Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/bd173d-6cf5-4250-aa26-4a6f717c7564/1/tpJFTBZpZIbPBx7Rjnl240BJCfs.mft
File: tpJFTBZpZIbPBx7Rjnl240BJCfs.mft (raw, json)
Hash identifier: U7tvYjdEgXtMtJAnMtq7EoaD3f3cJ6pLwkFueZtpBRA=
Subject key identifier: 04:05:56:34:C7:A6:3E:27:1B:AE:78:5F:37:E1:6A:FE:BB:87:E9:8C
Authority key identifier: B6:92:45:4C:16:69:64:86:CF:07:1E:D1:8E:79:76:E3:40:49:09:FB
Certificate issuer: /CN=b692454c16696486cf071ed18e7976e3404909fb
Certificate serial: 0197B7EA65C8E264FD636EB274D196F0EAC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tpJFTBZpZIbPBx7Rjnl240BJCfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/bd173d-6cf5-4250-aa26-4a6f717c7564/1/tpJFTBZpZIbPBx7Rjnl240BJCfs.mft
Manifest number: 0A04
Signing time: Sat 28 Jun 2025 19:01:21 +0000
Manifest this update: Sat 28 Jun 2025 19:01:21 +0000
Manifest next update: Sun 29 Jun 2025 19:01:21 +0000
Files and hashes: 1: 5czF8Od9k1lGzWbwlN6JD9EQv3o.roa (hash: xQiXSp/PKEr54Bt774G49z92F24A1eFshYT3vR6Fw2c=)
2: tpJFTBZpZIbPBx7Rjnl240BJCfs.crl (hash: rIK3ysHgpq2qlYAwqsR3nX+F/MJFmGB5/ImkgKXV82Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/bd173d-6cf5-4250-aa26-4a6f717c7564/1/tpJFTBZpZIbPBx7Rjnl240BJCfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/bd173d-6cf5-4250-aa26-4a6f717c7564/1/tpJFTBZpZIbPBx7Rjnl240BJCfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/tpJFTBZpZIbPBx7Rjnl240BJCfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:65:c8:e2:64:fd:63:6e:b2:74:d1:96:f0:ea:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b692454c16696486cf071ed18e7976e3404909fb
Validity
Not Before: Jun 28 19:01:21 2025 GMT
Not After : Jun 29 19:01:21 2025 GMT
Subject: CN=04055634c7a63e271bae785f37e16afebb87e98c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:4a:dd:3c:7d:14:f7:e4:8e:f7:a7:89:de:e9:
0b:e7:80:c1:5c:f5:de:86:8a:39:7b:47:5a:48:46:
07:6c:f5:93:12:61:6c:e8:38:ed:38:27:07:bd:80:
d6:79:9f:79:4a:86:12:b6:54:fe:1b:b5:48:ba:af:
89:82:60:a9:da:16:be:4b:6c:c1:17:ac:34:de:fc:
76:ea:6e:5b:68:ef:3b:3c:14:dc:8e:14:9a:bb:20:
e3:52:35:20:7d:03:39:22:45:ae:a6:25:b4:3d:8f:
50:ab:64:97:30:a9:c5:8e:40:4e:5a:a1:d3:45:c6:
51:23:08:ea:22:41:b2:40:7d:20:d9:fe:6a:c5:74:
d8:8f:66:50:a0:24:81:36:56:97:6b:d3:0a:e3:df:
37:4e:87:bf:2d:42:a7:5f:f5:9b:87:e0:4e:85:a3:
23:e1:bd:8e:8d:61:13:1e:2d:9d:48:ba:b0:6a:b3:
60:64:8a:e1:b3:3b:a3:0e:06:56:8e:b0:34:13:b2:
65:eb:90:fc:5a:83:20:de:80:a9:0b:c1:60:c1:f0:
56:7e:35:5b:00:5c:ae:2d:b9:c1:37:1d:3d:3c:19:
bb:b4:ed:24:00:57:e3:30:80:95:d4:c7:9d:58:c7:
c7:34:dd:3b:9a:75:16:49:07:1e:d8:c8:5a:b5:fb:
4b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:05:56:34:C7:A6:3E:27:1B:AE:78:5F:37:E1:6A:FE:BB:87:E9:8C
X509v3 Authority Key Identifier:
keyid:B6:92:45:4C:16:69:64:86:CF:07:1E:D1:8E:79:76:E3:40:49:09:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tpJFTBZpZIbPBx7Rjnl240BJCfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/bd173d-6cf5-4250-aa26-4a6f717c7564/1/tpJFTBZpZIbPBx7Rjnl240BJCfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/bd173d-6cf5-4250-aa26-4a6f717c7564/1/tpJFTBZpZIbPBx7Rjnl240BJCfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:2e:62:f6:e4:99:37:b6:fd:dd:47:4c:5c:a7:43:96:04:16:
0e:24:91:89:46:56:d4:04:77:57:30:a0:78:71:32:bb:72:52:
55:a8:16:95:ef:b5:e4:50:48:ce:af:87:53:7a:93:e7:91:b7:
44:fc:16:97:a8:6d:3d:77:6f:86:e9:9c:03:dc:62:66:da:87:
c2:a4:7b:97:45:83:8b:2b:76:72:d9:b0:7d:b7:c7:cf:be:12:
bb:09:f2:ff:5e:8c:f3:ba:49:09:81:3d:a1:27:23:59:49:46:
63:b7:6f:e7:a8:ef:45:a5:f7:85:2c:45:6a:60:ae:ac:57:62:
31:7a:05:59:64:cb:e5:73:05:23:14:4f:99:be:3a:3a:f8:41:
b3:e2:c9:ff:63:63:ba:8a:0f:ea:11:fc:3c:5c:63:10:6f:8c:
71:fe:6a:f9:1d:31:11:44:18:bc:e2:6d:ed:a2:65:eb:bd:3b:
28:3b:81:08:62:15:cd:2f:4c:58:7a:85:f5:71:f7:16:36:44:
f0:02:af:47:08:b9:e2:8e:29:97:79:73:a7:35:d1:d6:98:b9:
8c:a4:5b:8a:a7:d9:d5:3a:45:e3:89:74:2d:cb:08:75:e0:29:
9c:66:d5:4a:41:d9:a7:d5:3e:ad:c1:1b:14:a5:59:b5:f6:22:
bd:38:ad:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:49:28 2025 by rpki-client