Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/d9d3c9-f194-4b26-8f10-ff6a9cde6335/1/tcR4e4CrSAGrYrG9v7KOBtMM32o.mft
File: tcR4e4CrSAGrYrG9v7KOBtMM32o.mft (raw, json)
Hash identifier: su+0wQb3Jp8jfH8Uk8Y3WdNJ1CLzOcekNNH+EchXd6Q=
Subject key identifier: E0:8C:A3:FD:15:22:BB:A4:45:31:B1:8C:57:D2:4E:2E:91:25:4C:F4
Authority key identifier: B5:C4:78:7B:80:AB:48:01:AB:62:B1:BD:BF:B2:8E:06:D3:0C:DF:6A
Certificate issuer: /CN=b5c4787b80ab4801ab62b1bdbfb28e06d30cdf6a
Certificate serial: 0197B74509FBBB22B7B77712D0A1B9E478FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tcR4e4CrSAGrYrG9v7KOBtMM32o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/d9d3c9-f194-4b26-8f10-ff6a9cde6335/1/tcR4e4CrSAGrYrG9v7KOBtMM32o.mft
Manifest number: 0411
Signing time: Sat 28 Jun 2025 16:00:44 +0000
Manifest this update: Sat 28 Jun 2025 16:00:44 +0000
Manifest next update: Sun 29 Jun 2025 16:00:44 +0000
Files and hashes: 1: ktAbm-eMqyUysDj5Rz0ozhsQgoU.roa (hash: sOoFB/V0u6n0JOO4WrnOrE08EvrJyrBKeqUzyGdoIfI=)
2: tcR4e4CrSAGrYrG9v7KOBtMM32o.crl (hash: trVqmHD9tvytTI1qVye+lgoizQQ/KOugjI7seeMcnJ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/d9d3c9-f194-4b26-8f10-ff6a9cde6335/1/tcR4e4CrSAGrYrG9v7KOBtMM32o.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/d9d3c9-f194-4b26-8f10-ff6a9cde6335/1/tcR4e4CrSAGrYrG9v7KOBtMM32o.mft
rsync://rpki.ripe.net/repository/DEFAULT/tcR4e4CrSAGrYrG9v7KOBtMM32o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:09:fb:bb:22:b7:b7:77:12:d0:a1:b9:e4:78:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5c4787b80ab4801ab62b1bdbfb28e06d30cdf6a
Validity
Not Before: Jun 28 16:00:44 2025 GMT
Not After : Jun 29 16:00:44 2025 GMT
Subject: CN=e08ca3fd1522bba44531b18c57d24e2e91254cf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ca:b2:8a:08:71:32:70:1c:83:ed:ab:15:09:
00:0d:52:01:90:d8:28:48:cb:10:1e:f0:e0:4c:9b:
37:c9:01:4d:7c:4f:d4:db:43:e5:91:ba:e9:79:db:
ab:8e:85:09:72:1d:35:1d:42:8a:b1:84:6d:79:ba:
03:9a:de:dd:51:f3:46:ab:9f:9a:82:c5:3b:bb:f6:
06:0d:81:6b:a0:3b:fb:84:fd:82:61:6c:35:a4:a0:
07:b1:74:11:3f:4e:ea:01:9d:b6:8a:b5:38:e3:92:
1f:64:ea:a9:1b:5d:72:b0:b4:23:2e:7a:69:c1:b2:
aa:63:82:71:af:a0:08:e0:83:d2:0a:f0:e0:83:56:
0d:41:33:3f:e7:e2:ba:86:7c:d0:ae:4e:c7:5a:9f:
d8:9f:d7:1b:ff:2a:56:a3:3d:d8:26:34:3d:5e:e3:
4a:e3:c0:c9:ef:fa:75:50:92:35:ca:47:39:1d:fa:
61:5d:29:fb:91:fc:fa:51:80:d5:fe:06:91:d3:6c:
8c:ac:65:29:af:32:54:13:15:ec:d4:28:b1:b9:af:
60:e7:30:4e:14:06:8a:84:2b:26:3b:ba:e5:bb:7a:
da:e3:22:2c:db:cf:1c:51:9c:ff:4d:de:4e:28:03:
15:3a:40:26:90:b7:c7:0e:11:c7:60:d9:ec:1a:98:
87:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:8C:A3:FD:15:22:BB:A4:45:31:B1:8C:57:D2:4E:2E:91:25:4C:F4
X509v3 Authority Key Identifier:
keyid:B5:C4:78:7B:80:AB:48:01:AB:62:B1:BD:BF:B2:8E:06:D3:0C:DF:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tcR4e4CrSAGrYrG9v7KOBtMM32o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d9d3c9-f194-4b26-8f10-ff6a9cde6335/1/tcR4e4CrSAGrYrG9v7KOBtMM32o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d9d3c9-f194-4b26-8f10-ff6a9cde6335/1/tcR4e4CrSAGrYrG9v7KOBtMM32o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:72:12:a2:6e:b5:ac:94:77:00:f6:a7:f6:e3:df:9f:92:82:
44:58:66:8a:13:cd:45:50:bb:5d:a4:dd:13:a4:b2:15:af:39:
6b:01:b8:ca:21:3e:4f:5e:f5:71:8d:81:ed:b1:54:2b:b9:5d:
8f:6c:1f:81:76:7b:17:73:5f:c3:f0:1f:bd:2c:c8:11:10:22:
6d:1b:7c:fb:a7:20:21:17:df:47:af:03:84:4d:93:b8:69:9b:
fc:3c:37:2f:9f:d2:81:cf:18:b4:6b:59:9b:d3:ea:31:ec:cf:
83:99:e9:33:ca:5a:5d:1b:6d:f2:fb:07:60:58:94:25:d1:58:
18:af:3d:aa:86:fa:76:b6:88:60:6f:36:77:b5:1d:c9:5e:61:
3d:cb:2c:1c:53:fb:3b:fa:be:56:69:89:2e:47:66:8c:09:15:
ea:48:a7:78:8f:21:a1:8f:e6:41:67:9e:bd:7d:9e:1a:33:66:
ce:ab:ff:65:f4:a3:cf:58:3c:15:d7:45:c3:56:75:5a:6c:15:
44:6d:ff:df:5e:25:2d:64:49:d7:59:f8:00:44:3a:31:fd:77:
68:c9:58:42:07:3e:8d:10:39:63:24:cd:95:d1:2a:bb:ed:dc:
29:b1:d9:37:64:45:af:32:ea:97:83:3a:18:df:1c:1a:54:29:
67:47:c2:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:35:32 2025 by rpki-client