Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.mft
File: tA1JQzPLTZ5f0QyEbEfPVkRcUDo.mft (raw, json)
Hash identifier: kd//0InAo6VCGFWe5tU+6pp/1lX7JN0yJ2kEMrkBqNE=
Subject key identifier: 17:84:98:B5:A3:8B:6C:7A:15:77:2B:A1:6E:94:25:48:6C:1B:21:90
Authority key identifier: B4:0D:49:43:33:CB:4D:9E:5F:D1:0C:84:6C:47:CF:56:44:5C:50:3A
Certificate issuer: /CN=b40d494333cb4d9e5fd10c846c47cf56445c503a
Certificate serial: 0197B70E7BDF6068945B871E13695812BD9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.mft
Manifest number: 0ECA
Signing time: Sat 28 Jun 2025 15:01:09 +0000
Manifest this update: Sat 28 Jun 2025 15:01:09 +0000
Manifest next update: Sun 29 Jun 2025 15:01:09 +0000
Files and hashes: 1: VYJ9qKilNSj9Z30pGpYaNAGU4Z0.roa (hash: j29BGrdUX9gZWLn/MqLu3C1IYATOJG6BtpBREfenzkc=)
2: dek1yBz9hU9Sw_jKA33of_zM9K4.roa (hash: yub3ufVUEc3WS+XkUJMCp9euptnf3DjONJgSPtRCvNQ=)
3: tA1JQzPLTZ5f0QyEbEfPVkRcUDo.crl (hash: fuex/DO66vefcAAoCmX2Tr92KwAihSpbNAShb4ShnS4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.mft
rsync://rpki.ripe.net/repository/DEFAULT/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:7b:df:60:68:94:5b:87:1e:13:69:58:12:bd:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b40d494333cb4d9e5fd10c846c47cf56445c503a
Validity
Not Before: Jun 28 15:01:09 2025 GMT
Not After : Jun 29 15:01:09 2025 GMT
Subject: CN=178498b5a38b6c7a15772ba16e9425486c1b2190
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:01:05:f8:79:1d:68:7d:24:04:ff:79:45:24:
a7:27:f1:02:d8:fb:29:68:fd:c4:65:33:85:74:4a:
f7:df:04:b1:f5:79:a1:49:09:77:37:e0:e9:98:55:
31:14:d3:b1:55:5c:9d:71:ff:d2:9c:71:dc:ef:d4:
a8:f4:66:ec:0b:2e:a8:d7:2d:39:1b:fe:19:2a:7e:
93:bf:4b:c2:da:f4:a2:83:3b:bd:74:c1:af:d5:7d:
6f:e1:39:06:5d:30:c7:b0:4c:46:b0:f7:f8:e5:69:
e5:cc:07:21:5c:ef:a0:90:07:51:5c:33:a3:2d:2d:
56:2f:07:34:29:9e:92:96:d6:26:ea:3e:cf:ef:43:
bc:b4:67:8a:48:02:32:55:17:c3:bc:b0:0d:cf:4e:
b3:db:a9:10:85:5a:bd:13:20:05:e2:6a:89:8a:ea:
69:0b:43:da:bf:03:9d:63:51:85:ab:e3:9d:53:3e:
a4:2d:b3:2a:21:79:89:59:f6:5a:5f:14:92:18:06:
a7:3e:2f:f1:d2:00:cf:f3:46:c1:f7:42:a8:4a:8c:
68:21:2f:fe:8e:9e:0f:00:53:35:c2:cd:ea:00:d3:
03:29:54:c3:56:92:4b:13:be:2d:c4:9c:da:37:f7:
fa:ef:ac:9a:ed:85:a0:08:66:a3:9d:41:f3:a0:49:
0d:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:84:98:B5:A3:8B:6C:7A:15:77:2B:A1:6E:94:25:48:6C:1B:21:90
X509v3 Authority Key Identifier:
keyid:B4:0D:49:43:33:CB:4D:9E:5F:D1:0C:84:6C:47:CF:56:44:5C:50:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:68:f9:a0:f6:4c:18:df:cd:c6:95:e2:df:59:6f:d9:66:7e:
50:8e:7f:04:a6:12:82:47:7f:03:d5:9d:db:bc:0a:04:a3:ed:
11:cd:ea:9b:3b:d6:d2:6b:63:21:f4:9e:e9:f4:37:6d:22:f0:
c2:09:fa:de:14:db:21:ce:d0:36:c9:7e:7e:bc:a6:4f:de:fb:
58:5e:81:b1:a1:2d:3e:8b:91:ea:41:2a:2e:ba:65:77:66:08:
43:81:47:a3:a3:86:64:3c:9a:0b:f7:9a:d1:10:49:e0:00:3b:
7a:09:f2:34:cf:8a:3b:df:9a:c0:60:03:2e:83:b8:c2:54:d7:
60:af:e4:66:38:05:db:00:6f:ca:16:41:5a:bf:69:f0:5d:79:
41:14:d8:02:0e:bf:89:8b:b6:a1:70:a1:82:b0:0c:eb:42:0b:
c5:19:00:a9:d4:8d:47:16:d5:d6:8e:c6:cc:4a:30:98:66:4f:
3c:2a:93:b4:a7:42:d0:dc:17:ed:4b:8c:1f:c7:20:56:68:06:
e1:7d:8e:09:80:24:09:a5:ab:e4:ba:d0:4c:68:e5:0a:64:bc:
d1:b7:aa:a2:8a:9c:9b:d1:00:4c:7b:d6:af:be:04:06:c5:e9:
50:50:93:05:b1:e5:f4:cc:24:6f:b1:39:0b:b7:01:38:a2:62:
ca:47:68:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:09:17 2025 by rpki-client