Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/3e775d-b117-40dd-ae6a-2d502e956c04/1/TJ1sVb4b6KhK0t_Vp_-lhI9U1Ak.mft
File: TJ1sVb4b6KhK0t_Vp_-lhI9U1Ak.mft (raw, json)
Hash identifier: UtWG2MzkmVura9BnA8lsq38LbeFGeniJCcsiJJ45H7g=
Subject key identifier: 74:52:9F:2E:E9:C6:EE:C4:51:95:F5:BF:07:16:1C:87:E7:47:DD:59
Authority key identifier: 4C:9D:6C:55:BE:1B:E8:A8:4A:D2:DF:D5:A7:FF:A5:84:8F:54:D4:09
Certificate issuer: /CN=4c9d6c55be1be8a84ad2dfd5a7ffa5848f54d409
Certificate serial: 0197B6D73E4C85332BAF73CDFFFE2C82DB9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TJ1sVb4b6KhK0t_Vp_-lhI9U1Ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/3e775d-b117-40dd-ae6a-2d502e956c04/1/TJ1sVb4b6KhK0t_Vp_-lhI9U1Ak.mft
Manifest number: 1590
Signing time: Sat 28 Jun 2025 14:00:48 +0000
Manifest this update: Sat 28 Jun 2025 14:00:48 +0000
Manifest next update: Sun 29 Jun 2025 14:00:48 +0000
Files and hashes: 1: PHU8bveJ4V86SqIQTMnWW43DqBE.roa (hash: 3OhBnf8f8HGM5ArwPPNt9UU72cQZdAdKTbSA4Z11k2Y=)
2: TJ1sVb4b6KhK0t_Vp_-lhI9U1Ak.crl (hash: m4AbF9XIewCPex3tQOGkk4l8b5fcG/BjtvERhBi5O+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/3e775d-b117-40dd-ae6a-2d502e956c04/1/TJ1sVb4b6KhK0t_Vp_-lhI9U1Ak.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/3e775d-b117-40dd-ae6a-2d502e956c04/1/TJ1sVb4b6KhK0t_Vp_-lhI9U1Ak.mft
rsync://rpki.ripe.net/repository/DEFAULT/TJ1sVb4b6KhK0t_Vp_-lhI9U1Ak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:3e:4c:85:33:2b:af:73:cd:ff:fe:2c:82:db:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c9d6c55be1be8a84ad2dfd5a7ffa5848f54d409
Validity
Not Before: Jun 28 14:00:48 2025 GMT
Not After : Jun 29 14:00:48 2025 GMT
Subject: CN=74529f2ee9c6eec45195f5bf07161c87e747dd59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c8:b6:2c:18:6b:13:51:4e:0a:90:32:42:c3:
62:7f:c8:6b:78:e9:8f:5f:ab:74:01:dc:ea:f2:5c:
8a:d9:9e:a9:78:59:b7:e0:73:6d:ef:ba:0d:9a:e0:
0f:38:a5:15:d9:a0:66:1d:f3:de:65:34:94:23:c7:
15:b5:7b:4b:c8:b5:21:d2:7a:91:d6:71:65:4f:ae:
26:5c:28:bd:57:a9:bf:0e:60:c8:41:a5:7f:95:55:
11:57:7b:1b:9c:3e:ac:b2:ff:24:53:59:59:5a:df:
a8:0e:44:b9:dc:71:8c:cd:38:4c:1c:d5:c6:a4:5a:
e9:83:46:b6:42:b8:89:90:9e:d1:7b:1d:df:0e:2c:
86:ea:9e:a2:73:df:b0:fd:88:72:f7:7e:52:fb:72:
c0:f3:ad:5e:7d:aa:bb:37:65:7e:7c:e5:c4:bb:96:
c8:ae:f9:29:d6:8d:79:d6:1d:1c:0f:8e:ed:6d:d4:
c8:26:13:03:88:4b:6d:e0:d6:ef:72:9b:6c:12:dd:
85:a8:8f:4f:7f:08:1d:62:74:1d:09:cc:14:dd:0d:
3d:17:b0:c4:51:42:77:47:38:ae:91:c6:c9:6a:8e:
e4:6c:2b:0a:7a:de:64:13:1e:fd:c6:74:0d:00:b1:
26:9e:b8:45:99:09:aa:3c:2f:d9:d5:dd:aa:2b:6b:
84:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:52:9F:2E:E9:C6:EE:C4:51:95:F5:BF:07:16:1C:87:E7:47:DD:59
X509v3 Authority Key Identifier:
keyid:4C:9D:6C:55:BE:1B:E8:A8:4A:D2:DF:D5:A7:FF:A5:84:8F:54:D4:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TJ1sVb4b6KhK0t_Vp_-lhI9U1Ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/3e775d-b117-40dd-ae6a-2d502e956c04/1/TJ1sVb4b6KhK0t_Vp_-lhI9U1Ak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/3e775d-b117-40dd-ae6a-2d502e956c04/1/TJ1sVb4b6KhK0t_Vp_-lhI9U1Ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:cc:27:aa:47:58:b3:44:9f:d7:84:65:96:d7:ef:9b:c1:0a:
aa:68:1f:6f:3f:e7:ce:4a:1e:5c:eb:44:b5:93:70:54:9b:c4:
3d:ed:e5:a0:4d:d9:cc:a6:e1:c8:8e:2a:86:24:82:95:83:43:
64:5f:3a:5e:09:3b:4f:bf:ba:e9:51:36:d6:24:0d:f5:6d:7a:
8a:77:0a:37:9f:9e:36:06:54:c7:0a:73:a8:ee:5a:5c:89:54:
08:28:03:45:cf:e0:23:82:94:da:a1:5d:73:0c:0d:8e:f1:d4:
e6:e2:0d:51:cf:b1:33:b7:c2:83:b1:df:56:74:51:69:ea:99:
34:5d:63:cc:f2:55:26:fa:91:23:1c:99:f6:4a:81:de:e5:78:
42:da:b9:45:cb:ea:94:a7:11:8b:fb:d3:13:28:c9:f7:7a:ac:
28:5c:5e:8d:28:29:47:c8:c0:a6:76:42:d9:40:5e:35:fc:fc:
2a:ac:57:b7:04:8a:e2:f2:1a:78:80:10:9b:bb:dd:47:29:d4:
6e:a5:da:20:26:be:77:4c:71:6a:ae:16:21:e1:d0:52:4d:17:
83:11:d9:72:89:17:91:33:40:fa:ed:ad:d6:28:a6:db:1e:e3:
b3:c2:d2:68:c6:a4:1c:cf:4c:de:76:50:f4:b7:14:ee:e1:91:
8c:82:13:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:56:58 2025 by rpki-client