Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/TsOgYsuW2aPyGostqEj4HG9zv5U.mft
File: TsOgYsuW2aPyGostqEj4HG9zv5U.mft (raw, json)
Hash identifier: E1HH8PUwosju4n/svbdJr7niLk3EJ4/Bco97UcUO7KY=
Subject key identifier: 33:21:A6:6E:63:66:BC:AB:3C:28:F7:77:EC:8B:F9:B7:78:B7:1F:F4
Authority key identifier: 4E:C3:A0:62:CB:96:D9:A3:F2:1A:8B:2D:A8:48:F8:1C:6F:73:BF:95
Certificate issuer: /CN=4ec3a062cb96d9a3f21a8b2da848f81c6f73bf95
Certificate serial: 0197B632C0D33A1B26CF206AB6F8A04AD82E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TsOgYsuW2aPyGostqEj4HG9zv5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/TsOgYsuW2aPyGostqEj4HG9zv5U.mft
Manifest number: 1550
Signing time: Sat 28 Jun 2025 11:01:08 +0000
Manifest this update: Sat 28 Jun 2025 11:01:08 +0000
Manifest next update: Sun 29 Jun 2025 11:01:08 +0000
Files and hashes: 1: TsOgYsuW2aPyGostqEj4HG9zv5U.crl (hash: 0wlrEXkE2nYFkcIyi4iTI+HPP1qq9cBuHFt50um1sk4=)
2: Zo-iXOH7eoz1wcNDU4gFPp4lbTo.roa (hash: lEXdntgkazPfcD7Ym6WQrguJ42W+/3phyup2XOjaUaA=)
3: w0BgVrxvQVnjW2X3qjBQ3ko9xOc.roa (hash: Ucfa4JRcD7zc33DVXeSZa1Nus1iwZHoQ8xtQZD2xfUQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/TsOgYsuW2aPyGostqEj4HG9zv5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/TsOgYsuW2aPyGostqEj4HG9zv5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/TsOgYsuW2aPyGostqEj4HG9zv5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:c0:d3:3a:1b:26:cf:20:6a:b6:f8:a0:4a:d8:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ec3a062cb96d9a3f21a8b2da848f81c6f73bf95
Validity
Not Before: Jun 28 11:01:08 2025 GMT
Not After : Jun 29 11:01:08 2025 GMT
Subject: CN=3321a66e6366bcab3c28f777ec8bf9b778b71ff4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:88:5e:90:46:ee:3f:16:b9:55:5b:1d:b6:44:
d1:98:9a:d8:5e:88:60:20:e2:7d:b5:d0:95:9c:ff:
02:56:5c:db:6a:b9:2b:d5:c8:b8:da:6e:56:e3:18:
42:f6:34:1b:23:d5:64:dc:0e:3b:39:6b:db:8b:8d:
48:f8:46:d4:5c:6a:c6:98:55:a8:71:f3:92:e1:da:
40:be:18:9d:ed:db:ad:d5:70:40:c1:8d:93:ad:a1:
5a:b2:3a:f9:a4:66:f8:a5:ff:e6:69:ef:a1:eb:ec:
a8:36:4f:3b:d6:4c:55:61:66:23:ec:fe:5e:e0:a7:
b1:aa:38:19:da:6a:9d:42:b0:e8:e3:9a:a0:22:d3:
df:7a:09:bd:79:ff:96:03:f5:f9:4a:cd:d5:4b:5f:
37:ae:d9:c1:ef:a1:2b:98:5b:9e:7a:e7:cb:d3:88:
16:41:81:41:bb:bf:1a:68:60:d1:07:a3:fe:fd:9e:
c7:8f:20:d7:73:8c:de:83:0e:96:fe:b7:be:26:4d:
e6:5b:d6:ee:5e:f7:38:e1:5b:fe:99:f9:51:88:9a:
d0:df:0a:9a:76:ce:f5:14:20:d2:93:a8:90:9e:a5:
1f:4b:1c:65:e9:bd:1a:29:ef:c2:10:d3:38:16:93:
b4:45:8e:ed:c5:02:f9:a6:7b:99:d3:83:77:2b:1f:
ff:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:21:A6:6E:63:66:BC:AB:3C:28:F7:77:EC:8B:F9:B7:78:B7:1F:F4
X509v3 Authority Key Identifier:
keyid:4E:C3:A0:62:CB:96:D9:A3:F2:1A:8B:2D:A8:48:F8:1C:6F:73:BF:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TsOgYsuW2aPyGostqEj4HG9zv5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/TsOgYsuW2aPyGostqEj4HG9zv5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/TsOgYsuW2aPyGostqEj4HG9zv5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:8f:74:36:19:87:a9:99:ad:db:93:2a:e4:33:1c:b1:d9:fe:
5a:98:0f:b5:8c:9d:6a:e8:78:c2:2e:d1:97:ad:2f:c2:e9:fd:
c8:fa:61:c4:99:fb:ec:a4:28:63:94:25:7e:b2:fb:4d:99:4c:
2b:30:13:06:a7:1d:c5:d2:2d:a0:88:b8:36:80:b8:f6:f0:66:
fa:1f:b3:de:80:3f:e6:5e:23:e5:f9:41:ff:db:a9:2e:e4:fc:
5f:b4:32:f2:ca:b8:b8:d3:d8:ff:e7:27:07:84:b8:61:ba:49:
cc:3a:27:50:0c:ee:21:61:07:49:99:f8:e2:86:7b:e6:f8:c5:
d9:c2:9a:4f:ae:39:6e:7c:17:ea:c7:c6:db:f4:60:d5:c8:c8:
38:d2:da:4b:b1:f2:f9:1b:6e:8e:a5:7d:4c:b2:58:f8:03:cf:
d0:c8:ad:fa:00:30:b3:e0:2d:81:10:05:83:72:42:4c:1c:32:
16:88:17:6f:a5:c2:6b:18:03:6c:6d:57:9e:a9:d7:15:38:c8:
36:eb:61:6b:1e:7a:92:93:9d:3d:a9:64:72:8c:1d:a7:6b:09:
86:3a:ec:2f:a0:cc:12:37:2d:7e:54:1c:c9:c2:4f:14:4b:07:
a0:e7:c6:0d:91:f3:3b:f0:54:c5:14:19:bb:ad:39:1f:35:8b:
ac:98:8a:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:51:59 2025 by rpki-client