Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/262f40-48c7-43c6-9d83-1548ac1356be/1/tDqirb6dQEE3M58g_VhiPIo58TA.mft
File: tDqirb6dQEE3M58g_VhiPIo58TA.mft (raw, json)
Hash identifier: ktWhtm1xdNsEuz88AOzlSo7O/n+jmvfoHxmSaJojqVU=
Subject key identifier: 80:3C:8E:C4:86:31:4B:9F:E1:2A:FB:18:02:58:FB:E7:92:D6:D3:51
Authority key identifier: B4:3A:A2:AD:BE:9D:40:41:37:33:9F:20:FD:58:62:3C:8A:39:F1:30
Certificate issuer: /CN=b43aa2adbe9d404137339f20fd58623c8a39f130
Certificate serial: 0197786605518F6D718F5D9A08ECB428CC00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDqirb6dQEE3M58g_VhiPIo58TA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/262f40-48c7-43c6-9d83-1548ac1356be/1/tDqirb6dQEE3M58g_VhiPIo58TA.mft
Manifest number: 0541
Signing time: Mon 16 Jun 2025 11:00:41 +0000
Manifest this update: Mon 16 Jun 2025 11:00:41 +0000
Manifest next update: Tue 17 Jun 2025 11:00:41 +0000
Files and hashes: 1: DR42yKGsjL2cx3Lp0nYZ2-J6QjI.roa (hash: SNpq+XJB/gPAUUzDmYBdIDihlauDEu/Coqako/V/GUw=)
2: tDqirb6dQEE3M58g_VhiPIo58TA.crl (hash: g7/Ah9ca1jTL1bSVwWGB07HqnYOY+8MoHyAQnFdUwYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/262f40-48c7-43c6-9d83-1548ac1356be/1/tDqirb6dQEE3M58g_VhiPIo58TA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/262f40-48c7-43c6-9d83-1548ac1356be/1/tDqirb6dQEE3M58g_VhiPIo58TA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDqirb6dQEE3M58g_VhiPIo58TA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:78:66:05:51:8f:6d:71:8f:5d:9a:08:ec:b4:28:cc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b43aa2adbe9d404137339f20fd58623c8a39f130
Validity
Not Before: Jun 16 11:00:41 2025 GMT
Not After : Jun 17 11:00:41 2025 GMT
Subject: CN=803c8ec486314b9fe12afb180258fbe792d6d351
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:9a:fe:a5:4b:9f:81:d0:66:88:59:8d:0c:01:
55:c8:37:5b:d5:9d:3c:4f:35:01:c3:10:63:45:b9:
03:46:cb:c9:92:9f:3a:1a:a7:a5:9b:49:24:f2:1b:
dc:1b:32:53:bb:80:50:45:33:68:b6:ba:e8:74:d1:
a2:9b:d3:86:d0:52:e6:5c:44:36:e8:e7:f0:f4:18:
24:ee:59:83:bf:55:37:06:43:d6:b9:ca:53:70:15:
59:2f:60:34:81:73:22:0d:c9:23:6a:2c:be:31:4c:
45:26:0b:4c:2a:9f:00:a7:3a:29:f0:79:4e:f9:9c:
0f:9f:e6:8a:17:ce:5f:85:0c:e9:89:ab:97:97:8a:
a9:ed:ec:eb:94:31:16:1b:9d:ef:8f:31:5e:3b:23:
6f:96:d8:60:57:0a:cb:b1:0b:be:ed:4b:70:78:41:
86:66:b7:62:cd:f9:74:1b:79:88:60:bd:a0:9d:c2:
e0:41:2f:a8:b9:f2:a5:47:f0:6c:c2:8d:4e:9a:9f:
e1:15:ff:0d:2e:20:15:e2:2d:86:96:b4:3a:f2:c6:
6a:02:ba:ae:6a:ee:0b:a7:35:b2:00:a0:f1:72:e0:
0d:ff:12:3b:ca:1e:4b:f3:8a:0e:69:3f:c8:c5:76:
40:25:6c:fd:14:36:31:11:06:6d:ca:9a:16:26:9b:
31:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:3C:8E:C4:86:31:4B:9F:E1:2A:FB:18:02:58:FB:E7:92:D6:D3:51
X509v3 Authority Key Identifier:
keyid:B4:3A:A2:AD:BE:9D:40:41:37:33:9F:20:FD:58:62:3C:8A:39:F1:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDqirb6dQEE3M58g_VhiPIo58TA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/262f40-48c7-43c6-9d83-1548ac1356be/1/tDqirb6dQEE3M58g_VhiPIo58TA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/262f40-48c7-43c6-9d83-1548ac1356be/1/tDqirb6dQEE3M58g_VhiPIo58TA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:1e:7e:50:15:cc:46:6b:9b:c6:68:80:2d:e7:08:77:d6:e9:
d5:76:67:bd:04:c2:9e:4d:b8:46:8e:5b:6c:31:93:df:83:3f:
50:01:12:6e:73:9b:8e:1a:4f:88:dc:5a:3c:72:e4:82:91:2d:
5c:e2:91:ce:ea:ac:87:ce:e7:fe:5f:09:69:f4:e5:f0:80:12:
2e:a8:af:42:09:a8:44:1b:4d:7d:42:12:87:73:2d:2f:2d:39:
05:b8:9d:c8:ad:98:a1:c6:e0:10:0b:ab:59:1c:94:0a:3f:35:
a2:5c:f5:37:74:1a:32:f2:25:42:36:23:b9:38:cb:2f:2d:27:
2e:0a:d2:08:b4:c2:32:2d:d1:6a:35:f3:85:e2:47:6d:44:86:
02:e9:e5:a2:f6:fd:a0:09:81:46:db:94:7a:06:bf:34:55:81:
80:02:46:d4:01:7c:3a:6a:69:e6:87:55:ae:3f:f5:a3:91:9a:
74:86:07:77:da:56:95:61:c5:d0:b8:fc:89:1b:83:3c:01:da:
01:99:69:70:ba:b9:4b:54:19:fc:5f:b1:b1:27:13:b5:08:10:
23:b0:17:4f:6c:ff:9d:9d:b3:92:fe:1e:2c:34:82:99:ad:9c:
60:9c:af:83:f5:c9:e9:16:cb:99:4c:dc:d5:c4:56:ac:b7:a4:
df:3a:6f:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 13:30:50 2025 by rpki-client