Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/270b89-7c47-4263-86a0-0073c2b7a7ee/1/Tk9mXUbWoqvwUh5csffEUcozeoc.mft
File: Tk9mXUbWoqvwUh5csffEUcozeoc.mft (raw, json)
Hash identifier: LZGhbLWLCYiaGzE/csyPutfFUNfY52F5T2osUbcdRzE=
Subject key identifier: CB:AB:7A:77:A7:7F:FF:C9:07:F9:1E:E7:E4:07:76:32:8B:77:48:07
Authority key identifier: 4E:4F:66:5D:46:D6:A2:AB:F0:52:1E:5C:B1:F7:C4:51:CA:33:7A:87
Certificate issuer: /CN=4e4f665d46d6a2abf0521e5cb1f7c451ca337a87
Certificate serial: 0197B7B36C6729298DACC779983273E79EEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tk9mXUbWoqvwUh5csffEUcozeoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/270b89-7c47-4263-86a0-0073c2b7a7ee/1/Tk9mXUbWoqvwUh5csffEUcozeoc.mft
Manifest number: 0197
Signing time: Sat 28 Jun 2025 18:01:18 +0000
Manifest this update: Sat 28 Jun 2025 18:01:18 +0000
Manifest next update: Sun 29 Jun 2025 18:01:18 +0000
Files and hashes: 1: 1KxZYvxri1sxva3r2G7KLnG5z_Y.roa (hash: 9JXmyyV6BbeWSwFTBJAUkp5UHelZgOhj8wsWM2RqVyk=)
2: HrSejbS-39NivWEqBB6_ezmUBgQ.roa (hash: 8T3MTXu6asTJ46RNeuQMt6iMOXHZ2zW1uZEJeSesDDw=)
3: Tk9mXUbWoqvwUh5csffEUcozeoc.crl (hash: AkBUn0P3bJTCXy/dlxrtvEyfF/6HxEktS/+gOdLRF0w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/270b89-7c47-4263-86a0-0073c2b7a7ee/1/Tk9mXUbWoqvwUh5csffEUcozeoc.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/270b89-7c47-4263-86a0-0073c2b7a7ee/1/Tk9mXUbWoqvwUh5csffEUcozeoc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tk9mXUbWoqvwUh5csffEUcozeoc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:6c:67:29:29:8d:ac:c7:79:98:32:73:e7:9e:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e4f665d46d6a2abf0521e5cb1f7c451ca337a87
Validity
Not Before: Jun 28 18:01:18 2025 GMT
Not After : Jun 29 18:01:18 2025 GMT
Subject: CN=cbab7a77a77fffc907f91ee7e40776328b774807
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:46:b5:a6:30:fc:52:79:8e:98:ef:76:74:85:
91:a6:ae:4e:43:79:72:db:97:4d:43:f3:54:4c:a6:
d4:27:de:e8:ff:5e:6c:a1:33:d2:8f:e0:3d:a1:ff:
7c:3a:65:71:01:ed:49:ec:f4:77:8b:e8:56:99:2a:
4c:59:9e:43:46:2d:af:37:66:22:b5:fc:99:1a:71:
d9:8c:95:80:d4:52:d4:47:15:93:02:49:60:43:1e:
49:57:60:6d:f5:f6:99:6a:ca:0a:0a:ca:c0:28:11:
03:f8:fc:62:f0:c8:0a:15:40:1c:40:7d:9d:d6:2f:
83:c0:0d:04:e2:a1:20:fb:a5:92:73:83:e3:dd:c3:
55:b5:c5:31:05:7c:24:21:be:ad:2b:2a:94:3f:ec:
01:2b:aa:e1:d7:d7:de:ec:42:ca:61:dd:75:23:9e:
f3:3b:c0:f8:32:e4:ac:ad:04:74:40:e1:1e:8e:f8:
b3:93:e9:8f:79:66:4e:79:30:bc:b3:be:41:28:3e:
56:bf:ab:da:68:4f:25:b6:17:32:87:3a:37:8c:21:
5f:f4:67:69:93:06:34:2d:da:b2:db:7d:0a:9a:d3:
d8:7b:cf:c0:52:cb:ba:1a:6d:b0:7b:14:e3:e2:22:
5d:a7:8c:0d:8f:e9:fb:e0:68:c1:b8:0c:47:70:70:
f2:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:AB:7A:77:A7:7F:FF:C9:07:F9:1E:E7:E4:07:76:32:8B:77:48:07
X509v3 Authority Key Identifier:
keyid:4E:4F:66:5D:46:D6:A2:AB:F0:52:1E:5C:B1:F7:C4:51:CA:33:7A:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tk9mXUbWoqvwUh5csffEUcozeoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/270b89-7c47-4263-86a0-0073c2b7a7ee/1/Tk9mXUbWoqvwUh5csffEUcozeoc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/270b89-7c47-4263-86a0-0073c2b7a7ee/1/Tk9mXUbWoqvwUh5csffEUcozeoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:ff:25:d5:29:79:ba:4a:32:ee:66:c6:c8:3f:0f:ac:f3:c6:
d5:9f:97:5d:de:06:59:1c:07:08:1d:c5:92:05:e9:13:d1:02:
c2:d8:fa:84:43:4b:bc:ac:91:a2:93:08:88:53:58:84:86:57:
f8:ed:bd:fb:0a:ef:4a:8d:87:fc:6d:12:52:c0:c5:26:9e:aa:
32:da:0c:b7:f5:bd:89:2e:9c:72:25:b1:6e:a5:7c:c2:1d:9b:
50:0e:e0:e5:e2:0f:24:b0:19:0e:b8:89:9c:31:fb:41:e7:cd:
b6:bf:4f:e9:b0:1c:fa:10:17:a7:07:f4:f3:5b:c6:ad:3c:bf:
7b:24:47:d5:06:65:11:9d:c4:d1:d9:1f:e6:00:6a:cb:74:7d:
0a:3e:3b:28:f7:92:56:6e:ec:f4:85:cf:fa:58:59:b7:c7:a4:
3c:80:b6:6a:bf:ef:88:43:a8:ed:ea:10:38:97:9d:f9:91:3d:
82:2d:6b:2e:73:ed:3d:3c:62:d4:e4:4a:2d:47:8d:12:59:df:
d3:a8:e0:40:4a:a8:88:ea:9e:b3:77:73:95:f6:f6:c1:ca:d2:
fb:2f:a8:e9:41:51:95:2a:25:15:bb:34:af:70:19:8e:57:54:
1e:2d:c3:0c:91:6c:d1:05:46:fc:b1:f1:a3:40:fb:e0:6b:42:
65:a7:b0:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:35:57 2025 by rpki-client