:4D:F2:23:74:91:A6:8D:FA:40:7B:E4:1F:AE:84:BB:DA:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TZRvTfIjdJGmjfpAe-QfroS72mY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cbfd1e-1202-40c1-bdf0-c24ee0494541/1/TZRvTfIjdJGmjfpAe-QfroS72mY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cbfd1e-1202-40c1-bdf0-c24ee0494541/1/TZRvTfIjdJGmjfpAe-QfroS72mY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:fb:1b:e0:21:a8:d3:c4:1c:7c:8e:42:01:e2:f3:e2:d4:8d:
a3:69:b0:17:48:25:92:4c:44:b1:e8:25:b2:86:46:04:26:88:
84:3c:c5:06:f2:9b:84:ef:18:6a:e9:2d:00:ec:d4:ce:80:31:
0b:ec:1f:31:1a:59:46:76:5b:ed:00:63:18:db:88:8c:4c:9a:
d2:c1:51:79:f4:e1:78:5d:59:5a:7f:fc:e6:21:56:89:19:e6:
53:29:83:2c:10:82:23:67:f5:84:f3:13:4e:bb:f9:94:10:bd:
35:2f:b1:95:f2:d0:50:fc:6a:ad:5f:2d:80:22:e4:3a:29:11:
9d:cd:5d:6b:f2:04:a7:c4:2b:d4:12:50:e2:7a:0a:50:26:72:
56:84:90:eb:ab:4c:84:7c:df:46:4b:bb:48:8e:a2:79:00:a9:
aa:d5:5b:6e:c0:23:3b:d9:4c:51:df:45:e2:b6:af:e7:90:5d:
cd:1b:fa:a7:9e:9a:45:5e:22:14:27:62:99:4e:9f:79:5e:b2:
8c:4d:15:de:d1:15:f5:03:76:21:bc:ae:2f:89:bf:92:b0:66:
d9:f8:4e:87:62:b9:13:ec:47:98:70:dd:73:47:62:85:6f:78:
72:8d:02:4c:f2:79:eb:51:06:00:f2:08:a7:8f:39:19:a9:d1:
a5:5a:4d:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 13:17:51 2025 by rpki-client