Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/tqFlTa6WxTJXjOHfHruCIdu2gUU.mft
File: tqFlTa6WxTJXjOHfHruCIdu2gUU.mft (raw, json)
Hash identifier: KY1Z2P/7viQGIIkoCFkF1vSzM9smgGLUt0zCnXXBRRA=
Subject key identifier: 85:87:9C:FE:AC:1A:67:2D:EF:28:2F:C5:A7:85:28:D2:0C:D6:B2:40
Authority key identifier: B6:A1:65:4D:AE:96:C5:32:57:8C:E1:DF:1E:BB:82:21:DB:B6:81:45
Certificate issuer: /CN=b6a1654dae96c532578ce1df1ebb8221dbb68145
Certificate serial: 019770E31C67756E3DC0473493EC66D5738D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tqFlTa6WxTJXjOHfHruCIdu2gUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/tqFlTa6WxTJXjOHfHruCIdu2gUU.mft
Manifest number: 1591
Signing time: Sun 15 Jun 2025 00:00:21 +0000
Manifest this update: Sun 15 Jun 2025 00:00:21 +0000
Manifest next update: Mon 16 Jun 2025 00:00:21 +0000
Files and hashes: 1: n9wbgcYA2gFozQl-awLgvubO0Jw.roa (hash: I7/eXt/2fdY6ma/4TQO3Dibom5bD15oMz/+pqihDXpI=)
2: p6rvh-AV0bmaoiN047zHywpJoqY.roa (hash: tR6pKJ08cGe9+fwUehgymwBvOx1rePcqoTH0w7NDkm8=)
3: tqFlTa6WxTJXjOHfHruCIdu2gUU.crl (hash: oGWG0qI/Kwzp0SBagriG6oOZcNbMBjuzre4wITE4JpU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/tqFlTa6WxTJXjOHfHruCIdu2gUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/tqFlTa6WxTJXjOHfHruCIdu2gUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tqFlTa6WxTJXjOHfHruCIdu2gUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:e3:1c:67:75:6e:3d:c0:47:34:93:ec:66:d5:73:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6a1654dae96c532578ce1df1ebb8221dbb68145
Validity
Not Before: Jun 15 00:00:21 2025 GMT
Not After : Jun 16 00:00:21 2025 GMT
Subject: CN=85879cfeac1a672def282fc5a78528d20cd6b240
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:6c:b2:e0:13:6d:c1:75:46:68:89:30:db:0e:
0a:b9:27:8e:93:91:88:c2:e7:cc:eb:a9:03:32:8b:
35:b8:a1:e3:65:ed:e9:1b:30:1a:0d:c1:cc:86:6c:
66:18:84:75:eb:2b:85:12:a5:b5:77:bc:fd:c7:3b:
6e:38:08:a9:6f:77:93:bf:92:bc:95:b8:7d:1d:38:
ba:f3:d6:a4:8f:03:91:54:e4:5b:2b:4f:a8:a8:60:
c5:fc:de:c2:8d:66:99:84:17:de:1b:99:88:ed:f9:
35:29:53:0e:30:d9:e2:e9:9b:1b:1d:5c:04:80:0e:
b9:81:a0:c0:fb:ee:c1:f9:91:61:79:d5:c7:4c:2e:
3f:44:a3:ee:6e:f7:67:71:da:7b:af:00:5c:14:3e:
1e:71:3b:98:ce:74:2b:d5:ac:9b:30:37:aa:43:ec:
41:da:67:91:ce:a0:93:83:2c:54:fd:4c:31:3d:f4:
93:0d:8f:e9:33:93:1a:57:af:da:6a:a1:9b:0e:d4:
22:17:76:90:e6:a3:ed:02:47:68:cd:66:94:30:03:
68:1c:7c:80:59:ba:d2:17:32:f4:78:da:d9:45:f6:
7f:2b:0b:ae:d6:5e:c7:8f:fb:d6:93:5d:65:9f:87:
2c:54:27:9e:ba:91:11:e1:2f:79:3f:87:8c:4f:ed:
62:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:87:9C:FE:AC:1A:67:2D:EF:28:2F:C5:A7:85:28:D2:0C:D6:B2:40
X509v3 Authority Key Identifier:
keyid:B6:A1:65:4D:AE:96:C5:32:57:8C:E1:DF:1E:BB:82:21:DB:B6:81:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tqFlTa6WxTJXjOHfHruCIdu2gUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/tqFlTa6WxTJXjOHfHruCIdu2gUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/tqFlTa6WxTJXjOHfHruCIdu2gUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:fe:03:2e:ad:45:4f:86:87:74:c1:24:d3:2e:b9:f8:0e:fb:
6b:fc:53:c2:20:40:82:8f:4e:86:a1:d0:09:e2:11:4a:c0:1f:
7f:cc:a2:85:b0:ab:5a:46:db:f5:9b:55:e8:06:c1:59:1f:ba:
f8:15:2a:3d:21:11:a5:f0:b0:9a:5e:e9:3c:b3:fa:bd:0d:60:
59:e5:3e:af:df:1f:b9:95:c9:1a:66:54:b0:1c:d8:d2:39:83:
af:08:0f:7d:15:1c:5f:35:7f:6f:43:c2:83:96:35:d4:79:71:
a9:58:f2:40:15:dc:44:9b:50:ae:7f:32:ea:b0:49:6a:b2:58:
ab:5a:17:2f:ab:9f:21:63:88:d9:9d:3e:ed:81:90:ad:da:ed:
ef:9a:15:d9:c3:65:67:a6:d6:91:81:5c:9b:02:dd:9e:9b:59:
88:09:88:37:37:eb:d6:37:77:2d:ad:27:60:f5:e0:8f:9d:64:
13:69:4a:2c:7d:a3:06:35:a3:6f:31:fc:41:6e:62:de:82:c6:
fe:05:f6:bc:4a:fd:34:20:11:6b:d1:9e:99:9e:bf:c4:e9:be:
b9:69:55:7b:ce:16:ce:d0:b6:d7:1d:46:8c:ee:c3:9b:05:8c:
6e:9b:1f:ab:70:37:54:76:26:c8:9d:17:4b:1d:70:3d:59:b6:
73:71:32:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:00:24 2025 by rpki-client