Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/8008fe-175b-41bf-b1d6-2ce0eb458788/1/TFFjb96QX4Uh9BFHnoEyHNz0kEk.mft
File: TFFjb96QX4Uh9BFHnoEyHNz0kEk.mft (raw, json)
Hash identifier: qjLq9ARkAS+ndKdYIn7OaONUOxUW+aKgS+MTfhQ3iAc=
Subject key identifier: 12:A8:8A:4A:82:67:C8:89:33:10:73:52:C2:65:05:35:91:D8:E3:D5
Authority key identifier: 4C:51:63:6F:DE:90:5F:85:21:F4:11:47:9E:81:32:1C:DC:F4:90:49
Certificate issuer: /CN=4c51636fde905f8521f411479e81321cdcf49049
Certificate serial: 0197B6A18970F799F4B5A0DC50D40B617E33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TFFjb96QX4Uh9BFHnoEyHNz0kEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/8008fe-175b-41bf-b1d6-2ce0eb458788/1/TFFjb96QX4Uh9BFHnoEyHNz0kEk.mft
Manifest number: 0845
Signing time: Sat 28 Jun 2025 13:02:09 +0000
Manifest this update: Sat 28 Jun 2025 13:02:09 +0000
Manifest next update: Sun 29 Jun 2025 13:02:09 +0000
Files and hashes: 1: TFFjb96QX4Uh9BFHnoEyHNz0kEk.crl (hash: GLpoXTHVNU6k0WbVHh7eYeeIe64NZ5FMIWOQfOiQjls=)
2: k88eKZ3ggVkstFfz6v9jAollFdM.roa (hash: RToXutf5Qdv2Y+G73kPgZr6gfiGthSFW8G2eqnaoH64=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/8008fe-175b-41bf-b1d6-2ce0eb458788/1/TFFjb96QX4Uh9BFHnoEyHNz0kEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/8008fe-175b-41bf-b1d6-2ce0eb458788/1/TFFjb96QX4Uh9BFHnoEyHNz0kEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TFFjb96QX4Uh9BFHnoEyHNz0kEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:89:70:f7:99:f4:b5:a0:dc:50:d4:0b:61:7e:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c51636fde905f8521f411479e81321cdcf49049
Validity
Not Before: Jun 28 13:02:09 2025 GMT
Not After : Jun 29 13:02:09 2025 GMT
Subject: CN=12a88a4a8267c88933107352c265053591d8e3d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:1f:a6:31:99:58:9e:f9:5f:5b:a7:28:49:d9:
4a:d1:a3:32:60:72:f0:4c:f9:2d:94:e9:4b:98:41:
e7:ab:41:61:20:25:3e:5d:6f:aa:31:33:04:ae:8c:
8d:7c:4d:e0:08:53:6a:06:8f:09:24:f1:1a:b4:09:
3d:00:69:35:3e:4e:19:09:7f:f9:87:67:8a:88:e3:
c7:d4:30:02:ca:60:7d:cb:c9:3a:35:f7:c7:07:92:
92:f3:3b:f5:c3:4b:6e:6c:9c:f9:a6:50:77:8b:f1:
95:c3:f6:89:2f:15:d1:8e:33:2f:ba:4f:ef:dc:00:
b0:3a:29:9f:7f:b1:9a:ef:98:06:1c:c9:7c:89:d5:
a5:44:4c:b8:5f:d3:c2:23:4f:e3:d9:61:58:10:d6:
dd:45:af:14:9a:ae:6d:b7:ac:88:dd:28:be:55:06:
5f:5d:7c:bc:a9:f7:e5:96:83:1f:d6:ef:40:7c:32:
ce:52:a0:e3:36:85:ed:29:d4:a7:8d:28:ea:38:f5:
ca:ed:2f:b2:cb:c4:85:6b:e7:98:ab:98:df:b7:9b:
41:82:45:e5:ea:5b:16:f8:98:14:f5:4c:94:f9:2c:
a7:74:b3:e6:a9:34:0a:35:97:c3:e2:20:2d:0f:63:
56:25:64:8e:12:bb:fa:a2:9d:61:02:e1:db:16:f5:
27:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:A8:8A:4A:82:67:C8:89:33:10:73:52:C2:65:05:35:91:D8:E3:D5
X509v3 Authority Key Identifier:
keyid:4C:51:63:6F:DE:90:5F:85:21:F4:11:47:9E:81:32:1C:DC:F4:90:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TFFjb96QX4Uh9BFHnoEyHNz0kEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/8008fe-175b-41bf-b1d6-2ce0eb458788/1/TFFjb96QX4Uh9BFHnoEyHNz0kEk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/8008fe-175b-41bf-b1d6-2ce0eb458788/1/TFFjb96QX4Uh9BFHnoEyHNz0kEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:6d:f6:a4:22:9a:fd:ca:80:70:ed:b4:d0:14:4e:12:36:69:
93:16:44:e2:b6:cc:88:60:6e:c3:04:72:e6:dc:91:cc:da:58:
52:fd:fd:1a:a4:87:e5:44:fc:ea:44:b2:a8:49:bf:f2:0f:20:
48:4c:22:64:4c:f1:d7:98:b6:b9:8c:a5:fd:e3:df:10:9e:08:
b7:92:68:48:44:2c:9f:8e:a3:b5:e6:33:30:da:fe:0a:04:11:
0e:28:5a:3f:14:7e:a9:77:0b:fc:39:f1:81:19:07:32:37:81:
a1:a6:7a:6e:87:e3:c6:18:9f:be:26:c8:b4:3e:19:12:6b:ab:
52:05:73:b8:3c:9c:27:1c:d8:cb:0e:5d:66:d5:ff:e0:ce:ce:
66:63:5a:3f:1f:3c:6a:9a:96:01:ad:28:72:0b:63:6b:1a:cf:
e5:23:b8:d0:c9:1f:30:90:f0:ca:61:e3:34:ed:75:bc:0c:bb:
a4:a6:2f:a6:09:d2:f4:e5:2b:2f:5c:29:d4:1b:55:50:29:55:
df:63:e4:12:72:07:fa:59:02:34:f4:36:95:ae:92:1a:dd:87:
22:f9:dd:8a:7d:f3:0e:29:1f:59:77:47:4f:12:27:90:a5:7e:
47:dc:87:4a:02:e0:8c:4b:88:19:4d:1a:39:a1:c8:a5:40:c3:
ab:68:8c:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:59:19 2025 by rpki-client