Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/fe6363-6ed5-467d-b96e-8e0bdff237f8/1/TWJ4HKFDbZbWd1uiDFzyx139E-k.mft
File: TWJ4HKFDbZbWd1uiDFzyx139E-k.mft (raw, json)
Hash identifier: rZM/ULUvYfEOEudJ+B0nLj+EH4KHlKHUmeW7W/3d5MU=
Subject key identifier: 5C:82:C3:0E:23:46:64:74:B5:00:28:BD:18:CA:80:9E:16:19:DA:AD
Authority key identifier: 4D:62:78:1C:A1:43:6D:96:D6:77:5B:A2:0C:5C:F2:C7:5D:FD:13:E9
Certificate issuer: /CN=4d62781ca1436d96d6775ba20c5cf2c75dfd13e9
Certificate serial: 019777F7DF4FFF69747E4852A1FE9754395D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TWJ4HKFDbZbWd1uiDFzyx139E-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/fe6363-6ed5-467d-b96e-8e0bdff237f8/1/TWJ4HKFDbZbWd1uiDFzyx139E-k.mft
Manifest number: 14ED
Signing time: Mon 16 Jun 2025 09:00:22 +0000
Manifest this update: Mon 16 Jun 2025 09:00:22 +0000
Manifest next update: Tue 17 Jun 2025 09:00:22 +0000
Files and hashes: 1: TWJ4HKFDbZbWd1uiDFzyx139E-k.crl (hash: CcvSZb2+Kl6lsg6Wtaz0xMMbWcpiv1VZl+4W9ON6jsI=)
2: aMDb2aqsB1gnaYoCsXASMw4mf7g.roa (hash: nKgevpuMWVmNTWjVHVyGbe988HLYNNZK38XCR2Z6V2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/fe6363-6ed5-467d-b96e-8e0bdff237f8/1/TWJ4HKFDbZbWd1uiDFzyx139E-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/fe6363-6ed5-467d-b96e-8e0bdff237f8/1/TWJ4HKFDbZbWd1uiDFzyx139E-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/TWJ4HKFDbZbWd1uiDFzyx139E-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:77:f7:df:4f:ff:69:74:7e:48:52:a1:fe:97:54:39:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d62781ca1436d96d6775ba20c5cf2c75dfd13e9
Validity
Not Before: Jun 16 09:00:22 2025 GMT
Not After : Jun 17 09:00:22 2025 GMT
Subject: CN=5c82c30e23466474b50028bd18ca809e1619daad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:1e:fc:3f:9d:b4:cd:be:65:e7:64:40:1b:2d:
cf:28:c2:48:73:03:b4:a1:18:27:a2:8d:c5:05:ef:
5d:f5:46:79:1d:cb:b7:3c:b0:83:74:18:cc:48:12:
dd:c3:65:3b:5d:41:ae:b4:34:a9:e6:61:86:dd:7d:
a9:c0:5d:4f:d4:ff:e3:6b:b9:82:46:d1:65:03:98:
94:17:59:47:e4:ca:05:11:16:48:c9:cc:ef:e4:3d:
28:3d:c5:aa:2b:b4:4b:9b:08:ca:b3:e6:6e:cc:34:
b8:b2:66:81:52:bc:7e:6a:f5:4e:f7:26:27:26:ee:
97:0e:45:79:31:fa:6a:39:0c:03:26:76:3d:19:c4:
fa:b2:da:54:37:49:12:c9:77:3f:3a:e8:d7:2a:72:
89:3c:4e:97:aa:f6:1c:60:70:c3:40:af:53:bc:e1:
8e:90:38:c3:8c:55:9e:18:30:3a:5f:ab:fc:86:35:
e3:7d:31:da:66:0a:d4:36:50:ed:34:58:ee:dd:82:
7d:49:70:31:48:ea:d4:f6:d4:70:0d:e9:6b:89:75:
20:c3:2b:27:4f:f1:f0:02:35:25:50:cc:da:40:dc:
0b:70:38:21:e5:f0:81:fb:84:98:04:ee:3f:30:bd:
fb:c1:56:c2:1e:a0:6f:46:64:be:64:d3:aa:e1:a5:
92:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:82:C3:0E:23:46:64:74:B5:00:28:BD:18:CA:80:9E:16:19:DA:AD
X509v3 Authority Key Identifier:
keyid:4D:62:78:1C:A1:43:6D:96:D6:77:5B:A2:0C:5C:F2:C7:5D:FD:13:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TWJ4HKFDbZbWd1uiDFzyx139E-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/fe6363-6ed5-467d-b96e-8e0bdff237f8/1/TWJ4HKFDbZbWd1uiDFzyx139E-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/fe6363-6ed5-467d-b96e-8e0bdff237f8/1/TWJ4HKFDbZbWd1uiDFzyx139E-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
f7:16:69:06:79:79:c8:14:91:f1:45:7b:28:a1:97:d9:c1:b8:
cc:c3:23:72:33:a2:5a:82:8e:ef:f7:04:37:a1:17:12:19:66:
77:61:2f:3f:9e:73:ad:53:12:02:a3:79:58:0e:0e:a6:08:16:
3e:ed:e1:89:4b:f3:e7:eb:f0:41:85:75:17:f5:20:ea:31:2d:
09:33:11:ac:af:95:50:0f:89:94:ad:97:0c:de:f0:68:a2:1f:
8d:99:74:17:82:1a:0d:a6:ed:0b:62:66:cd:f8:52:97:bc:01:
1b:32:44:82:e9:24:23:2e:2a:5c:cc:56:5b:4c:3c:ce:9f:21:
7c:45:3f:2c:e9:b7:3e:c5:b8:49:0e:7e:d6:81:80:82:f1:a2:
c8:e5:42:58:b6:23:e7:8f:f4:e8:95:66:c6:16:5d:71:b3:bd:
82:cd:f5:e5:98:6d:11:73:41:23:b8:2d:e1:5b:6c:10:ea:f6:
78:b7:98:58:d9:9f:7e:ab:13:2c:06:b9:af:8d:5f:a7:2e:4e:
2b:52:27:cf:69:e0:a9:9a:ff:3c:ee:7d:0e:9a:44:74:d7:cc:
75:85:7a:9e:6b:ed:b5:11:5d:cb:e4:b0:49:68:fc:ea:35:e9:
35:42:e6:e1:c3:1b:9c:c0:74:58:82:3f:d3:b6:ad:c5:e4:53:
f3:03:00:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:13:04 2025 by rpki-client