Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/09da87-a2b2-429b-be96-cd009b300a6c/1/TZj-UCrBbpV8wz68LsG-g7vtfMQ.mft
File: TZj-UCrBbpV8wz68LsG-g7vtfMQ.mft (raw, json)
Hash identifier: ABJZaCrzJhbj5rgV/65lKPfYe7uZbaTbM/fVwoK5EA8=
Subject key identifier: 93:81:EC:06:98:17:A5:07:FC:07:44:CD:03:77:5D:9A:40:B1:74:1B
Authority key identifier: 4D:98:FE:50:2A:C1:6E:95:7C:C3:3E:BC:2E:C1:BE:83:BB:ED:7C:C4
Certificate issuer: /CN=4d98fe502ac16e957cc33ebc2ec1be83bbed7cc4
Certificate serial: 0197B7453CE874182B86A606F967E2377FF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TZj-UCrBbpV8wz68LsG-g7vtfMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/09da87-a2b2-429b-be96-cd009b300a6c/1/TZj-UCrBbpV8wz68LsG-g7vtfMQ.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 16:00:57 +0000
Manifest this update: Sat 28 Jun 2025 16:00:57 +0000
Manifest next update: Sun 29 Jun 2025 16:00:57 +0000
Files and hashes: 1: TZj-UCrBbpV8wz68LsG-g7vtfMQ.crl (hash: HK4kZf74qCpwGiroJMzNJfRa/yqNrhh61MGLj9SoXSc=)
2: duQK_L6CU_XoLOUwAAqGbBQ_c-w.roa (hash: c1e0IDxT38pGihwSE7PrZG6hwT/3gvgX+OwTOhT9gWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/09da87-a2b2-429b-be96-cd009b300a6c/1/TZj-UCrBbpV8wz68LsG-g7vtfMQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/09da87-a2b2-429b-be96-cd009b300a6c/1/TZj-UCrBbpV8wz68LsG-g7vtfMQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/TZj-UCrBbpV8wz68LsG-g7vtfMQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:3c:e8:74:18:2b:86:a6:06:f9:67:e2:37:7f:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d98fe502ac16e957cc33ebc2ec1be83bbed7cc4
Validity
Not Before: Jun 28 16:00:57 2025 GMT
Not After : Jun 29 16:00:57 2025 GMT
Subject: CN=9381ec069817a507fc0744cd03775d9a40b1741b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2f:5f:5c:fc:93:e9:f1:8c:26:eb:62:33:f3:
b1:39:06:1f:ac:04:4e:f4:b8:49:ef:9d:54:2b:5d:
af:41:66:98:ec:db:ad:fe:cf:8d:67:39:90:e7:d9:
7b:9f:7d:3d:a5:dd:ce:e1:41:22:a2:4f:6d:17:83:
f6:d9:7b:a8:d0:b6:e8:e9:78:d3:29:48:0b:47:ec:
10:d9:40:24:aa:6e:e9:6a:6a:50:83:e4:9a:49:c8:
65:68:62:df:2e:1a:95:41:02:fa:c2:6f:e7:a0:0b:
66:56:4c:33:97:d5:42:8a:a8:bc:84:d5:9c:be:4f:
e3:d9:7c:aa:87:45:26:a2:23:ec:56:f7:ea:34:85:
13:0e:c1:83:0f:79:4d:3b:a1:f5:2f:bd:af:a8:b4:
1f:38:08:7e:af:9b:d2:c5:9c:7a:fa:08:f6:56:c4:
77:63:78:39:0b:3c:15:4f:fa:39:4f:cf:f8:7f:ae:
31:1d:d4:f6:4d:f8:df:16:cc:b4:72:88:f1:fd:3e:
01:b6:01:51:17:d1:19:55:b4:6d:78:61:2e:d9:d2:
8d:d5:27:ce:3e:cc:8b:b5:d8:9e:40:e4:23:2b:a1:
97:35:61:11:2f:68:15:ce:fc:a3:36:86:47:73:09:
fa:87:db:cb:d8:86:a4:7c:10:4b:41:3f:67:e3:63:
c7:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:81:EC:06:98:17:A5:07:FC:07:44:CD:03:77:5D:9A:40:B1:74:1B
X509v3 Authority Key Identifier:
keyid:4D:98:FE:50:2A:C1:6E:95:7C:C3:3E:BC:2E:C1:BE:83:BB:ED:7C:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TZj-UCrBbpV8wz68LsG-g7vtfMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/09da87-a2b2-429b-be96-cd009b300a6c/1/TZj-UCrBbpV8wz68LsG-g7vtfMQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/09da87-a2b2-429b-be96-cd009b300a6c/1/TZj-UCrBbpV8wz68LsG-g7vtfMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:b4:31:21:21:f9:ad:28:8e:4f:c9:98:4f:91:49:e7:a9:2c:
b4:2e:a8:b8:5f:66:3a:07:af:51:71:f1:c5:bf:a9:12:59:79:
73:0d:e1:54:bd:99:54:7f:c1:14:0f:76:80:75:57:9a:dd:59:
ce:22:80:64:c9:71:eb:e0:7b:52:b0:34:ca:f1:1c:55:6c:3a:
96:9f:f6:e2:68:7d:a0:03:b1:3e:d7:d6:8e:12:d5:70:d0:fa:
2d:09:43:42:b4:dc:8f:43:75:39:6f:05:7c:fd:96:cd:f8:65:
04:ca:7f:27:67:57:04:9d:68:ae:aa:3d:6c:42:68:94:f0:4f:
0f:7d:3a:2f:76:2a:63:26:9d:cd:a6:30:61:5b:b1:73:b3:88:
fa:80:00:bc:27:4a:24:c4:f7:cf:e9:da:77:33:d3:26:0b:30:
1a:99:c4:9f:d1:20:82:0e:c1:46:14:88:63:a5:12:e5:5d:10:
07:12:c1:fc:a7:cf:62:83:74:54:92:9c:37:90:ae:76:c9:64:
23:e3:45:7d:6c:d6:35:5c:d3:54:ab:b9:9f:96:4f:67:86:ce:
a0:02:0f:f8:5b:29:02:86:00:a9:da:b9:28:e4:c7:a2:fc:26:
98:09:ba:d0:e4:a0:c0:f9:cb:ba:a1:de:fe:9c:af:d8:9c:f2:
0b:fa:57:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:57:48 2025 by rpki-client