Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/4f943f-d16a-48da-b93a-1487c6020c46/1/Tj_pDw-taiXUa9fDNbki2gMbLHg.mft
File: Tj_pDw-taiXUa9fDNbki2gMbLHg.mft (raw, json)
Hash identifier: A5s3uCV0TK1pXV9uBXR9EBY+A/XASoy4lUbsXaNEVq8=
Subject key identifier: AE:71:19:D2:78:FA:A8:34:B2:DE:B8:2A:80:50:C9:FD:D4:04:C3:D0
Authority key identifier: 4E:3F:E9:0F:0F:AD:6A:25:D4:6B:D7:C3:35:B9:22:DA:03:1B:2C:78
Certificate issuer: /CN=4e3fe90f0fad6a25d46bd7c335b922da031b2c78
Certificate serial: 0197B77C04BBDBBEB525D5C1F6F4DFE7E1CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tj_pDw-taiXUa9fDNbki2gMbLHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/4f943f-d16a-48da-b93a-1487c6020c46/1/Tj_pDw-taiXUa9fDNbki2gMbLHg.mft
Manifest number: 0A5D
Signing time: Sat 28 Jun 2025 17:00:47 +0000
Manifest this update: Sat 28 Jun 2025 17:00:47 +0000
Manifest next update: Sun 29 Jun 2025 17:00:47 +0000
Files and hashes: 1: Tj_pDw-taiXUa9fDNbki2gMbLHg.crl (hash: uZYz59LuN8/0mqvDQs8BM52iXhH1spiCIqEJu5To8hI=)
2: xBLWMt7CnhdMhsDQsxTJKsgubzw.roa (hash: ZCdYsbGv+ldj13bvl4ML8UTblRYPsZ2+PffnDm+YrGQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/4f943f-d16a-48da-b93a-1487c6020c46/1/Tj_pDw-taiXUa9fDNbki2gMbLHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/4f943f-d16a-48da-b93a-1487c6020c46/1/Tj_pDw-taiXUa9fDNbki2gMbLHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tj_pDw-taiXUa9fDNbki2gMbLHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:04:bb:db:be:b5:25:d5:c1:f6:f4:df:e7:e1:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e3fe90f0fad6a25d46bd7c335b922da031b2c78
Validity
Not Before: Jun 28 17:00:47 2025 GMT
Not After : Jun 29 17:00:47 2025 GMT
Subject: CN=ae7119d278faa834b2deb82a8050c9fdd404c3d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:77:b6:95:3d:be:7a:d4:5b:f5:56:fa:75:ef:
f7:3b:d4:1e:d9:92:9a:9c:13:18:3d:8e:7a:ae:85:
c7:6e:6e:10:38:eb:27:7f:9e:8a:58:76:1d:1d:ec:
0d:4b:c8:2e:1d:0f:f1:43:53:1a:d5:69:ab:69:2b:
6a:b0:0b:00:3b:ac:2b:50:b5:d9:07:16:f3:de:92:
36:ac:68:3e:79:d3:d3:81:12:92:d9:d1:ce:e2:85:
57:7c:48:6e:a5:0e:c2:b9:3c:d4:03:d6:76:34:18:
12:10:ff:2e:6e:86:cf:0f:e5:f5:a7:bf:29:23:4c:
4d:f2:5c:33:1d:46:c3:07:8f:f4:f4:12:6f:8b:ef:
df:d0:59:9d:79:e0:34:68:99:73:c6:77:f6:6c:12:
9b:99:4d:56:fc:9b:6c:98:b6:cf:90:88:f3:23:ab:
a8:0e:0d:47:c1:93:e4:59:be:f5:fa:49:61:a5:c5:
79:fd:75:54:9d:f5:25:f0:1e:65:d2:69:55:6e:69:
60:aa:b6:dd:e3:1a:97:29:95:4c:44:1f:10:c9:26:
f8:97:af:b5:d8:c8:76:5b:bb:bf:19:b5:22:0b:fd:
ae:bd:e9:5e:77:af:f3:92:0f:a8:5e:44:34:3a:10:
33:58:62:3e:08:bf:ef:b0:1f:24:ba:13:df:d9:db:
42:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:71:19:D2:78:FA:A8:34:B2:DE:B8:2A:80:50:C9:FD:D4:04:C3:D0
X509v3 Authority Key Identifier:
keyid:4E:3F:E9:0F:0F:AD:6A:25:D4:6B:D7:C3:35:B9:22:DA:03:1B:2C:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tj_pDw-taiXUa9fDNbki2gMbLHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4f943f-d16a-48da-b93a-1487c6020c46/1/Tj_pDw-taiXUa9fDNbki2gMbLHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4f943f-d16a-48da-b93a-1487c6020c46/1/Tj_pDw-taiXUa9fDNbki2gMbLHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:3f:eb:cc:2f:ab:f3:fd:05:16:14:cc:c6:fe:00:9f:18:2e:
b4:5c:ec:7d:3f:2e:a7:37:ed:e4:62:a3:6d:bc:e0:ee:48:a0:
10:b3:d5:82:b2:d7:54:7e:89:73:11:57:3e:dc:b9:f0:c4:45:
57:c1:6c:a7:51:75:0e:a4:d4:06:6c:8f:6d:1e:2f:9c:60:c1:
f2:67:15:8a:f9:8f:62:35:19:3a:78:fb:3c:95:29:0e:12:b8:
d5:9a:81:a7:ec:fe:d8:1f:26:a7:26:d1:1e:e5:af:e0:01:79:
f1:ec:80:80:d4:ba:a0:73:75:ff:47:1d:72:bf:a9:75:4e:c6:
21:8d:e9:2d:49:7b:55:f7:7c:7b:d1:a5:20:58:ad:d9:6b:26:
51:bc:d8:0a:02:28:a0:a7:a5:fe:32:db:6e:d1:a4:1a:43:78:
b0:c3:92:0e:ee:6f:dc:c7:fa:8f:84:2b:bf:79:3b:75:5e:15:
4a:fa:e8:01:8f:e6:7b:12:96:9d:1f:bd:f2:65:c5:26:a1:e8:
a1:a2:a5:8a:78:8d:31:e6:58:11:93:94:82:b0:b9:62:83:04:
17:50:3d:6d:67:33:90:48:9d:79:6c:c5:7e:79:7b:44:bd:a5:
98:2e:1e:c5:16:7b:dc:b6:8e:1d:c2:88:28:1b:a3:93:18:f3:
dc:fb:ca:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:23:22 2025 by rpki-client