Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/1a15fa-ace6-464d-8969-e4928180033c/1/TBdAzvl0ncKw9fiM3xA02oHWBtw.mft
File: TBdAzvl0ncKw9fiM3xA02oHWBtw.mft (raw, json)
Hash identifier: Yzfent0Uq86Cb6jW85mnWIaT8gXcX+KUwlGdaObnSFo=
Subject key identifier: 74:C5:DF:3D:CC:DF:22:C0:22:36:81:10:49:99:2B:94:C9:2B:EC:3F
Authority key identifier: 4C:17:40:CE:F9:74:9D:C2:B0:F5:F8:8C:DF:10:34:DA:81:D6:06:DC
Certificate issuer: /CN=4c1740cef9749dc2b0f5f88cdf1034da81d606dc
Certificate serial: 0197B7B321D9777AE2AD554002BBB598AEBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TBdAzvl0ncKw9fiM3xA02oHWBtw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/1a15fa-ace6-464d-8969-e4928180033c/1/TBdAzvl0ncKw9fiM3xA02oHWBtw.mft
Manifest number: 0F34
Signing time: Sat 28 Jun 2025 18:00:59 +0000
Manifest this update: Sat 28 Jun 2025 18:00:59 +0000
Manifest next update: Sun 29 Jun 2025 18:00:59 +0000
Files and hashes: 1: 9UfG7ZfqsnxXdNjOVBB4EufGuiU.roa (hash: nBGGqWZhxqHLJh+Oq/1SCIlZ0ENh9e+rLU6y/LQvQNA=)
2: TBdAzvl0ncKw9fiM3xA02oHWBtw.crl (hash: PNVc8Dg4MbuyG28hktUDOGaZAHBmiO1dtM/E6tXzCeA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/1a15fa-ace6-464d-8969-e4928180033c/1/TBdAzvl0ncKw9fiM3xA02oHWBtw.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/1a15fa-ace6-464d-8969-e4928180033c/1/TBdAzvl0ncKw9fiM3xA02oHWBtw.mft
rsync://rpki.ripe.net/repository/DEFAULT/TBdAzvl0ncKw9fiM3xA02oHWBtw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:21:d9:77:7a:e2:ad:55:40:02:bb:b5:98:ae:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c1740cef9749dc2b0f5f88cdf1034da81d606dc
Validity
Not Before: Jun 28 18:00:59 2025 GMT
Not After : Jun 29 18:00:59 2025 GMT
Subject: CN=74c5df3dccdf22c02236811049992b94c92bec3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c4:42:c0:75:d7:44:aa:f0:be:de:29:d0:2e:
bb:ab:b9:b9:d7:8e:78:26:b2:89:43:f7:14:50:da:
ce:86:1b:3f:96:3e:28:9c:26:be:4c:94:63:60:55:
e2:7d:7c:12:72:46:58:4a:63:a8:e8:04:33:a1:74:
f0:e2:21:3a:7d:9a:e4:11:14:8c:31:28:5e:d7:5c:
f0:ef:fb:43:18:8d:ee:23:aa:f0:47:b2:77:f8:44:
16:cc:a3:0c:dd:57:f7:d8:ba:d0:1b:f3:2d:f6:ce:
1e:55:44:f2:42:87:31:fe:46:55:2c:e8:f3:09:ca:
9a:95:93:49:3d:b2:42:6b:df:45:f5:c6:b8:57:1b:
0b:45:83:88:fd:ff:50:94:c0:67:9c:04:7c:f8:93:
9a:e9:e3:8d:0b:f5:f8:e1:d0:10:1a:17:6e:75:75:
d8:8e:ab:d2:00:f6:88:91:59:46:d0:54:ac:bc:34:
a7:35:f2:a8:3d:7e:6c:32:48:fc:3a:fd:3f:f7:ef:
b5:8a:05:8f:78:4f:83:f8:4c:d1:74:d7:1d:16:3e:
e6:2b:15:b0:69:12:c1:b7:0f:c4:20:eb:d4:39:8c:
a7:88:12:dc:69:18:a5:19:c1:a2:58:be:07:75:9e:
b8:5a:ef:10:0f:7b:94:c7:f7:ae:ba:47:d2:f3:33:
5a:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:C5:DF:3D:CC:DF:22:C0:22:36:81:10:49:99:2B:94:C9:2B:EC:3F
X509v3 Authority Key Identifier:
keyid:4C:17:40:CE:F9:74:9D:C2:B0:F5:F8:8C:DF:10:34:DA:81:D6:06:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TBdAzvl0ncKw9fiM3xA02oHWBtw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/1a15fa-ace6-464d-8969-e4928180033c/1/TBdAzvl0ncKw9fiM3xA02oHWBtw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/1a15fa-ace6-464d-8969-e4928180033c/1/TBdAzvl0ncKw9fiM3xA02oHWBtw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:56:70:38:01:84:4d:2e:1b:8f:90:96:f1:15:3e:38:92:ae:
55:9c:df:86:9a:8d:61:49:fb:7c:cd:98:6d:f9:59:88:52:70:
4d:dd:96:72:a7:b1:d1:34:f7:86:62:ae:8f:8e:bf:de:b4:6c:
09:c3:f3:58:be:7d:a9:ee:46:ad:c5:82:50:8a:d2:04:6f:de:
51:6f:9e:07:45:97:26:c0:b2:4d:22:fe:d7:44:9f:58:7e:1e:
58:31:ff:71:c6:73:c9:8b:91:c4:51:f9:c9:e1:8c:b6:e3:7f:
b1:5a:45:5a:c3:ae:71:77:66:68:71:be:a7:a3:e2:49:2f:c9:
bb:a1:94:53:8e:ed:ea:1f:8e:81:ff:5b:45:71:fb:46:de:aa:
21:2b:c9:aa:f1:07:a8:ae:2d:2b:91:5b:d5:b0:68:72:ab:d1:
3f:79:7f:9a:06:b9:ec:fa:64:ac:10:a3:43:55:aa:f2:e6:36:
45:cf:07:c6:a9:3d:b4:3b:1a:4a:38:36:5c:e2:26:ef:55:4c:
3b:67:ae:14:8e:84:f1:2f:6a:bf:e3:c2:7e:3d:92:7b:27:ff:
72:41:73:59:b8:bd:e9:21:45:78:b7:8e:b3:31:2f:f4:6b:a1:
cc:64:64:3e:c2:f3:5e:85:ed:88:98:e1:88:af:5d:95:59:0a:
e8:47:d6:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:52:34 2025 by rpki-client