Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/26b619-55cf-4489-a9b3-58a20f34f2ec/1/TkJGYHD_jDzJZ9pI4U2hLfcbJnE.mft
File: TkJGYHD_jDzJZ9pI4U2hLfcbJnE.mft (raw, json)
Hash identifier: wVdsA8I4S4bdUfqgtBSpXc+jcswNRssbHVc5Nky4CfI=
Subject key identifier: 00:AA:50:23:EB:FA:CE:30:9C:00:AC:45:AC:F1:18:63:83:A3:BB:B9
Authority key identifier: 4E:42:46:60:70:FF:8C:3C:C9:67:DA:48:E1:4D:A1:2D:F7:1B:26:71
Certificate issuer: /CN=4e42466070ff8c3cc967da48e14da12df71b2671
Certificate serial: 0197B6A0AA649FDE4B8D2EEAAF35BA041CCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TkJGYHD_jDzJZ9pI4U2hLfcbJnE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/26b619-55cf-4489-a9b3-58a20f34f2ec/1/TkJGYHD_jDzJZ9pI4U2hLfcbJnE.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 13:01:12 +0000
Manifest this update: Sat 28 Jun 2025 13:01:12 +0000
Manifest next update: Sun 29 Jun 2025 13:01:12 +0000
Files and hashes: 1: TkJGYHD_jDzJZ9pI4U2hLfcbJnE.crl (hash: xyDvNcXNvVfvlCE0rb+2LgaqdkNThTrq626WlYUXdyg=)
2: Vn0PoWq91day6d--kuy39s7CP5U.roa (hash: daOIdL4b5N4GukWwie8JBBD3OBe/sdcGSiKd1pWKhtI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/26b619-55cf-4489-a9b3-58a20f34f2ec/1/TkJGYHD_jDzJZ9pI4U2hLfcbJnE.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/26b619-55cf-4489-a9b3-58a20f34f2ec/1/TkJGYHD_jDzJZ9pI4U2hLfcbJnE.mft
rsync://rpki.ripe.net/repository/DEFAULT/TkJGYHD_jDzJZ9pI4U2hLfcbJnE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:aa:64:9f:de:4b:8d:2e:ea:af:35:ba:04:1c:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e42466070ff8c3cc967da48e14da12df71b2671
Validity
Not Before: Jun 28 13:01:12 2025 GMT
Not After : Jun 29 13:01:12 2025 GMT
Subject: CN=00aa5023ebface309c00ac45acf1186383a3bbb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8c:a8:4f:5e:2e:98:aa:88:71:68:48:db:2f:
ea:ff:06:b8:31:d2:de:e3:7b:e8:70:00:e7:75:dc:
0e:8c:97:92:58:d0:5d:a2:53:c1:b6:ac:e8:39:a6:
11:9d:83:3e:a0:b5:5e:39:73:f0:e9:87:b4:ab:72:
68:00:56:43:a9:dd:a6:7f:6c:64:e0:2b:2b:b5:d7:
a9:55:59:bb:1d:59:61:64:d9:ef:e1:28:8b:0e:f5:
aa:0c:9f:45:1d:97:58:02:b3:2b:3a:06:44:29:bb:
ff:62:89:b2:82:43:13:c0:05:2a:8c:c1:70:07:a5:
bd:e3:b0:96:97:49:fd:19:7f:b7:48:6d:19:46:2e:
4d:80:e6:9c:59:97:54:e1:38:bd:ce:54:79:74:e3:
09:9d:2e:4c:33:91:bf:8a:78:ba:20:61:23:5f:ea:
fe:c9:4f:32:07:8f:7b:df:7f:28:5c:e2:c2:b7:72:
ed:a5:80:1d:b7:4f:ca:df:8b:ca:39:d5:7b:ea:5e:
72:65:fa:e0:d3:fd:f8:ef:b2:1a:82:8d:79:a6:e5:
86:94:f5:30:f3:7c:ec:6a:19:b4:4c:35:97:f4:51:
49:91:bb:e8:b4:af:53:98:86:b2:f1:cd:49:2b:e3:
d8:08:c4:47:6a:8d:49:13:66:7c:6f:43:38:f3:2a:
6c:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:AA:50:23:EB:FA:CE:30:9C:00:AC:45:AC:F1:18:63:83:A3:BB:B9
X509v3 Authority Key Identifier:
keyid:4E:42:46:60:70:FF:8C:3C:C9:67:DA:48:E1:4D:A1:2D:F7:1B:26:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TkJGYHD_jDzJZ9pI4U2hLfcbJnE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/26b619-55cf-4489-a9b3-58a20f34f2ec/1/TkJGYHD_jDzJZ9pI4U2hLfcbJnE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/26b619-55cf-4489-a9b3-58a20f34f2ec/1/TkJGYHD_jDzJZ9pI4U2hLfcbJnE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:02:f9:3d:4b:bc:9a:4b:eb:8b:20:70:8e:95:9c:a9:96:4a:
a6:ce:bb:e2:19:19:f8:5c:64:9d:81:90:6f:1c:1c:02:d1:38:
96:ab:a1:0c:50:97:ed:29:27:24:2a:e6:0f:38:d7:83:70:61:
7c:a6:8e:98:55:93:fd:0a:42:a7:e3:a4:b5:3e:47:f2:8e:6b:
e4:7a:49:9f:b8:b0:76:f7:39:3f:01:ce:08:6f:9c:a2:b7:c0:
d4:57:f9:bf:8a:14:25:8b:09:d5:3d:99:f8:04:4e:32:30:b9:
5c:51:39:25:a6:29:7b:a6:db:f3:37:5d:c2:0d:09:c9:4c:9d:
fd:9c:7e:69:00:f0:ea:36:d9:c7:79:73:33:18:88:07:e3:64:
bd:af:ad:84:01:88:04:37:f7:a2:e8:7a:bb:ee:d7:19:61:27:
8d:0c:98:4f:c8:05:d6:c5:d0:e3:02:e2:97:c3:5b:16:d8:55:
ba:7a:88:e3:b5:a7:51:c1:69:78:ed:94:a6:e7:d0:98:c3:7e:
fa:77:6a:c1:e1:c0:9e:a5:02:ea:13:d3:55:01:5e:50:49:82:
7f:fa:92:e9:8d:cd:30:0a:2b:55:fc:38:7c:a1:83:c8:39:9c:
7c:bb:88:bb:f4:1f:26:ff:e2:01:8f:96:ce:9f:98:c5:bd:ca:
0e:e3:ad:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:40:43 2025 by rpki-client