Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/5c92d1-41e5-443e-a250-01baf78ec73f/1/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.mft
File: tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.mft (raw, json)
Hash identifier: L28OCdxs4nUHdOvs43LQKpPq0I9qtlxX5QhntqryD9o=
Subject key identifier: 3E:C0:F7:E1:03:D2:41:2A:26:AC:1B:7F:B0:DE:5E:9E:2E:9F:05:88
Authority key identifier: B6:32:1E:EB:F4:F9:5B:E9:F8:1F:0F:23:3F:89:F3:60:2D:2F:00:74
Certificate issuer: /CN=b6321eebf4f95be9f81f0f233f89f3602d2f0074
Certificate serial: 0197B820EB28EF5BE6402E82CB6E9766F509
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/5c92d1-41e5-443e-a250-01baf78ec73f/1/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.mft
Manifest number: 12A2
Signing time: Sat 28 Jun 2025 20:00:54 +0000
Manifest this update: Sat 28 Jun 2025 20:00:54 +0000
Manifest next update: Sun 29 Jun 2025 20:00:54 +0000
Files and hashes: 1: 9ykTfaxNeEIbk7wOARPuxoyYN9I.roa (hash: t511WQ9hIp1WWZqq1Z1Tp5plKXaqmdK3FlJidSm8B5Q=)
2: TVu5aQ7CXqbPlsSn9wNLY8tYilE.roa (hash: B5zfotvyVUd7f8T5ZgXVly2iMRkx4aTHfTXgfsPh/CI=)
3: tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.crl (hash: 5ru1nwgEo9ialkld9XTz+PMv50L+vPrqesNPRL0tAys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/5c92d1-41e5-443e-a250-01baf78ec73f/1/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/5c92d1-41e5-443e-a250-01baf78ec73f/1/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:20:eb:28:ef:5b:e6:40:2e:82:cb:6e:97:66:f5:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6321eebf4f95be9f81f0f233f89f3602d2f0074
Validity
Not Before: Jun 28 20:00:54 2025 GMT
Not After : Jun 29 20:00:54 2025 GMT
Subject: CN=3ec0f7e103d2412a26ac1b7fb0de5e9e2e9f0588
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:89:68:ee:91:60:d8:9e:14:ec:d0:4d:c7:24:
07:12:5a:e5:8c:bb:3a:83:24:73:b6:29:af:58:39:
ce:ec:1d:6d:c1:7d:00:ba:57:99:76:8f:05:7c:70:
7e:ba:57:42:94:c5:a7:15:28:ae:7e:53:ae:67:fc:
9c:3b:20:83:91:1e:d8:82:cf:02:5b:97:7e:2c:9a:
d7:c7:2e:48:96:83:59:74:36:e8:25:ec:08:0f:05:
cc:90:b5:ea:f9:8d:33:d8:da:2d:82:f9:5e:21:d2:
47:d4:c1:2b:c0:60:b9:b6:cf:80:26:ff:e1:a6:10:
82:fd:12:07:b8:e8:ef:04:0e:ec:17:d7:ce:e3:68:
a7:76:ae:5d:b8:1d:35:c9:97:57:8f:a5:0d:6f:f8:
26:b5:68:e4:cb:ca:d1:fe:14:dc:7b:5f:c9:da:0b:
23:11:a5:e2:f5:07:d4:d6:3c:0a:22:27:b1:f9:68:
b1:c8:de:af:c2:e7:b0:f8:3f:ed:e9:10:eb:9b:a3:
64:26:2e:bb:9e:46:57:ff:20:1d:40:75:88:b2:08:
bb:0a:cf:e7:ba:07:0b:49:9f:6c:22:42:ff:c8:e1:
a9:42:d8:ca:76:e1:b6:b8:95:c3:02:00:19:e1:0a:
9f:91:81:79:50:3b:98:34:9d:5b:92:79:79:00:7a:
2c:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:C0:F7:E1:03:D2:41:2A:26:AC:1B:7F:B0:DE:5E:9E:2E:9F:05:88
X509v3 Authority Key Identifier:
keyid:B6:32:1E:EB:F4:F9:5B:E9:F8:1F:0F:23:3F:89:F3:60:2D:2F:00:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5c92d1-41e5-443e-a250-01baf78ec73f/1/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5c92d1-41e5-443e-a250-01baf78ec73f/1/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:1e:d8:3c:12:f7:b8:d2:32:b4:d7:94:02:b4:2c:a9:a9:0c:
82:6f:89:8c:8e:4a:9a:ad:c9:4c:83:2a:4a:17:cf:0e:f7:99:
c6:93:9a:90:d7:41:dd:79:63:00:89:32:17:84:ee:94:0a:5d:
57:98:92:f2:b1:5f:06:68:5a:b8:9b:3f:06:cc:ae:41:60:ae:
91:9d:1e:82:b1:77:36:8e:38:f1:f1:78:a2:f0:e9:ed:a1:f1:
a8:52:7e:18:2c:6b:89:36:e9:f1:8d:09:71:3c:20:ff:30:27:
5e:51:5d:62:f8:37:d2:09:7c:df:46:51:6b:96:b5:de:7b:4c:
d0:fb:0c:e3:21:29:64:78:88:11:cf:7d:58:a1:9c:fa:a3:e3:
d2:38:3b:64:98:b9:f3:0e:3e:e2:84:77:d9:a5:6e:31:3e:ee:
d8:ee:c0:a3:e3:e9:9c:94:48:3f:4e:eb:55:e5:7b:08:de:d1:
e5:15:85:f8:c1:d0:91:b3:4d:8e:61:3a:bb:74:8f:80:9c:f0:
9c:ae:f6:19:a3:df:e4:d7:7b:9d:95:f7:dd:b1:6e:7a:e2:fe:
39:51:15:2e:34:95:b7:44:7b:bd:e4:cb:42:dd:bc:78:d0:d8:
73:04:f5:32:e0:81:a0:f6:fc:eb:9d:7b:ec:ac:ba:2b:d5:99:
25:64:8e:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:55:19 2025 by rpki-client