Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/134ccb-b0ab-446b-8172-62e27cd1e975/1/tA2EnMQ7cy2rZkH8b9Wk2zotuUc.mft
File: tA2EnMQ7cy2rZkH8b9Wk2zotuUc.mft (raw, json)
Hash identifier: jysi0ymPpoMFlVcoBqhcnnDNpFImpL2/kLEM5kj3Wjk=
Subject key identifier: F7:31:C8:A3:8B:1E:93:C2:8B:66:20:92:B5:1F:F8:39:62:87:D2:53
Authority key identifier: B4:0D:84:9C:C4:3B:73:2D:AB:66:41:FC:6F:D5:A4:DB:3A:2D:B9:47
Certificate issuer: /CN=b40d849cc43b732dab6641fc6fd5a4db3a2db947
Certificate serial: 0197CBDF180BB6EBC3B3C94DE8090925B750
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tA2EnMQ7cy2rZkH8b9Wk2zotuUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/134ccb-b0ab-446b-8172-62e27cd1e975/1/tA2EnMQ7cy2rZkH8b9Wk2zotuUc.mft
Manifest number: 0958
Signing time: Wed 02 Jul 2025 16:01:24 +0000
Manifest this update: Wed 02 Jul 2025 16:01:24 +0000
Manifest next update: Thu 03 Jul 2025 16:01:24 +0000
Files and hashes: 1: tA2EnMQ7cy2rZkH8b9Wk2zotuUc.crl (hash: JWPs0imS/cJgllLd6/Vr1ztwcDGWUHhvBMwEGMUFnOY=)
2: x7aEXzfMRzlzp6VorB64R028Jvk.roa (hash: 3aOt7CTs1p/zJJSbWQR2//U36Y0+Zh2Kxl00BzPCEXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/134ccb-b0ab-446b-8172-62e27cd1e975/1/tA2EnMQ7cy2rZkH8b9Wk2zotuUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/134ccb-b0ab-446b-8172-62e27cd1e975/1/tA2EnMQ7cy2rZkH8b9Wk2zotuUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/tA2EnMQ7cy2rZkH8b9Wk2zotuUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 16:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cb:df:18:0b:b6:eb:c3:b3:c9:4d:e8:09:09:25:b7:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b40d849cc43b732dab6641fc6fd5a4db3a2db947
Validity
Not Before: Jul 2 16:01:24 2025 GMT
Not After : Jul 3 16:01:24 2025 GMT
Subject: CN=f731c8a38b1e93c28b662092b51ff8396287d253
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:6b:82:46:38:85:9e:07:60:d3:81:b2:3e:7a:
70:7a:c2:c0:74:64:4a:f3:af:eb:57:20:b8:12:c2:
8b:27:f0:8e:b5:bb:58:27:20:e1:86:68:8e:38:8e:
bc:27:ca:04:e8:91:fa:93:47:4c:6e:bb:03:b0:ad:
5b:fc:65:94:d0:c4:9b:7d:67:a2:5d:4c:0e:97:be:
fe:36:14:95:fb:1a:60:67:5d:6b:f3:6e:48:e2:a1:
06:d7:42:90:a8:46:92:95:8b:d3:97:cb:fa:75:bc:
4a:58:93:52:83:84:2e:52:fe:eb:d6:74:62:b5:c1:
f3:44:e6:52:95:57:ca:f2:80:c3:80:a8:49:4c:21:
ba:04:35:8e:d2:c4:47:e4:5a:30:f5:b7:8b:b9:63:
90:aa:82:d8:cb:29:6a:4b:4f:75:5c:3d:2b:d0:2a:
c1:81:bf:6d:19:5c:c0:87:8f:01:91:ef:ef:3c:2c:
db:40:c0:e9:e2:36:74:2d:ee:6e:21:95:20:6d:b7:
7c:87:e1:14:80:18:c5:50:f7:f3:76:b2:00:5f:68:
cc:53:88:16:a6:65:cd:9f:94:d0:d7:df:41:ee:71:
f2:2a:fd:5d:c2:ed:7e:f8:e5:1e:a0:18:a6:2f:7e:
f3:28:eb:40:4b:4b:34:7a:16:5f:e2:e7:11:b1:ba:
56:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:31:C8:A3:8B:1E:93:C2:8B:66:20:92:B5:1F:F8:39:62:87:D2:53
X509v3 Authority Key Identifier:
keyid:B4:0D:84:9C:C4:3B:73:2D:AB:66:41:FC:6F:D5:A4:DB:3A:2D:B9:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tA2EnMQ7cy2rZkH8b9Wk2zotuUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/134ccb-b0ab-446b-8172-62e27cd1e975/1/tA2EnMQ7cy2rZkH8b9Wk2zotuUc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/134ccb-b0ab-446b-8172-62e27cd1e975/1/tA2EnMQ7cy2rZkH8b9Wk2zotuUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:1e:f4:7b:b7:73:ef:d5:7c:88:4f:40:09:95:d9:5e:1a:f3:
c7:6e:e9:e3:fa:18:56:81:5f:c1:d4:70:a9:01:62:6b:af:4a:
80:3c:60:4f:6c:f6:c2:ed:ee:a8:41:3e:0e:18:dd:83:e6:8b:
70:a8:ca:64:62:c3:00:03:2f:90:c4:40:84:dc:0e:eb:77:30:
fb:3d:15:2f:60:2f:06:03:00:dc:5d:e4:11:98:04:d6:ae:6a:
a3:c1:12:2f:8b:52:41:4a:2b:12:4f:4c:26:57:fe:99:2b:ff:
0d:8c:ae:61:73:d5:44:3b:8d:d6:f4:3d:e3:b5:47:a1:ad:4d:
47:0c:ba:e8:33:cf:3b:af:98:4d:ed:b8:2b:f3:1a:17:2f:9e:
d7:6e:1d:61:fe:26:18:fb:d0:ce:c8:b0:f8:db:8a:7e:ae:5e:
30:ec:27:aa:14:d0:a7:9e:e6:9c:1d:96:e8:74:8d:98:83:0d:
b2:32:6b:f6:02:8f:6b:10:0a:a5:18:18:43:b5:c5:ce:ce:7e:
77:ec:42:94:c4:01:70:f1:b5:50:c3:c5:84:3f:eb:b3:c9:01:
df:1e:2e:a2:93:2e:95:9d:1c:a6:6d:ab:dc:b2:2f:5a:0f:86:
b3:a2:6d:6f:95:3b:dd:5e:14:74:5b:8f:c4:7d:cc:06:6a:8d:
7a:13:d8:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 23:15:15 2025 by rpki-client