Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/TnRhR3tZt7wJBvbOYGULs60t7lc.mft
File: TnRhR3tZt7wJBvbOYGULs60t7lc.mft (raw, json)
Hash identifier: qo9xEoaH+jooxAIMxCgx/nHBBOySgXUqfx5UytkXWcU=
Subject key identifier: 6D:65:0C:9B:6B:F9:77:EE:6C:30:6E:A1:92:31:FB:4A:97:72:F4:47
Authority key identifier: 4E:74:61:47:7B:59:B7:BC:09:06:F6:CE:60:65:0B:B3:AD:2D:EE:57
Certificate issuer: /CN=4e7461477b59b7bc0906f6ce60650bb3ad2dee57
Certificate serial: 01976D06A15CEA7D54E946DAA5100BB479B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TnRhR3tZt7wJBvbOYGULs60t7lc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/TnRhR3tZt7wJBvbOYGULs60t7lc.mft
Manifest number: 05E4
Signing time: Sat 14 Jun 2025 06:00:40 +0000
Manifest this update: Sat 14 Jun 2025 06:00:40 +0000
Manifest next update: Sun 15 Jun 2025 06:00:40 +0000
Files and hashes: 1: 1-deSD0Zx7mZFaKLgvp5MfNNL6B0.roa (hash: 0HLnR/UxvmJgyKOOTOBI/jNtxozr1BfrerbK66hTjvg=)
2: TnRhR3tZt7wJBvbOYGULs60t7lc.crl (hash: QlLr9YV78UGkZeOxRgp1tH5m7r9qYfU6tVvHaySlKtQ=)
3: ztG3iRtcx4pgmD82wNPmhKWPj8w.roa (hash: 7wVFIe2H/2PMSyJC9QSggcK+C7T3Sk0wvSIjn0Idsps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/TnRhR3tZt7wJBvbOYGULs60t7lc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/TnRhR3tZt7wJBvbOYGULs60t7lc.mft
rsync://rpki.ripe.net/repository/DEFAULT/TnRhR3tZt7wJBvbOYGULs60t7lc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:06:a1:5c:ea:7d:54:e9:46:da:a5:10:0b:b4:79:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e7461477b59b7bc0906f6ce60650bb3ad2dee57
Validity
Not Before: Jun 14 06:00:40 2025 GMT
Not After : Jun 15 06:00:40 2025 GMT
Subject: CN=6d650c9b6bf977ee6c306ea19231fb4a9772f447
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:fa:0e:0d:db:bd:c2:b5:80:1c:84:ef:d2:af:
95:8b:e5:67:ea:0d:f0:72:d1:ff:e3:bf:58:6f:ef:
65:df:90:ca:16:bc:e8:21:b8:9a:1f:2d:57:ec:77:
60:23:d1:58:d5:d5:f4:07:4e:66:e2:b9:10:db:ec:
18:73:60:b1:f8:e6:6b:ea:06:42:76:ec:c9:90:dc:
e6:fe:7f:b4:d9:09:da:83:ab:b3:b8:ae:d5:b3:d8:
07:9c:e2:54:f8:1f:bc:43:81:83:7d:74:f4:fb:f2:
e3:db:c7:f8:78:e2:94:36:85:85:34:a0:d5:51:f0:
d8:f3:5a:a5:97:eb:c4:e2:29:3c:14:c0:54:5c:c4:
34:6f:34:e2:4b:1e:96:03:87:7d:e9:ab:64:8d:85:
08:a9:58:70:7a:ed:2f:c1:b8:36:2e:5e:45:74:48:
31:82:8f:48:ad:7e:ee:65:48:8b:1f:f0:31:85:88:
fb:81:3a:b5:85:30:4e:92:51:70:61:00:15:2d:44:
25:b9:e4:2f:a6:61:80:7d:55:e5:f2:68:de:db:6f:
a9:fe:5f:6d:77:43:e7:51:dd:c0:85:58:d6:66:89:
0d:a1:c8:3b:8e:9e:27:89:f6:6e:5e:b2:1e:d9:6e:
d5:f6:32:3d:2b:c8:e2:51:b7:be:87:c8:57:64:53:
ba:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:65:0C:9B:6B:F9:77:EE:6C:30:6E:A1:92:31:FB:4A:97:72:F4:47
X509v3 Authority Key Identifier:
keyid:4E:74:61:47:7B:59:B7:BC:09:06:F6:CE:60:65:0B:B3:AD:2D:EE:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TnRhR3tZt7wJBvbOYGULs60t7lc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/TnRhR3tZt7wJBvbOYGULs60t7lc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/TnRhR3tZt7wJBvbOYGULs60t7lc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:ac:0a:c9:dc:8a:d3:8f:ef:41:f5:e6:1f:34:f5:1f:c1:59:
2a:67:3e:14:d3:86:e5:c7:e8:fe:7f:13:49:c2:67:27:d2:d4:
a1:30:de:ba:d4:d4:bf:92:60:f2:53:d1:57:cf:5c:43:74:3e:
b6:61:67:2b:1c:23:f1:a9:9d:89:3c:c8:c0:d1:17:a1:b4:87:
46:9d:6f:ba:25:eb:18:bc:aa:38:f9:75:0d:05:f6:eb:bd:15:
9b:17:ba:b1:2e:18:16:31:f4:db:af:d3:18:d3:6b:f1:ef:6f:
57:db:f2:3c:35:21:39:b5:8c:ed:70:6f:e4:be:0e:48:8a:c4:
86:41:56:12:a0:9a:76:25:2c:8a:a3:93:ed:8c:fe:58:aa:48:
11:56:d8:d5:15:9a:de:63:fb:ad:9c:ec:d6:cb:59:af:f7:a9:
c7:d6:62:5b:ce:aa:40:f9:b4:f0:d2:71:22:80:e6:7b:3b:36:
2e:e0:22:67:fa:8c:3a:15:9b:f4:38:33:9d:17:d4:3e:11:42:
1b:51:57:44:b6:3a:2f:fe:00:c3:c9:a8:f5:bd:aa:7f:38:71:
b3:16:4c:d3:b8:90:4d:51:a7:e5:16:b8:e2:f5:f6:c9:b3:95:
08:ee:eb:f6:d7:37:e1:c0:2b:89:f0:08:04:d4:92:90:e9:28:
d9:f8:e4:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:44:05 2025 by rpki-client