Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/59dcbd-78bf-48ed-954d-ccaa6eb3c513/1/TBAf9Rtn7v4NZ4AOdtNgbfTJRyE.mft
File: TBAf9Rtn7v4NZ4AOdtNgbfTJRyE.mft (raw, json)
Hash identifier: GmRbK0YZO9hs8ViQGltog55yqUMS91ke5mpZQsHjHnQ=
Subject key identifier: 0C:2D:BE:B0:FF:AB:DA:52:D8:01:51:23:5F:99:B2:05:5D:FA:F4:3B
Authority key identifier: 4C:10:1F:F5:1B:67:EE:FE:0D:67:80:0E:76:D3:60:6D:F4:C9:47:21
Certificate issuer: /CN=4c101ff51b67eefe0d67800e76d3606df4c94721
Certificate serial: 0197B70ED58AFDDBA2CDD00481976474E6E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TBAf9Rtn7v4NZ4AOdtNgbfTJRyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/59dcbd-78bf-48ed-954d-ccaa6eb3c513/1/TBAf9Rtn7v4NZ4AOdtNgbfTJRyE.mft
Manifest number: 0526
Signing time: Sat 28 Jun 2025 15:01:32 +0000
Manifest this update: Sat 28 Jun 2025 15:01:32 +0000
Manifest next update: Sun 29 Jun 2025 15:01:32 +0000
Files and hashes: 1: TBAf9Rtn7v4NZ4AOdtNgbfTJRyE.crl (hash: fpLSMswho6LUQWpANfVISHA0AXwqz6Pe1XacXc3W0sc=)
2: cri3ULh6Rj8r6ZDUmdSIkYBmP1o.roa (hash: Lisc7jMorS/4tIMBDxqrdkl7lwX530FUMpT0ozDszqE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/59dcbd-78bf-48ed-954d-ccaa6eb3c513/1/TBAf9Rtn7v4NZ4AOdtNgbfTJRyE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/59dcbd-78bf-48ed-954d-ccaa6eb3c513/1/TBAf9Rtn7v4NZ4AOdtNgbfTJRyE.mft
rsync://rpki.ripe.net/repository/DEFAULT/TBAf9Rtn7v4NZ4AOdtNgbfTJRyE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:d5:8a:fd:db:a2:cd:d0:04:81:97:64:74:e6:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c101ff51b67eefe0d67800e76d3606df4c94721
Validity
Not Before: Jun 28 15:01:32 2025 GMT
Not After : Jun 29 15:01:32 2025 GMT
Subject: CN=0c2dbeb0ffabda52d80151235f99b2055dfaf43b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:75:9d:0d:03:00:de:d2:b5:30:63:cb:01:08:
a0:b6:62:46:87:37:30:fa:8a:16:ee:8b:e0:00:b6:
3c:31:60:ca:97:38:79:b7:79:ee:78:f2:e4:07:49:
17:e5:35:b0:d1:ad:ae:9f:66:4a:27:c2:05:58:96:
66:ba:de:44:7f:d2:f2:31:19:0b:76:8a:cf:59:1f:
99:a2:e2:44:fc:80:7d:84:fb:77:b4:29:60:22:5a:
0d:6f:42:7b:67:77:40:bb:1b:18:cd:0d:cc:4c:a1:
f2:4e:6f:96:8c:44:48:ef:ac:8a:c9:73:ca:0c:ee:
7b:39:37:32:2f:b7:fc:85:4a:9c:9b:32:79:d0:2c:
59:d8:c0:16:87:8e:ee:6d:ae:3c:f2:61:38:cb:3d:
7b:0b:98:bd:b7:57:1e:ec:51:3f:92:9b:95:c7:7f:
40:12:9b:1c:e9:98:07:cf:fc:3e:43:62:4b:91:2a:
71:e5:e9:e3:11:89:23:32:4b:49:18:b5:f4:a9:53:
c1:8a:fc:fe:41:55:c4:79:ea:8c:b8:50:29:62:9e:
cb:5f:b4:93:bf:fa:9b:f4:f3:79:0d:e9:73:a3:e2:
95:26:44:cc:60:7a:72:bc:c5:95:3d:30:87:16:78:
5d:93:9c:c0:72:72:25:15:a4:39:ca:71:00:26:c9:
88:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:2D:BE:B0:FF:AB:DA:52:D8:01:51:23:5F:99:B2:05:5D:FA:F4:3B
X509v3 Authority Key Identifier:
keyid:4C:10:1F:F5:1B:67:EE:FE:0D:67:80:0E:76:D3:60:6D:F4:C9:47:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TBAf9Rtn7v4NZ4AOdtNgbfTJRyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/59dcbd-78bf-48ed-954d-ccaa6eb3c513/1/TBAf9Rtn7v4NZ4AOdtNgbfTJRyE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/59dcbd-78bf-48ed-954d-ccaa6eb3c513/1/TBAf9Rtn7v4NZ4AOdtNgbfTJRyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:5f:e6:6f:af:58:b8:09:41:7f:36:a9:20:69:01:ce:67:26:
07:1d:30:da:04:e4:20:9b:6a:b3:5f:13:f5:a9:80:01:c5:08:
c8:85:83:3a:a6:f4:34:23:6d:38:b0:2e:78:93:76:96:bd:15:
85:04:e9:f8:d7:96:d1:d4:b6:b4:da:b6:6a:fa:eb:62:40:53:
38:26:f3:b9:9f:d4:e0:0d:25:42:04:60:f6:29:73:a9:37:c4:
b6:68:be:c6:f6:fe:fb:53:c5:67:2b:4f:54:96:2a:e3:80:43:
54:97:c4:87:bd:ab:41:74:fe:f2:79:cc:ce:a0:e8:0b:c4:5b:
b7:2e:3f:c8:ed:7b:91:bb:7e:73:05:e7:24:4f:40:e8:e6:e6:
a6:45:50:a8:08:51:1a:d3:6e:34:6c:a7:d2:d1:b4:d5:f4:d9:
a6:80:c9:2f:37:7b:c9:3c:74:e9:dd:35:dc:63:df:26:10:33:
6c:0f:3a:2b:35:d8:60:9c:29:71:d3:80:79:ea:47:a2:48:21:
3c:60:a1:ce:44:77:b7:91:11:4d:3d:08:5a:85:93:1a:35:7f:
85:1e:33:fc:dc:6b:6c:f8:b6:2e:c6:e4:f0:53:27:42:c7:df:
9e:56:e4:92:97:5f:4e:27:51:ce:9e:82:6c:7f:b0:8b:92:b8:
7d:e0:02:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:28:45 2025 by rpki-client