Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/69eddb-2df1-4990-9c96-d06599ba7e5b/1/tk4QDJA9hclmHyG0H2QZlJA6Rcw.mft
File: tk4QDJA9hclmHyG0H2QZlJA6Rcw.mft (raw, json)
Hash identifier: dXBm2wr4yNF4B65Zoof02pTMPjFhr26DBkYTcOJdxTM=
Subject key identifier: E6:D9:3F:1A:30:93:73:29:2D:CC:E5:80:5C:6F:94:F6:12:9A:52:31
Authority key identifier: B6:4E:10:0C:90:3D:85:C9:66:1F:21:B4:1F:64:19:94:90:3A:45:CC
Certificate issuer: /CN=b64e100c903d85c9661f21b41f641994903a45cc
Certificate serial: 0196C26FC0629E3E805C9244BA44EB49D5D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tk4QDJA9hclmHyG0H2QZlJA6Rcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/69eddb-2df1-4990-9c96-d06599ba7e5b/1/tk4QDJA9hclmHyG0H2QZlJA6Rcw.mft
Manifest number: 019A
Signing time: Mon 12 May 2025 03:00:25 +0000
Manifest this update: Mon 12 May 2025 03:00:25 +0000
Manifest next update: Tue 13 May 2025 03:00:25 +0000
Files and hashes: 1: kAdUvhi0iuHRl8HdWVSAKlJD5u0.roa (hash: 2XhzY5ktX3xFgvAerywPE4VwkhUGoOOVHNmD/7mSh84=)
2: tk4QDJA9hclmHyG0H2QZlJA6Rcw.crl (hash: GP6ZFqeSMfkUULMfj8XlsNIjwhNEo7H9m5X5Eq5OeuE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/69eddb-2df1-4990-9c96-d06599ba7e5b/1/tk4QDJA9hclmHyG0H2QZlJA6Rcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/69eddb-2df1-4990-9c96-d06599ba7e5b/1/tk4QDJA9hclmHyG0H2QZlJA6Rcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tk4QDJA9hclmHyG0H2QZlJA6Rcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:6f:c0:62:9e:3e:80:5c:92:44:ba:44:eb:49:d5:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b64e100c903d85c9661f21b41f641994903a45cc
Validity
Not Before: May 12 03:00:25 2025 GMT
Not After : May 13 03:00:25 2025 GMT
Subject: CN=e6d93f1a309373292dcce5805c6f94f6129a5231
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:dc:7e:d2:f8:ef:14:89:bc:c4:08:65:fb:98:
3d:1d:17:a7:a3:31:44:f7:f0:40:f5:ca:35:a6:89:
81:9c:cc:97:f8:7d:2e:23:66:9d:97:10:89:cc:05:
63:f5:96:0e:b6:32:80:f0:8b:a8:95:33:61:b6:f9:
ff:2d:11:2a:43:44:6c:52:e0:fa:ea:a0:31:b5:42:
44:64:c7:45:01:d8:e6:29:e3:a7:df:13:63:db:91:
51:8b:7e:1e:d5:14:e4:7b:af:62:a0:4e:10:27:bc:
db:0e:a9:df:72:79:29:ff:e6:f8:06:ee:df:90:07:
05:ae:91:28:7a:50:df:a2:7c:ce:f4:84:12:35:35:
d2:3c:ce:ce:97:fe:f3:3d:20:6f:ff:7f:11:0a:a0:
a0:41:ae:7c:bb:e5:7a:17:bb:45:13:43:2e:11:77:
cc:ad:b1:34:84:02:20:f0:fc:ce:16:c3:d4:69:87:
c2:99:8c:d7:a2:18:0c:a9:4b:ad:b1:69:7f:41:3d:
30:93:db:02:8a:8f:c6:da:c4:16:ef:e2:29:46:e1:
4d:bf:52:35:e8:04:76:4a:bf:81:21:be:06:c1:af:
4c:01:a8:c5:a7:56:15:42:ae:07:bb:30:54:df:a2:
ef:3d:d6:57:11:50:e2:14:b4:f9:44:e3:7c:0a:59:
f4:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:D9:3F:1A:30:93:73:29:2D:CC:E5:80:5C:6F:94:F6:12:9A:52:31
X509v3 Authority Key Identifier:
keyid:B6:4E:10:0C:90:3D:85:C9:66:1F:21:B4:1F:64:19:94:90:3A:45:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tk4QDJA9hclmHyG0H2QZlJA6Rcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/69eddb-2df1-4990-9c96-d06599ba7e5b/1/tk4QDJA9hclmHyG0H2QZlJA6Rcw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/69eddb-2df1-4990-9c96-d06599ba7e5b/1/tk4QDJA9hclmHyG0H2QZlJA6Rcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:a8:08:8d:e0:e1:a3:1c:7e:43:cf:a8:9a:bf:ee:17:a2:fe:
a0:87:27:98:d1:ad:56:9c:80:86:06:a0:0d:51:95:b0:da:05:
3e:ed:8c:35:6f:55:53:a7:f9:80:d0:d5:0f:9f:15:b7:f6:ed:
08:cd:31:ea:62:64:3c:e2:7d:2c:31:4b:5b:2c:db:d1:2e:af:
f7:7f:5a:a5:32:04:84:0b:49:af:f2:93:c7:96:c7:06:39:d6:
f1:b2:57:1f:9c:a1:8f:95:94:83:41:54:42:a8:9e:5c:b7:90:
bf:fc:5b:78:77:eb:46:8d:0d:f6:d9:24:ba:41:28:d7:a4:85:
49:f6:26:df:14:fb:f9:d7:f7:28:34:69:61:8a:a4:32:df:f5:
2e:c3:40:dc:97:d5:d1:f8:bc:1f:50:8e:60:69:1e:0c:b6:2d:
d2:f7:a0:68:2e:87:2f:a8:23:b6:fa:86:a2:55:31:54:c0:32:
62:a5:c3:5d:9e:05:b8:86:46:11:83:0b:95:23:0f:f9:74:8f:
34:17:dd:e7:97:f9:9e:50:79:8c:0c:49:47:53:f9:bb:f6:8e:
f2:fd:42:99:d7:5f:d2:f9:c1:0b:0d:72:ee:f9:1f:88:a7:99:
b7:b4:47:62:3f:95:6b:11:9b:e6:76:02:d2:7e:f2:ab:20:49:
96:72:54:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 07:18:27 2025 by rpki-client