Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/b3fa64-f8b1-44e8-aba6-8601663395eb/1/TPnD7Ef8zwHZMF_g19SBswaw1Iw.mft
File: TPnD7Ef8zwHZMF_g19SBswaw1Iw.mft (raw, json)
Hash identifier: 4aj2tx37no51dRAGzkrdRAZYEwnMg3ZLKKqR02EM7yE=
Subject key identifier: 53:11:1C:84:86:6B:7B:4A:2F:83:C2:C8:7C:A9:22:AB:80:B6:33:65
Authority key identifier: 4C:F9:C3:EC:47:FC:CF:01:D9:30:5F:E0:D7:D4:81:B3:06:B0:D4:8C
Certificate issuer: /CN=4cf9c3ec47fccf01d9305fe0d7d481b306b0d48c
Certificate serial: 0197BBC7583A1860DE2707E341743A404F55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TPnD7Ef8zwHZMF_g19SBswaw1Iw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/b3fa64-f8b1-44e8-aba6-8601663395eb/1/TPnD7Ef8zwHZMF_g19SBswaw1Iw.mft
Manifest number: 0678
Signing time: Sun 29 Jun 2025 13:01:33 +0000
Manifest this update: Sun 29 Jun 2025 13:01:33 +0000
Manifest next update: Mon 30 Jun 2025 13:01:33 +0000
Files and hashes: 1: TPnD7Ef8zwHZMF_g19SBswaw1Iw.crl (hash: 45TI+QJOhegpXIyilbKBkTf+CWobRcnENnhW4PbAvpU=)
2: UJ9_FeIGOOjgZRJDmb3mfb4BJZs.roa (hash: Iv5M96f/4AyXNBfTo49Zxh554cDlKiW0Et8FXEewisM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/b3fa64-f8b1-44e8-aba6-8601663395eb/1/TPnD7Ef8zwHZMF_g19SBswaw1Iw.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/b3fa64-f8b1-44e8-aba6-8601663395eb/1/TPnD7Ef8zwHZMF_g19SBswaw1Iw.mft
rsync://rpki.ripe.net/repository/DEFAULT/TPnD7Ef8zwHZMF_g19SBswaw1Iw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 07:42:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:bb:c7:58:3a:18:60:de:27:07:e3:41:74:3a:40:4f:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cf9c3ec47fccf01d9305fe0d7d481b306b0d48c
Validity
Not Before: Jun 29 13:01:33 2025 GMT
Not After : Jun 30 13:01:33 2025 GMT
Subject: CN=53111c84866b7b4a2f83c2c87ca922ab80b63365
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f0:40:15:74:39:fa:87:a0:c3:5e:e2:a4:34:
c2:f9:9f:52:80:e9:17:7b:f1:90:c9:f4:f4:d1:18:
87:f0:97:d7:cf:a0:40:41:2e:a0:81:b4:4a:a4:38:
a9:20:52:a7:58:91:cd:8a:60:7c:ac:12:be:bb:08:
69:ef:64:ca:53:92:c4:05:ee:79:ca:17:03:43:c7:
92:b3:94:5e:fd:72:86:58:2d:3d:fc:3c:91:2c:ea:
20:7d:dc:af:38:1d:7d:9c:ee:78:3a:f2:aa:67:11:
4f:24:74:3a:41:b5:15:ce:44:35:29:5d:d8:55:1e:
2f:5c:0b:28:d5:f4:55:65:50:bf:7e:d5:72:1e:ab:
94:ab:49:8a:08:d7:fc:e1:15:8d:87:d2:c9:59:b5:
d1:1d:6c:cf:b3:e7:61:3d:c2:3a:bb:7b:f0:b8:e9:
e3:0e:17:65:f4:d2:95:e3:bf:c7:55:c4:fa:91:9d:
c0:75:83:ce:c6:5f:ff:ea:d3:b7:2e:56:21:3e:35:
ec:86:18:e7:60:91:7b:6d:39:c1:1b:e3:0f:42:5f:
61:01:7c:27:95:a4:22:a6:98:66:94:8b:6a:3a:15:
fc:4b:3b:cf:3d:a8:58:56:ec:97:97:0c:fe:8b:19:
7a:b3:3d:ba:b8:33:0c:25:23:7d:0f:b3:66:ea:62:
61:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:11:1C:84:86:6B:7B:4A:2F:83:C2:C8:7C:A9:22:AB:80:B6:33:65
X509v3 Authority Key Identifier:
keyid:4C:F9:C3:EC:47:FC:CF:01:D9:30:5F:E0:D7:D4:81:B3:06:B0:D4:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TPnD7Ef8zwHZMF_g19SBswaw1Iw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b3fa64-f8b1-44e8-aba6-8601663395eb/1/TPnD7Ef8zwHZMF_g19SBswaw1Iw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b3fa64-f8b1-44e8-aba6-8601663395eb/1/TPnD7Ef8zwHZMF_g19SBswaw1Iw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:c1:16:b6:52:f9:4d:0a:e9:bf:26:16:f6:83:03:c2:de:df:
04:02:5a:a1:ab:9c:cc:08:9d:86:f3:d9:0c:fc:37:19:7e:24:
e5:a5:ae:5c:ae:7f:ce:25:48:64:70:9a:9b:46:d8:71:f6:07:
d9:bc:ee:8f:6d:bc:f6:9a:c3:b2:0b:05:3d:64:ff:7e:7d:35:
6d:65:4a:46:0a:f9:4b:fd:28:34:dd:1b:86:ef:64:bb:16:83:
94:cb:47:08:00:8e:57:ce:9c:d5:17:f0:cc:bb:9d:de:21:12:
d2:43:4a:41:d3:d9:40:af:4e:36:7f:6e:1d:b4:a4:7b:72:b8:
3f:5a:71:12:f7:7c:70:00:46:77:6d:63:e8:e3:05:ce:1c:f4:
01:28:7f:ea:02:4f:b8:36:49:a4:62:1a:02:9d:1d:48:a1:28:
15:39:cf:f1:68:3f:29:26:0b:60:13:75:27:78:2e:6a:2b:e0:
05:52:3d:0d:c6:e2:fc:60:50:51:16:2a:19:28:7f:a0:a7:d6:
4e:c8:35:fc:98:55:6f:6a:ef:a4:1d:6b:4c:8d:64:9d:c5:64:
d2:3a:9d:21:5d:5b:43:af:4a:a5:85:ab:3c:70:d5:7a:31:02:
c4:16:e5:ee:63:23:5e:92:07:e1:ec:44:c9:ae:68:00:7c:d6:
51:e4:44:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 16:48:38 2025 by rpki-client