Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/b5fb58-928c-438f-bcef-858f8aca323f/1/TJ--R1YCj6QYejmVlfrGXDwcQ8Y.mft
File: TJ--R1YCj6QYejmVlfrGXDwcQ8Y.mft (raw, json)
Hash identifier: +LbEZX7PoKG5ZiSsipYDKNQtREhMxaHe+SV7PRUSE2s=
Subject key identifier: 23:F3:94:B7:FF:76:3F:52:8A:5A:E4:C9:C8:5A:DD:67:FD:DD:2A:AF
Authority key identifier: 4C:9F:BE:47:56:02:8F:A4:18:7A:39:95:95:FA:C6:5C:3C:1C:43:C6
Certificate issuer: /CN=4c9fbe4756028fa4187a399595fac65c3c1c43c6
Certificate serial: 0197BB596CE8013BF4CF3477BC64BF020F60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TJ--R1YCj6QYejmVlfrGXDwcQ8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/b5fb58-928c-438f-bcef-858f8aca323f/1/TJ--R1YCj6QYejmVlfrGXDwcQ8Y.mft
Manifest number: 07FF
Signing time: Sun 29 Jun 2025 11:01:29 +0000
Manifest this update: Sun 29 Jun 2025 11:01:29 +0000
Manifest next update: Mon 30 Jun 2025 11:01:29 +0000
Files and hashes: 1: TJ--R1YCj6QYejmVlfrGXDwcQ8Y.crl (hash: oOarHzhsDcwB3G4K/HQjEwr5Egab1YDH5GMt5uIJarA=)
2: jkZUIqdvougoYWTFFIYTmQ_0c3I.roa (hash: FvJzMAch2URVowys51R40ZrFG4sKpVwuQwZnFuBLSQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/b5fb58-928c-438f-bcef-858f8aca323f/1/TJ--R1YCj6QYejmVlfrGXDwcQ8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/b5fb58-928c-438f-bcef-858f8aca323f/1/TJ--R1YCj6QYejmVlfrGXDwcQ8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/TJ--R1YCj6QYejmVlfrGXDwcQ8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:bb:59:6c:e8:01:3b:f4:cf:34:77:bc:64:bf:02:0f:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c9fbe4756028fa4187a399595fac65c3c1c43c6
Validity
Not Before: Jun 29 11:01:29 2025 GMT
Not After : Jun 30 11:01:29 2025 GMT
Subject: CN=23f394b7ff763f528a5ae4c9c85add67fddd2aaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:03:c4:51:fd:3b:cc:67:99:8d:f2:fd:e4:67:
8b:a8:1c:73:cb:eb:10:d0:53:b7:e1:3f:2c:99:4f:
01:ac:e3:c1:8b:0d:1a:ed:df:33:fc:0d:45:1f:0d:
e0:b4:11:f7:cf:2f:c6:68:da:61:ae:80:9d:7b:45:
38:73:2b:d3:7f:78:67:e1:c7:b4:3a:87:32:06:bc:
23:6e:0e:53:86:ee:3e:f0:f7:37:dc:6c:3f:c7:57:
90:ee:17:73:15:e7:e7:0f:c7:5c:32:db:39:6f:37:
db:99:cc:47:51:99:f9:4c:27:8e:32:03:57:32:cb:
d3:e2:ac:b8:74:61:c6:e8:5e:21:58:7e:e6:47:a1:
b8:20:fd:95:f5:02:eb:ce:0e:8e:a8:19:2e:08:5e:
13:f6:7a:03:c1:37:59:ed:4d:d0:9e:c2:26:a8:6e:
10:28:ae:52:40:89:63:28:b1:24:f3:a7:1c:c8:e3:
da:89:a9:7b:d0:31:54:df:a9:73:9d:c8:3e:0d:75:
2a:96:0a:63:1a:16:16:08:cc:24:40:7d:1d:1f:df:
32:6b:a8:e4:b9:a7:9a:8d:f7:38:4e:e8:3e:55:7b:
7d:3d:89:09:1b:8e:23:d1:e5:f3:13:37:80:c6:ac:
6f:96:bd:40:4d:72:8a:38:0a:3b:97:0b:24:20:3e:
a0:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:F3:94:B7:FF:76:3F:52:8A:5A:E4:C9:C8:5A:DD:67:FD:DD:2A:AF
X509v3 Authority Key Identifier:
keyid:4C:9F:BE:47:56:02:8F:A4:18:7A:39:95:95:FA:C6:5C:3C:1C:43:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TJ--R1YCj6QYejmVlfrGXDwcQ8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/b5fb58-928c-438f-bcef-858f8aca323f/1/TJ--R1YCj6QYejmVlfrGXDwcQ8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/b5fb58-928c-438f-bcef-858f8aca323f/1/TJ--R1YCj6QYejmVlfrGXDwcQ8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:c3:42:b8:b0:27:3c:d1:72:17:3e:e7:a2:e1:fa:7e:f1:6a:
70:e1:ae:d0:4f:b1:e0:a5:af:86:31:64:8d:ca:63:0c:26:5c:
f0:b9:b6:1e:8d:30:1d:84:d5:d8:68:33:db:11:a8:08:9e:b0:
48:94:36:e2:f9:1d:16:13:11:d3:a5:1c:3b:15:6e:5f:0c:1d:
b0:d8:67:d1:cc:d2:79:0d:10:36:e7:af:f7:76:e7:2d:1e:cb:
27:cd:a0:1d:84:c4:89:31:9e:a6:36:af:7a:c7:ed:85:d3:bd:
27:70:64:51:d2:78:bb:6d:25:21:38:d1:38:a8:2d:e8:03:16:
73:72:8e:e3:4f:c2:f4:b3:2d:f4:94:a5:35:3f:54:88:33:2d:
bb:fe:93:e4:94:be:bd:af:1b:12:2b:bd:f0:59:c9:b4:23:17:
16:f9:53:38:53:a1:c8:d9:ea:f5:28:c3:be:12:6a:ef:11:a9:
b4:c3:fa:c0:cc:d8:32:b8:a8:9f:bb:fc:f2:c0:c7:49:b6:fd:
ff:9b:04:09:7c:05:15:b7:c7:fa:b3:e6:32:73:3b:54:e7:f7:
a4:ae:6a:30:0e:72:19:ed:68:5a:9c:04:ff:0a:3e:0c:b3:2f:
10:56:25:cf:94:c7:bb:ff:aa:15:78:2a:c6:5b:91:f0:b5:4a:
47:d5:97:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 14:33:14 2025 by rpki-client