Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/a831c0-457c-4ba8-bec7-e251109bfd19/1/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.mft
File: TaNxHcXeRfL1tHkBZZ6VbZOCcv4.mft (raw, json)
Hash identifier: 6VxNwPphleEFTV/iY/vYTMnvL7tx2LtX+PXenmdPIHM=
Subject key identifier: F3:75:9F:E7:B1:F4:88:C2:DB:73:AA:FD:54:32:7C:C0:4C:ED:31:B9
Authority key identifier: 4D:A3:71:1D:C5:DE:45:F2:F5:B4:79:01:65:9E:95:6D:93:82:72:FE
Certificate issuer: /CN=4da3711dc5de45f2f5b47901659e956d938272fe
Certificate serial: 019768BBD9742A3508A2E2F5F3C45A8CD570
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/a831c0-457c-4ba8-bec7-e251109bfd19/1/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.mft
Manifest number: 158D
Signing time: Fri 13 Jun 2025 10:00:30 +0000
Manifest this update: Fri 13 Jun 2025 10:00:30 +0000
Manifest next update: Sat 14 Jun 2025 10:00:30 +0000
Files and hashes: 1: 7YKaewqyZbI9lVFIivFUL2FPVzU.roa (hash: wf42n7crwFg9XaXHUPxEE3NTHiwbzXO1xRDVNEMLG6A=)
2: TaNxHcXeRfL1tHkBZZ6VbZOCcv4.crl (hash: WPWfpkZJs/X7U3qXMrPOWs3Z10se9AYoLoOy+/1KXR8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/a831c0-457c-4ba8-bec7-e251109bfd19/1/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/a831c0-457c-4ba8-bec7-e251109bfd19/1/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 10:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:bb:d9:74:2a:35:08:a2:e2:f5:f3:c4:5a:8c:d5:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4da3711dc5de45f2f5b47901659e956d938272fe
Validity
Not Before: Jun 13 10:00:30 2025 GMT
Not After : Jun 14 10:00:30 2025 GMT
Subject: CN=f3759fe7b1f488c2db73aafd54327cc04ced31b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:e5:1b:7c:1a:01:40:82:65:03:94:49:83:a8:
42:06:45:ae:22:18:9d:ff:aa:ca:43:19:6f:3d:5a:
43:0b:66:ba:dc:2e:e5:98:7c:b3:d1:4d:90:83:f9:
80:01:7f:15:2f:60:26:22:a4:6c:48:1d:f5:e3:c8:
da:fb:e4:05:b0:0d:2d:a6:89:03:d2:05:0a:bd:12:
38:ab:6a:9c:7f:f8:29:7b:d6:e8:15:b5:03:a6:10:
12:78:dd:64:d2:a8:0c:a8:d9:68:67:b3:8f:d3:23:
ca:e8:ad:61:df:9c:38:ef:cb:4f:a4:a7:5c:24:ba:
47:ae:dd:41:6c:cc:f4:54:8a:0c:ca:64:18:8a:51:
d9:4c:a5:ca:1c:e4:9f:d3:bc:ce:1d:39:7b:aa:27:
7b:c4:15:02:b2:04:b4:d5:d6:f5:cd:98:89:56:1d:
d1:d1:6f:d8:e2:37:ab:5f:a7:31:c4:f2:a9:0f:d5:
4b:09:52:ac:b8:3a:63:02:e3:e0:24:30:c0:30:7b:
da:22:ec:7c:8d:f6:ef:90:7c:da:f8:c8:e3:c4:19:
02:9a:de:ec:7f:c0:cc:04:80:24:e6:84:a5:28:73:
0c:f6:da:41:23:d3:c0:68:8d:92:32:1f:11:f6:dd:
03:82:c1:1d:f3:a4:52:d2:26:41:b2:f2:6b:49:ad:
81:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:75:9F:E7:B1:F4:88:C2:DB:73:AA:FD:54:32:7C:C0:4C:ED:31:B9
X509v3 Authority Key Identifier:
keyid:4D:A3:71:1D:C5:DE:45:F2:F5:B4:79:01:65:9E:95:6D:93:82:72:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/a831c0-457c-4ba8-bec7-e251109bfd19/1/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/a831c0-457c-4ba8-bec7-e251109bfd19/1/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:30:e5:2e:47:cc:ab:98:f5:b5:70:8b:57:bd:18:a9:e0:3c:
7b:cb:09:8b:8e:45:8d:58:89:03:35:a9:d1:5e:5c:39:53:24:
5e:fb:18:13:41:be:3f:8d:b0:00:b0:2f:ab:de:73:b8:dd:40:
00:e4:d2:33:1c:3f:a2:c1:5f:7b:fa:90:39:26:4a:84:c7:36:
77:0d:01:b4:d2:d4:70:8d:72:ad:00:77:0b:af:d8:49:68:e6:
2e:91:e6:b8:cc:60:cf:bb:c4:26:20:6c:83:14:b0:d4:be:d0:
38:be:f0:d7:9e:37:ce:bd:8b:a6:5a:88:08:db:80:0a:b3:4b:
6a:93:92:bf:04:93:9b:d6:24:fc:22:cc:bc:9b:60:0a:47:fe:
78:60:db:91:d3:d0:a8:1c:36:89:a9:8c:30:42:2d:6e:7d:ae:
c1:00:69:ac:27:09:26:fb:20:75:da:29:f8:b7:86:1a:10:a1:
7b:fe:47:0a:84:2e:91:62:a4:08:5e:b9:5e:f4:9b:e0:8f:f3:
88:e7:2b:48:63:93:3b:65:3d:88:d1:aa:7c:65:d8:56:c4:ba:
b4:a9:73:af:b9:40:92:68:9b:c6:5b:c7:ab:41:c8:9b:b1:b1:
b9:4b:ae:14:c0:6a:80:86:e5:b0:ff:e9:22:2d:d3:56:cf:d0:
08:9b:39:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:27:24 2025 by rpki-client