Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/608fdb-a406-4b85-b14a-d2441e8f6c7a/1/tPgsjv3jS9meROrwcxtsUltFShk.mft
File: tPgsjv3jS9meROrwcxtsUltFShk.mft (raw, json)
Hash identifier: JwLEX3gsO86BJQww7VUoQxkUW6dYpWadmoe41BuwXBU=
Subject key identifier: 9B:42:A4:8C:00:AB:72:25:45:60:9F:89:03:66:28:1B:26:C6:36:F6
Authority key identifier: B4:F8:2C:8E:FD:E3:4B:D9:9E:44:EA:F0:73:1B:6C:52:5B:45:4A:19
Certificate issuer: /CN=b4f82c8efde34bd99e44eaf0731b6c525b454a19
Certificate serial: 0197B70EA34CC060B6CFD57EC3742CD35769
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPgsjv3jS9meROrwcxtsUltFShk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/608fdb-a406-4b85-b14a-d2441e8f6c7a/1/tPgsjv3jS9meROrwcxtsUltFShk.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 15:01:19 +0000
Manifest this update: Sat 28 Jun 2025 15:01:19 +0000
Manifest next update: Sun 29 Jun 2025 15:01:19 +0000
Files and hashes: 1: qLkt693aVmyKYJQGNdNxcAXdJ9w.roa (hash: D8tW4gMgnbvNPYFRk3OMpyQUNWmp5AcbpxituaqMb+A=)
2: tPgsjv3jS9meROrwcxtsUltFShk.crl (hash: juy1DOqO6Bs7MWC5+IpGPZ9xEauyfG9wNfBWjPxRYy8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/608fdb-a406-4b85-b14a-d2441e8f6c7a/1/tPgsjv3jS9meROrwcxtsUltFShk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/608fdb-a406-4b85-b14a-d2441e8f6c7a/1/tPgsjv3jS9meROrwcxtsUltFShk.mft
rsync://rpki.ripe.net/repository/DEFAULT/tPgsjv3jS9meROrwcxtsUltFShk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:a3:4c:c0:60:b6:cf:d5:7e:c3:74:2c:d3:57:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f82c8efde34bd99e44eaf0731b6c525b454a19
Validity
Not Before: Jun 28 15:01:19 2025 GMT
Not After : Jun 29 15:01:19 2025 GMT
Subject: CN=9b42a48c00ab722545609f890366281b26c636f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:72:e1:34:9d:7e:cb:a5:36:13:13:26:51:30:
df:e4:ef:cb:47:31:20:3d:5d:87:f5:ce:89:5b:6e:
bc:a2:97:5c:10:8d:3a:4b:68:5b:78:11:f6:0b:b0:
ce:2a:14:fb:f4:7d:6b:35:7d:e2:74:44:88:26:20:
13:85:c7:de:ca:7b:93:85:06:9f:90:78:ca:fb:fd:
4b:98:e2:71:cf:0c:c8:90:e3:9e:cd:c2:11:b5:a0:
0b:bc:95:29:b6:b0:8f:f2:c7:8f:ba:3b:18:42:4b:
37:92:9b:55:ff:b2:4b:02:54:68:e4:68:e1:f0:74:
47:4a:70:9c:da:de:70:2d:b6:2f:65:43:41:a1:3e:
78:e0:aa:2b:0e:42:3e:82:f5:5e:3c:ee:46:82:e1:
fd:85:ee:a2:f3:89:92:6b:61:1a:95:bf:05:7b:d4:
d5:87:f9:aa:e9:b3:14:42:37:1a:54:58:e3:1d:c1:
82:d0:33:7a:31:48:97:3e:ef:28:18:43:7c:4d:4d:
fd:63:df:21:e1:65:cb:f8:18:2f:69:a7:7b:59:37:
ea:e4:05:50:69:5f:9c:15:c7:eb:b7:06:ce:71:59:
3c:d1:e2:b2:a0:66:b3:92:32:47:b2:37:0c:84:13:
fc:11:c4:60:33:36:1a:d8:4f:c9:3b:61:e6:2d:10:
a1:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:42:A4:8C:00:AB:72:25:45:60:9F:89:03:66:28:1B:26:C6:36:F6
X509v3 Authority Key Identifier:
keyid:B4:F8:2C:8E:FD:E3:4B:D9:9E:44:EA:F0:73:1B:6C:52:5B:45:4A:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPgsjv3jS9meROrwcxtsUltFShk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/608fdb-a406-4b85-b14a-d2441e8f6c7a/1/tPgsjv3jS9meROrwcxtsUltFShk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/608fdb-a406-4b85-b14a-d2441e8f6c7a/1/tPgsjv3jS9meROrwcxtsUltFShk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:e1:3e:b3:00:f1:9f:41:5e:95:b2:4c:38:91:c0:97:bd:79:
ab:46:2a:b1:8c:94:a3:5a:e5:af:08:da:cd:ee:75:b0:a7:13:
89:fa:c1:2b:da:ba:74:1a:28:d6:50:f6:1d:cf:00:f2:54:97:
a5:da:0d:a9:60:f6:ff:0b:52:dd:8c:72:50:47:29:23:e9:aa:
55:29:10:fa:88:d6:d3:81:3c:eb:c2:5a:4a:8a:ec:7c:3c:8e:
3e:46:1f:1c:c9:8f:94:5b:51:5c:44:3a:ce:73:0a:7b:3a:99:
8b:2c:0b:74:3b:33:3e:20:21:e3:f6:47:8f:90:db:31:99:9d:
7f:5e:1d:61:3a:fd:06:23:3d:8c:6a:08:a4:58:80:b8:59:f3:
18:72:71:7a:19:00:52:93:9f:f2:c5:10:52:48:a1:95:a6:cc:
2a:df:e9:2c:40:e2:02:28:b6:c7:1c:b7:62:9f:36:09:e1:1f:
94:21:cd:0c:c8:59:51:bc:b6:d1:de:79:39:63:db:33:5d:8a:
be:7a:ea:46:69:99:e1:f9:90:f2:cd:b0:77:ce:23:77:7c:00:
23:9f:af:8f:95:8c:eb:c2:6c:56:af:70:9f:eb:c4:93:65:78:
f6:50:59:dd:2a:ba:45:d2:45:37:8d:5f:9d:fd:42:8c:4f:c7:
9a:28:d0:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:28:13 2025 by rpki-client