Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/cb8265-c632-4813-b858-def386743f32/1/Tni20AYU9VZdnYr4JHzHLqm4gz0.mft
File: Tni20AYU9VZdnYr4JHzHLqm4gz0.mft (raw, json)
Hash identifier: QEwNH3mEm/gdk8gesznEKCxCWHomtSNugWCwBwSyDFg=
Subject key identifier: 0A:D7:97:50:DD:AB:CB:C4:D9:DF:4B:57:70:1A:76:D4:02:0B:AE:A4
Authority key identifier: 4E:78:B6:D0:06:14:F5:56:5D:9D:8A:F8:24:7C:C7:2E:A9:B8:83:3D
Certificate issuer: /CN=4e78b6d00614f5565d9d8af8247cc72ea9b8833d
Certificate serial: 0197B6D75675835F9ED0E12FAE8962F6BBD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tni20AYU9VZdnYr4JHzHLqm4gz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/cb8265-c632-4813-b858-def386743f32/1/Tni20AYU9VZdnYr4JHzHLqm4gz0.mft
Manifest number: 1322
Signing time: Sat 28 Jun 2025 14:00:55 +0000
Manifest this update: Sat 28 Jun 2025 14:00:55 +0000
Manifest next update: Sun 29 Jun 2025 14:00:55 +0000
Files and hashes: 1: TejsNzlv7GKxiII-bvE87-We43E.roa (hash: mLnGXICbVXamBVxV9Y72sSIwMnc1cAfg9GvoIhGlM1Q=)
2: Tni20AYU9VZdnYr4JHzHLqm4gz0.crl (hash: ZcLi5l5qwvXsAzv0hMUIbfkL+o6j4JTTXGW7TifckLs=)
3: fXu6dyybxQWnLI_jekEGclRV-kI.roa (hash: ybmfpunL7X6Tqn27iyMbozR499AYYSkkrm5Yi5bndZY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/cb8265-c632-4813-b858-def386743f32/1/Tni20AYU9VZdnYr4JHzHLqm4gz0.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/cb8265-c632-4813-b858-def386743f32/1/Tni20AYU9VZdnYr4JHzHLqm4gz0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tni20AYU9VZdnYr4JHzHLqm4gz0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:56:75:83:5f:9e:d0:e1:2f:ae:89:62:f6:bb:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e78b6d00614f5565d9d8af8247cc72ea9b8833d
Validity
Not Before: Jun 28 14:00:55 2025 GMT
Not After : Jun 29 14:00:55 2025 GMT
Subject: CN=0ad79750ddabcbc4d9df4b57701a76d4020baea4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:57:4e:02:2d:cb:61:df:cf:5f:38:12:d7:b6:
ed:8f:c5:67:3d:03:60:97:6c:1b:63:25:de:58:0c:
42:43:5e:16:74:ef:3f:5d:f1:d8:39:5b:97:46:36:
11:59:ce:60:55:b4:63:21:96:f8:bb:68:32:69:ad:
57:67:af:f6:d1:04:13:1b:95:5f:7b:7f:38:ef:6e:
92:b4:89:75:3a:9a:58:3b:66:63:a4:a0:c1:4a:0e:
50:1b:7d:ad:ef:68:cf:be:f0:50:a6:c3:9a:62:1e:
3c:b0:f5:4a:e6:66:db:38:3b:80:1c:f6:ee:da:8b:
91:fd:1e:36:92:e4:fa:a6:63:12:49:d2:c2:56:51:
8f:bd:42:ca:2b:41:89:7b:c1:58:f0:3c:00:4e:35:
a4:eb:db:7f:3a:08:f3:3a:03:02:74:ca:b4:38:6d:
cb:bf:51:48:c8:cd:97:95:6c:04:9d:8f:5f:a3:21:
13:e5:cf:04:60:36:93:28:86:b0:06:61:e9:a0:79:
c3:6d:c5:5c:fa:3c:22:00:c4:67:b1:98:00:88:2f:
6f:2e:8c:60:4b:f0:1a:a5:ed:41:9c:7a:01:0d:1b:
76:28:a4:96:7e:f3:21:7c:bc:53:5c:b7:a0:6a:83:
fd:36:7e:cd:a7:98:8b:e3:46:5f:9e:fb:9a:bf:37:
ac:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:D7:97:50:DD:AB:CB:C4:D9:DF:4B:57:70:1A:76:D4:02:0B:AE:A4
X509v3 Authority Key Identifier:
keyid:4E:78:B6:D0:06:14:F5:56:5D:9D:8A:F8:24:7C:C7:2E:A9:B8:83:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tni20AYU9VZdnYr4JHzHLqm4gz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/cb8265-c632-4813-b858-def386743f32/1/Tni20AYU9VZdnYr4JHzHLqm4gz0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/cb8265-c632-4813-b858-def386743f32/1/Tni20AYU9VZdnYr4JHzHLqm4gz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:dd:28:a0:09:6c:68:c8:87:7f:ca:86:fa:a4:ae:41:8a:89:
ea:52:2c:ba:b2:a0:41:51:31:b9:29:b7:e6:aa:66:d5:d8:73:
ef:83:63:a9:16:f2:50:d7:63:53:a9:f6:d4:76:71:df:e0:72:
86:07:e7:16:2c:46:98:b3:89:e2:70:97:34:c5:34:95:b3:94:
60:a9:6b:53:d5:8a:9e:34:e3:9a:e3:eb:a7:92:5a:3e:6b:3f:
fa:b4:5a:38:39:d8:bf:3c:de:29:78:9c:ca:0f:4b:39:43:33:
9f:36:00:06:9b:d8:34:a5:c3:f5:72:24:76:a5:ab:fd:84:1d:
13:b2:80:81:d1:24:ae:11:e0:db:6f:8f:4d:27:d4:cc:ea:ea:
4d:b5:88:60:46:e5:b0:73:d3:11:6c:dc:2d:cb:ef:c1:76:e7:
fc:4b:d5:dd:1d:03:36:9b:7a:f1:35:a1:e5:c1:34:6d:d1:ae:
09:f1:ca:6f:ef:cb:d5:92:c7:25:4b:ff:71:df:2d:91:84:99:
f0:98:70:85:14:47:e1:5c:64:4b:a9:26:3d:07:3e:4d:f6:83:
60:52:1f:2f:e3:b9:71:f0:5b:bc:74:85:21:bd:bf:05:2f:2e:
ee:72:e8:c6:bd:4f:44:a4:ac:bd:29:8b:c7:fd:8c:cb:4d:1c:
e5:46:b9:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:16:29 2025 by rpki-client