Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/4afeab-02b9-4ebd-bfa2-8e80b496a03e/1/TgTgpximE5qcZfDUiGu4JxTaZoI.mft
File: TgTgpximE5qcZfDUiGu4JxTaZoI.mft (raw, json)
Hash identifier: MdSEtJNdsspmDSRhx4cVvxorhNVhcqqljaI5NCxf6sw=
Subject key identifier: F8:62:DB:44:5D:06:D9:00:E4:96:D3:19:BB:E5:CA:21:8F:B0:8C:35
Authority key identifier: 4E:04:E0:A7:18:A6:13:9A:9C:65:F0:D4:88:6B:B8:27:14:DA:66:82
Certificate issuer: /CN=4e04e0a718a6139a9c65f0d4886bb82714da6682
Certificate serial: 0197CBDF5932568BE929825B1A26DC7AEF96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TgTgpximE5qcZfDUiGu4JxTaZoI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/4afeab-02b9-4ebd-bfa2-8e80b496a03e/1/TgTgpximE5qcZfDUiGu4JxTaZoI.mft
Manifest number: 15C0
Signing time: Wed 02 Jul 2025 16:01:41 +0000
Manifest this update: Wed 02 Jul 2025 16:01:41 +0000
Manifest next update: Thu 03 Jul 2025 16:01:41 +0000
Files and hashes: 1: TgTgpximE5qcZfDUiGu4JxTaZoI.crl (hash: PQn1j+LSqHofcWrZNJvdnTNwdXZIfJHlcFpYB9hyzy0=)
2: _DVbXJIlrc4WueVJodx5_dUQQGU.roa (hash: qLnLYdx/R1C59idEfb9lAoJsSeK5qnRHJhL7xW0LEkE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/4afeab-02b9-4ebd-bfa2-8e80b496a03e/1/TgTgpximE5qcZfDUiGu4JxTaZoI.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/4afeab-02b9-4ebd-bfa2-8e80b496a03e/1/TgTgpximE5qcZfDUiGu4JxTaZoI.mft
rsync://rpki.ripe.net/repository/DEFAULT/TgTgpximE5qcZfDUiGu4JxTaZoI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cb:df:59:32:56:8b:e9:29:82:5b:1a:26:dc:7a:ef:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e04e0a718a6139a9c65f0d4886bb82714da6682
Validity
Not Before: Jul 2 16:01:41 2025 GMT
Not After : Jul 3 16:01:41 2025 GMT
Subject: CN=f862db445d06d900e496d319bbe5ca218fb08c35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:d8:bf:35:47:d4:f1:10:fe:46:e8:66:57:83:
d4:9c:29:b1:aa:4b:db:a2:05:04:01:69:d8:7d:35:
e5:ec:ed:b3:5f:4f:49:45:bf:58:31:02:7b:95:8d:
a1:36:44:d7:23:1c:17:39:ef:3e:22:6c:30:4d:77:
57:b8:62:af:60:1f:97:20:5f:6b:ad:c2:c2:e7:04:
14:94:7f:fe:11:6c:63:bd:a8:3e:54:c9:64:ff:e0:
0e:45:6a:94:3e:35:a0:b6:f3:ff:d3:88:91:3a:1a:
a7:95:1a:3b:0a:7f:12:49:70:bc:41:89:8f:a1:66:
36:5d:01:32:b5:45:30:f6:56:fa:1f:91:47:a0:85:
8b:4e:8d:12:23:c6:5c:1d:35:67:fc:4d:89:d3:a9:
df:3f:cf:5b:19:84:6d:66:b7:69:c7:11:09:6c:00:
e1:89:e4:f0:47:c6:2a:42:f3:f1:e7:e8:b0:8d:1b:
c6:6f:7b:9d:41:3e:4a:f9:25:31:86:eb:9a:4b:76:
44:04:50:14:c4:27:82:26:b1:e8:35:90:f9:f9:6f:
c1:8b:21:ba:30:ce:4e:8b:8b:c9:83:bb:47:c1:f3:
0c:85:4c:fa:38:7d:d1:11:5e:17:b5:2b:3f:cd:41:
c6:d5:b4:fc:e8:95:64:90:2d:a5:47:e6:e7:24:35:
3d:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:62:DB:44:5D:06:D9:00:E4:96:D3:19:BB:E5:CA:21:8F:B0:8C:35
X509v3 Authority Key Identifier:
keyid:4E:04:E0:A7:18:A6:13:9A:9C:65:F0:D4:88:6B:B8:27:14:DA:66:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TgTgpximE5qcZfDUiGu4JxTaZoI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4afeab-02b9-4ebd-bfa2-8e80b496a03e/1/TgTgpximE5qcZfDUiGu4JxTaZoI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4afeab-02b9-4ebd-bfa2-8e80b496a03e/1/TgTgpximE5qcZfDUiGu4JxTaZoI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:54:8e:9f:3a:0a:27:8a:39:29:db:2f:e0:c7:98:38:68:07:
4d:e7:70:ca:7c:19:40:75:a1:36:c4:4c:66:3c:7f:26:34:f8:
db:11:d2:a2:ae:51:ee:5b:29:16:fd:dd:18:39:b4:1c:4b:62:
56:0e:38:21:ee:fa:a7:66:28:f4:22:4e:3c:33:b2:bc:a4:ee:
ae:27:5f:db:31:a3:52:78:cd:51:4d:83:ca:ee:47:97:d7:a7:
35:5b:82:0c:a4:48:e5:57:6e:12:b4:7b:f2:5b:1e:d9:13:4c:
4f:7e:93:b6:9b:11:ee:3b:00:f8:58:2e:32:e7:06:fd:ee:06:
91:67:b4:50:99:a9:ce:d4:de:8e:fd:3d:b5:4e:ee:92:a5:ce:
a4:73:19:b0:de:17:55:94:62:e5:b9:59:ad:17:59:1b:0a:31:
94:29:eb:c3:78:07:43:35:99:c1:10:0f:9e:f8:07:03:dd:74:
e0:8b:a3:72:df:2a:4f:7f:78:82:62:07:52:49:66:34:36:ae:
a0:8e:0a:94:be:d3:91:6f:ef:31:63:60:26:a2:0a:73:e0:c5:
f2:bc:f3:7f:24:22:e6:78:74:f4:0c:e9:1f:be:44:9e:82:5a:
a5:b4:88:51:9a:2a:bf:e3:38:59:23:da:67:1e:28:af:70:3f:
fc:a8:b7:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 19:55:06 2025 by rpki-client