Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/225af9-f3f5-49e4-ba10-f5ea012b84fc/1/tFOob9MIG4A-3BDSO77akdeTICU.mft
File: tFOob9MIG4A-3BDSO77akdeTICU.mft (raw, json)
Hash identifier: yf8YVElH0Kw8GD5DVDLTOZ3r0f8dyQyL/9nvlyAk0Po=
Subject key identifier: 69:EA:F8:B3:C7:A7:2A:D5:36:57:48:C8:B3:91:AC:46:E5:3F:3D:86
Authority key identifier: B4:53:A8:6F:D3:08:1B:80:3E:DC:10:D2:3B:BE:DA:91:D7:93:20:25
Certificate issuer: /CN=b453a86fd3081b803edc10d23bbeda91d7932025
Certificate serial: 0197B7EA606F1AE0BC5C47FBC3040CE463DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFOob9MIG4A-3BDSO77akdeTICU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/225af9-f3f5-49e4-ba10-f5ea012b84fc/1/tFOob9MIG4A-3BDSO77akdeTICU.mft
Manifest number: 1548
Signing time: Sat 28 Jun 2025 19:01:20 +0000
Manifest this update: Sat 28 Jun 2025 19:01:20 +0000
Manifest next update: Sun 29 Jun 2025 19:01:20 +0000
Files and hashes: 1: h8oFDHIXTub3TgbD4vBpQOwCmWM.roa (hash: lwyf55gn3PMFr0CsrdeYlJw82BVP+7eUtEsfzrm/dIo=)
2: tFOob9MIG4A-3BDSO77akdeTICU.crl (hash: G3cOtjFzwa4O80bpMxcmbHPHlnpUd+2lv14hEg5GPug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/225af9-f3f5-49e4-ba10-f5ea012b84fc/1/tFOob9MIG4A-3BDSO77akdeTICU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/225af9-f3f5-49e4-ba10-f5ea012b84fc/1/tFOob9MIG4A-3BDSO77akdeTICU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tFOob9MIG4A-3BDSO77akdeTICU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:60:6f:1a:e0:bc:5c:47:fb:c3:04:0c:e4:63:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b453a86fd3081b803edc10d23bbeda91d7932025
Validity
Not Before: Jun 28 19:01:20 2025 GMT
Not After : Jun 29 19:01:20 2025 GMT
Subject: CN=69eaf8b3c7a72ad5365748c8b391ac46e53f3d86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f4:05:f9:ed:d9:d7:e6:ea:2b:77:2a:ae:3d:
3e:e7:6a:ce:d0:bb:8e:f2:ee:3b:49:0a:d8:b9:35:
9d:50:ce:8e:af:78:a6:b6:0e:8a:e2:50:bd:07:7f:
37:2a:fa:c5:ca:89:23:ca:9b:05:18:db:01:05:65:
61:0a:b3:73:7f:d4:b9:39:20:2f:b4:b8:e7:cf:1d:
cf:8f:aa:55:d8:1d:38:3e:41:3b:c7:3b:99:96:73:
90:1f:92:e7:4c:de:10:fe:6b:87:c3:3e:e6:86:dc:
b0:c6:e5:76:c0:c3:9f:62:f6:ed:16:c7:cc:b4:62:
c3:ce:25:20:72:c2:60:af:04:f6:43:7f:3a:6d:c2:
00:1a:2d:f4:52:2d:4d:3b:80:39:42:8a:94:eb:a1:
55:37:a2:90:fe:e4:1b:ea:b5:a0:a7:59:3e:e9:9b:
ac:d1:1d:19:c2:d8:b6:03:a9:4e:04:82:a7:9b:78:
51:d3:18:84:7b:d5:eb:39:7e:eb:26:cd:3e:61:0c:
af:58:44:d7:f2:cd:d3:f3:4f:89:bf:80:34:37:8c:
6b:1c:01:1d:41:0e:70:9f:d9:71:fd:bd:1e:b5:14:
81:da:81:c2:9a:8f:54:d0:e6:38:ea:43:f2:3d:df:
85:98:77:10:8e:8a:40:01:b1:96:a4:a3:d1:58:98:
97:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:EA:F8:B3:C7:A7:2A:D5:36:57:48:C8:B3:91:AC:46:E5:3F:3D:86
X509v3 Authority Key Identifier:
keyid:B4:53:A8:6F:D3:08:1B:80:3E:DC:10:D2:3B:BE:DA:91:D7:93:20:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFOob9MIG4A-3BDSO77akdeTICU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/225af9-f3f5-49e4-ba10-f5ea012b84fc/1/tFOob9MIG4A-3BDSO77akdeTICU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/225af9-f3f5-49e4-ba10-f5ea012b84fc/1/tFOob9MIG4A-3BDSO77akdeTICU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:ef:ca:cc:50:5d:1a:49:a3:cf:ca:7c:a3:66:66:1b:7c:8c:
f0:2e:ab:33:4b:86:17:c3:1b:45:11:a8:3e:c9:6c:f4:44:81:
e9:db:ae:bc:75:a3:17:d4:50:84:d8:6c:f2:3d:f9:ac:c9:72:
eb:b0:52:74:97:c6:3b:ea:9f:9a:02:1b:ca:0d:d1:f1:25:5c:
63:c1:68:28:68:e0:45:0e:14:fe:d1:22:62:1f:e6:45:f2:ed:
fd:c8:71:93:52:14:52:66:65:d4:26:56:50:2b:92:eb:42:bb:
ba:d4:48:60:da:19:e5:f0:28:f6:44:3d:15:25:04:7a:35:e5:
85:94:fb:2b:16:66:0f:8a:e8:80:5b:e1:1b:8f:b8:ed:65:8a:
eb:25:01:18:8d:d4:49:2d:47:38:40:51:8f:6d:20:14:ca:84:
be:15:7c:f7:ae:02:45:fa:a7:86:de:fb:d8:f1:88:09:20:e2:
7d:be:3a:eb:db:9b:5a:cb:ef:e2:70:03:52:96:55:de:21:5a:
5f:91:28:35:77:3c:9d:dc:f1:01:c5:16:fc:05:13:c8:22:3f:
88:b5:04:07:16:39:29:b1:6e:6b:9f:cd:29:98:57:0c:65:fb:
e2:e8:f4:9d:f8:58:b4:72:c9:98:bd:c4:cd:25:81:99:5e:57:
0b:46:f2:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:33:58 2025 by rpki-client