Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f67177-78d5-4388-a21a-28263656c6de/1/tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.mft
File: tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.mft (raw, json)
Hash identifier: ssdcEUM6RUCED+av3Qy7cGaLeIdB1ftLgFq3mMqBEUg=
Subject key identifier: 45:76:7B:26:B6:82:C8:4D:C1:09:E7:D0:6D:F2:66:09:38:B4:D8:F2
Authority key identifier: B4:81:84:54:9E:12:E9:93:4B:FF:B7:61:5B:CA:3D:0C:25:68:13:60
Certificate issuer: /CN=b48184549e12e9934bffb7615bca3d0c25681360
Certificate serial: 019783C5D1907CB61BFE9134584BC952F942
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f67177-78d5-4388-a21a-28263656c6de/1/tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.mft
Manifest number: 159B
Signing time: Wed 18 Jun 2025 16:01:08 +0000
Manifest this update: Wed 18 Jun 2025 16:01:08 +0000
Manifest next update: Thu 19 Jun 2025 16:01:08 +0000
Files and hashes: 1: Pmrx9HZexDjQdROL1xOD1S-BjzQ.roa (hash: aBRM8zJUU2ZF0wAF5h20OpU3VGQ3W++oIRE8v06cZXM=)
2: tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.crl (hash: 7bZyqIKzKz/3pB2TcQnpS5nDiS22VtwYM1cKIaiucWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/f67177-78d5-4388-a21a-28263656c6de/1/tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/f67177-78d5-4388-a21a-28263656c6de/1/tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:83:c5:d1:90:7c:b6:1b:fe:91:34:58:4b:c9:52:f9:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b48184549e12e9934bffb7615bca3d0c25681360
Validity
Not Before: Jun 18 16:01:08 2025 GMT
Not After : Jun 19 16:01:08 2025 GMT
Subject: CN=45767b26b682c84dc109e7d06df2660938b4d8f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ac:e4:a2:99:35:8e:91:00:0d:57:f8:65:54:
2d:2b:e0:b0:66:f6:8f:19:4c:3b:db:ef:28:15:70:
68:e3:6d:20:fb:7d:55:90:14:53:af:8b:6a:0e:e7:
ee:db:23:24:85:7b:07:88:37:25:b4:83:ff:89:61:
d4:6c:d0:3f:db:77:39:e5:8b:e5:08:ac:71:5d:16:
a6:20:1f:a0:c0:49:f6:49:7d:14:89:c6:3d:a4:47:
7c:1d:11:33:09:86:0e:4e:87:1a:0d:b5:33:87:55:
62:68:3c:02:40:0a:41:02:71:84:74:84:ff:dc:67:
91:4f:6a:ef:c3:cc:9a:d9:ff:70:e7:6a:53:6b:36:
d9:84:47:ce:25:93:f6:22:03:89:31:36:89:6c:64:
6f:a3:42:79:18:9b:45:84:57:d2:a1:07:89:07:2c:
e1:d7:11:67:e3:00:2c:c4:02:b1:73:db:52:d1:b8:
5d:49:77:88:47:60:d0:84:9d:7b:5f:db:c7:ea:cc:
47:3f:79:df:80:05:84:d8:43:3d:9e:7a:0e:50:bd:
d4:c6:16:9d:e8:e7:61:00:de:72:85:39:32:cc:08:
9d:58:57:d0:2f:8f:f8:85:c8:ce:e7:11:09:0f:12:
5d:c2:23:8a:7a:2c:38:be:db:96:f9:27:11:e5:40:
8e:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:76:7B:26:B6:82:C8:4D:C1:09:E7:D0:6D:F2:66:09:38:B4:D8:F2
X509v3 Authority Key Identifier:
keyid:B4:81:84:54:9E:12:E9:93:4B:FF:B7:61:5B:CA:3D:0C:25:68:13:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f67177-78d5-4388-a21a-28263656c6de/1/tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f67177-78d5-4388-a21a-28263656c6de/1/tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:3f:35:0a:ae:fb:2c:4e:1d:5b:54:a6:91:f1:2d:05:a6:bb:
7e:51:e2:ba:26:b5:da:b6:f9:30:54:03:d9:ce:92:46:bb:cd:
77:c0:12:d2:38:b6:df:f8:84:0e:e0:cd:f9:4e:ac:90:95:f3:
fd:6c:27:e6:a8:68:c7:13:e7:0c:3a:13:81:7e:d5:b9:52:38:
ec:bd:90:7e:23:2a:fc:c5:d7:33:ad:04:77:5e:eb:8f:8d:fb:
bf:32:cd:80:b2:be:cd:d9:56:6e:b7:50:cb:d4:2e:61:a8:75:
ae:96:ee:45:60:5f:02:c4:ca:ae:06:1e:c7:24:f8:d9:fe:0d:
df:b2:bc:e5:38:05:2f:02:15:72:ee:ea:bb:5a:98:8a:b1:5c:
3b:ee:8b:01:2e:ed:7b:57:4c:56:96:95:6e:a3:4b:c8:8e:86:
7d:ac:1f:e2:c0:b2:09:5a:85:2a:3e:6d:85:5f:11:5f:2f:05:
db:68:14:e1:da:15:6d:3e:83:44:75:a8:69:2b:45:6c:37:02:
05:a6:29:16:35:4d:fe:d9:34:6a:12:c0:b9:7b:ee:40:ef:32:
e6:25:a8:80:a6:38:6d:e3:7d:6a:4a:1d:d9:5d:07:dd:37:50:
72:3b:c3:62:59:a2:b0:71:e1:79:a3:bf:f8:4d:34:c0:76:df:
4a:19:6a:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 00:50:29 2025 by rpki-client