Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4c1f59-0c12-4153-a15c-715f9cd63086/1/TJiLk6t6KZmjJV7q5OGKsjsuDz4.mft
File: TJiLk6t6KZmjJV7q5OGKsjsuDz4.mft (raw, json)
Hash identifier: DBm26KXag2ads33VsMEiNC8AwaiRkPEjTEvJodf7Uvo=
Subject key identifier: C9:CA:4F:93:60:3F:20:E2:89:90:D1:30:53:89:0F:51:7C:7C:6B:8F
Authority key identifier: 4C:98:8B:93:AB:7A:29:99:A3:25:5E:EA:E4:E1:8A:B2:3B:2E:0F:3E
Certificate issuer: /CN=4c988b93ab7a2999a3255eeae4e18ab23b2e0f3e
Certificate serial: 0197B6A03E40F69DC7C859F5B38ED7D9C711
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TJiLk6t6KZmjJV7q5OGKsjsuDz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4c1f59-0c12-4153-a15c-715f9cd63086/1/TJiLk6t6KZmjJV7q5OGKsjsuDz4.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 13:00:44 +0000
Manifest this update: Sat 28 Jun 2025 13:00:44 +0000
Manifest next update: Sun 29 Jun 2025 13:00:44 +0000
Files and hashes: 1: 5XqYz3igdHBUJOarhV6UCk20p4g.roa (hash: OiTQYPv4ItBCPhGaoL4ocDwYxXkvxpj8Eo+XMn3YAwI=)
2: BWzUAYzWxehGB0sc7Hoq3s64-5A.roa (hash: Y2Cmk2o0Bi2v58k/tp8mbuKNOVbGQJJqiMnQXIqfVfA=)
3: TJiLk6t6KZmjJV7q5OGKsjsuDz4.crl (hash: Q7uSjk+p9v3l1fN3ETdaB6OT9DfJt4epAj6mTcW+e8s=)
4: uJBF8l1YNTX1rQwpWIP4iAOZYes.roa (hash: W5zW790ApNcbjg521YyvqbQ8pFLrwOkcD0CU1yoVHdc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/4c1f59-0c12-4153-a15c-715f9cd63086/1/TJiLk6t6KZmjJV7q5OGKsjsuDz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/4c1f59-0c12-4153-a15c-715f9cd63086/1/TJiLk6t6KZmjJV7q5OGKsjsuDz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TJiLk6t6KZmjJV7q5OGKsjsuDz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:3e:40:f6:9d:c7:c8:59:f5:b3:8e:d7:d9:c7:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c988b93ab7a2999a3255eeae4e18ab23b2e0f3e
Validity
Not Before: Jun 28 13:00:44 2025 GMT
Not After : Jun 29 13:00:44 2025 GMT
Subject: CN=c9ca4f93603f20e28990d13053890f517c7c6b8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:08:90:c6:40:15:06:be:fa:b9:03:28:fb:2c:
e7:60:e6:77:94:49:f6:22:47:16:13:87:b9:d2:de:
0c:a1:41:81:21:81:e0:83:d6:0a:1e:2d:8f:eb:92:
a7:73:0d:d4:8c:67:03:56:9d:cb:8b:49:09:80:fa:
97:47:94:a8:16:c2:7a:e1:94:52:02:8f:06:11:bd:
78:d6:dc:ae:9e:9b:a0:92:46:6f:e7:e4:80:39:2a:
35:77:24:52:89:75:22:b4:97:20:7e:ab:a7:19:30:
34:e8:d4:b3:ec:0e:a5:8b:70:1f:c9:b5:12:ea:dc:
1a:02:a7:8e:40:28:84:70:2f:ec:ea:b6:4f:51:13:
62:d5:1f:2b:df:8f:32:b0:be:ee:c3:41:ec:ec:66:
a7:ff:26:ee:25:db:f1:c1:32:1c:56:d1:6b:eb:d4:
b6:58:16:69:02:f4:73:27:e6:03:fb:fd:3b:74:7e:
d0:d6:f3:a5:fc:48:b0:90:cc:8e:68:24:fb:fd:66:
bd:12:2c:b8:19:6d:e8:f3:c2:ce:b8:72:53:bd:4d:
b5:c6:78:9b:24:aa:4e:e5:5d:e5:57:f0:d4:5b:28:
a1:84:8d:a4:20:d2:b1:88:df:8d:fb:20:68:3b:39:
93:eb:6b:72:94:2d:d6:69:ec:4e:f9:ba:9e:9e:16:
2d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:CA:4F:93:60:3F:20:E2:89:90:D1:30:53:89:0F:51:7C:7C:6B:8F
X509v3 Authority Key Identifier:
keyid:4C:98:8B:93:AB:7A:29:99:A3:25:5E:EA:E4:E1:8A:B2:3B:2E:0F:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TJiLk6t6KZmjJV7q5OGKsjsuDz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4c1f59-0c12-4153-a15c-715f9cd63086/1/TJiLk6t6KZmjJV7q5OGKsjsuDz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4c1f59-0c12-4153-a15c-715f9cd63086/1/TJiLk6t6KZmjJV7q5OGKsjsuDz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:b4:4a:f4:4c:82:e5:f0:9a:d5:50:4b:9a:e9:8b:04:d7:a7:
9f:52:b6:b1:70:9d:36:a3:15:e8:eb:a3:b1:b7:d4:7f:90:0f:
90:f0:cb:49:ae:a4:ee:2b:ec:3b:7f:30:df:c1:75:50:84:6f:
03:34:d4:1c:13:85:91:62:ed:62:90:e9:12:bb:e4:2b:14:f8:
5b:12:f6:3b:85:e3:44:35:27:10:91:c8:4a:a9:2d:bf:a6:b8:
93:2a:26:61:9b:94:3b:66:de:70:5a:4b:ac:72:93:c2:04:2e:
4c:7b:b1:52:fc:98:18:52:bc:e1:a8:7d:76:f1:7b:49:49:6c:
97:12:d4:a0:a8:8d:01:5d:33:64:74:3a:c8:c1:53:43:3a:3b:
44:db:d2:4d:45:ac:83:b9:b5:ba:10:55:b0:da:fd:ac:8a:20:
a5:f0:a3:72:9c:26:93:16:77:8f:08:9b:f2:fc:a8:00:4c:ac:
2a:e2:bc:99:15:3e:e1:24:16:73:7a:3f:da:40:2d:14:9d:78:
52:a3:41:bb:3c:a2:ae:25:52:ac:47:da:61:cc:53:18:82:1a:
08:e2:87:2e:60:83:80:6b:fa:ce:c6:72:c8:d0:30:52:aa:d3:
8d:d2:d0:98:70:4f:a8:9d:ed:47:40:e7:1b:e6:10:b5:43:cd:
76:ad:3c:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:20:15 2025 by rpki-client