Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/3a7e49-9d27-4e4e-aa36-6f6ccb6e2cda/1/Td0Pnc2IlJuPOjdxBjVioFdnkpA.mft
File: Td0Pnc2IlJuPOjdxBjVioFdnkpA.mft (raw, json)
Hash identifier: gyB7Dk62CgSxPEEBANIhgowls46k7Ze39CUNpD3Cg9M=
Subject key identifier: 50:AA:D2:86:79:0F:AC:CC:C4:02:76:72:79:A0:A0:9A:FE:27:BF:D4
Authority key identifier: 4D:DD:0F:9D:CD:88:94:9B:8F:3A:37:71:06:35:62:A0:57:67:92:90
Certificate issuer: /CN=4ddd0f9dcd88949b8f3a3771063562a057679290
Certificate serial: 0197B74522F52A4EAD40FDC552B60F0780DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Td0Pnc2IlJuPOjdxBjVioFdnkpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/3a7e49-9d27-4e4e-aa36-6f6ccb6e2cda/1/Td0Pnc2IlJuPOjdxBjVioFdnkpA.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 16:00:50 +0000
Manifest this update: Sat 28 Jun 2025 16:00:50 +0000
Manifest next update: Sun 29 Jun 2025 16:00:50 +0000
Files and hashes: 1: Td0Pnc2IlJuPOjdxBjVioFdnkpA.crl (hash: 9BOkuIUJxaKteq4L+q7wqRv2wSfKk9Jqz3fd5+Y3N/4=)
2: j2scll5jpWJtbLkshsiLm7lQWV4.roa (hash: oBr/N8q4deuJLs5MxsiKxc5IMYfXJKPf/aAvK/FNRFg=)
3: kZMSHFwhjt5ByeIL4QTKEiDJjZQ.roa (hash: WpstqOcmslj7HDAeoS/gg7u0eBQmjbTvTylTqyOzeKc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/3a7e49-9d27-4e4e-aa36-6f6ccb6e2cda/1/Td0Pnc2IlJuPOjdxBjVioFdnkpA.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/3a7e49-9d27-4e4e-aa36-6f6ccb6e2cda/1/Td0Pnc2IlJuPOjdxBjVioFdnkpA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Td0Pnc2IlJuPOjdxBjVioFdnkpA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:22:f5:2a:4e:ad:40:fd:c5:52:b6:0f:07:80:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ddd0f9dcd88949b8f3a3771063562a057679290
Validity
Not Before: Jun 28 16:00:50 2025 GMT
Not After : Jun 29 16:00:50 2025 GMT
Subject: CN=50aad286790facccc402767279a0a09afe27bfd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3d:de:be:fd:03:c3:c0:bc:29:10:e7:20:8b:
61:11:6f:78:cf:26:02:92:eb:0c:5c:90:62:11:7b:
e9:41:bf:ab:37:8f:00:b8:68:88:0a:63:d9:5d:ca:
b1:cb:a6:9d:b0:36:69:34:81:de:e0:66:9f:81:b0:
87:68:53:d6:8d:09:91:17:42:9e:cb:db:5a:9f:96:
ec:5f:0f:fc:56:3e:0f:c0:9d:c3:0c:59:ac:5a:49:
cf:be:cd:3a:b9:a3:11:4d:9a:88:1b:04:78:7e:44:
cf:16:0f:a3:1d:34:f5:6b:d3:58:ef:57:40:d3:be:
dd:42:90:bb:33:16:a0:91:05:e6:ec:01:31:86:47:
89:c7:17:27:3a:8a:34:7f:b0:f3:0a:85:af:f0:d6:
3f:4d:6d:94:50:b5:e2:59:54:46:87:40:d1:3b:aa:
33:66:8c:2d:b3:87:8c:64:4e:2f:51:32:c3:25:71:
d2:cb:11:7b:c7:aa:e7:4f:95:ae:95:f9:1e:45:0f:
ca:22:c6:c4:4d:f4:18:8e:06:e3:22:78:5d:d7:a7:
c6:81:d9:5b:3b:d5:39:24:96:02:4b:9a:f0:5f:aa:
45:a9:28:d7:21:75:8d:d5:54:e6:f4:ea:1a:b8:58:
dc:a1:df:d7:d5:b0:bf:73:96:0a:5b:e2:ee:ea:46:
77:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:AA:D2:86:79:0F:AC:CC:C4:02:76:72:79:A0:A0:9A:FE:27:BF:D4
X509v3 Authority Key Identifier:
keyid:4D:DD:0F:9D:CD:88:94:9B:8F:3A:37:71:06:35:62:A0:57:67:92:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Td0Pnc2IlJuPOjdxBjVioFdnkpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/3a7e49-9d27-4e4e-aa36-6f6ccb6e2cda/1/Td0Pnc2IlJuPOjdxBjVioFdnkpA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/3a7e49-9d27-4e4e-aa36-6f6ccb6e2cda/1/Td0Pnc2IlJuPOjdxBjVioFdnkpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:09:44:f8:38:5c:ef:de:a2:d0:69:49:9b:a6:e8:ff:5e:cf:
ce:24:84:27:a6:90:ab:b1:be:57:f7:93:f6:f2:ff:79:b6:90:
5d:7b:e7:18:ee:10:e3:7c:2b:47:1e:ff:9e:21:e8:c2:34:b8:
10:76:b1:3e:0e:5e:61:a6:50:6c:9c:6d:fc:ff:a3:a7:9d:4a:
3c:41:45:f7:7d:5e:83:49:b1:fe:ed:06:32:16:57:2a:e6:2b:
b5:c6:26:7a:67:8d:55:e5:53:9e:a9:ef:ba:ed:b0:ca:e1:1a:
a3:5c:ee:28:f4:8f:42:4b:8a:6b:b7:af:09:4d:87:eb:8f:82:
ce:dd:03:6e:a2:80:f5:eb:8e:f2:26:06:16:13:be:59:32:29:
80:e1:d0:55:0b:c6:9c:11:14:85:bb:55:a4:c1:0f:24:14:84:
c9:b2:68:4d:fd:ba:d8:53:fd:c2:70:66:78:98:dc:0e:7d:32:
d5:d2:ef:c5:c0:77:14:e5:87:0a:db:ff:3e:c6:61:aa:61:91:
30:fe:c5:bd:83:e5:16:10:e4:d1:04:14:30:0c:d3:9f:10:85:
3f:d2:71:e3:7f:d4:c0:e6:1d:c8:32:d6:57:61:67:25:21:2e:
68:13:e8:20:7b:da:57:8a:40:f7:27:e2:59:e5:17:3a:1f:60:
46:39:fa:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:47:40 2025 by rpki-client