Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/a9e57e-2479-4576-b275-87433157a25b/1/TfkmWGAQlO1kmFxkxpUr40FjAc4.mft
File: TfkmWGAQlO1kmFxkxpUr40FjAc4.mft (raw, json)
Hash identifier: PPDK6e7O4WgzbZmAZCJNehwgXWrq54tu6+83xtrLsI4=
Subject key identifier: D3:74:F4:D6:C0:8C:79:9F:3E:AF:E0:EE:B7:74:7D:09:44:F5:43:84
Authority key identifier: 4D:F9:26:58:60:10:94:ED:64:98:5C:64:C6:95:2B:E3:41:63:01:CE
Certificate issuer: /CN=4df92658601094ed64985c64c6952be3416301ce
Certificate serial: 0197B6A0674D1D3FFFE2212610181AF93419
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TfkmWGAQlO1kmFxkxpUr40FjAc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/a9e57e-2479-4576-b275-87433157a25b/1/TfkmWGAQlO1kmFxkxpUr40FjAc4.mft
Manifest number: 0820
Signing time: Sat 28 Jun 2025 13:00:54 +0000
Manifest this update: Sat 28 Jun 2025 13:00:54 +0000
Manifest next update: Sun 29 Jun 2025 13:00:54 +0000
Files and hashes: 1: 42VDtF9LMj3RUZlBTr5Tpxb7XhY.roa (hash: 06Fp4iuAbTOsazThfCr6hEmyN81BPyfi3nXeyKKT6d0=)
2: TfkmWGAQlO1kmFxkxpUr40FjAc4.crl (hash: gAS3PsgNwVSMm7tBMQVUjZ51LVE0X8ey/aeaHL70F5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/a9e57e-2479-4576-b275-87433157a25b/1/TfkmWGAQlO1kmFxkxpUr40FjAc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/a9e57e-2479-4576-b275-87433157a25b/1/TfkmWGAQlO1kmFxkxpUr40FjAc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TfkmWGAQlO1kmFxkxpUr40FjAc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:67:4d:1d:3f:ff:e2:21:26:10:18:1a:f9:34:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4df92658601094ed64985c64c6952be3416301ce
Validity
Not Before: Jun 28 13:00:54 2025 GMT
Not After : Jun 29 13:00:54 2025 GMT
Subject: CN=d374f4d6c08c799f3eafe0eeb7747d0944f54384
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:0d:47:7c:5a:15:db:c1:c6:07:d3:e1:07:4f:
a8:96:47:9d:c5:b0:35:a8:26:ce:29:84:69:92:e9:
33:3e:eb:16:d8:79:55:62:6a:05:37:9e:13:8e:dc:
7b:34:d3:c0:1e:42:a6:c6:02:f8:75:27:93:af:b7:
05:a3:39:31:f6:10:c9:cc:02:f9:d5:45:57:51:39:
ae:e7:1b:47:83:64:30:b3:1f:51:3b:5c:a3:c9:b6:
51:68:bd:3d:9d:51:25:23:f8:e5:54:43:00:f7:26:
78:50:8f:57:31:b0:66:da:1a:a0:56:7d:5f:de:5f:
66:33:c7:d1:15:79:33:6f:04:c9:96:c9:b5:a9:0f:
09:e7:06:4d:9c:2a:27:fb:77:fc:5b:35:d1:75:af:
7c:a4:67:75:90:b3:c9:30:4e:25:b1:06:83:f3:8e:
3f:cf:7a:4b:b8:97:c9:6c:d1:dd:e9:e4:68:1a:38:
07:af:82:de:d6:ab:09:58:46:0e:af:ec:26:78:79:
9b:ca:85:ee:80:91:7f:af:7d:77:d0:d5:08:78:f9:
55:51:07:3a:71:6a:06:bf:6c:c0:00:23:ce:7d:e0:
ae:ab:77:84:39:3b:9e:be:1d:26:49:f0:3d:8f:fa:
ca:8a:f6:1b:67:b6:48:5c:ee:e7:64:1d:a9:17:fa:
8e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:74:F4:D6:C0:8C:79:9F:3E:AF:E0:EE:B7:74:7D:09:44:F5:43:84
X509v3 Authority Key Identifier:
keyid:4D:F9:26:58:60:10:94:ED:64:98:5C:64:C6:95:2B:E3:41:63:01:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TfkmWGAQlO1kmFxkxpUr40FjAc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/a9e57e-2479-4576-b275-87433157a25b/1/TfkmWGAQlO1kmFxkxpUr40FjAc4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/a9e57e-2479-4576-b275-87433157a25b/1/TfkmWGAQlO1kmFxkxpUr40FjAc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:43:ec:f8:95:bb:63:2b:67:b8:5c:12:92:3f:44:ae:46:cf:
86:2b:cf:e0:38:13:56:2f:fe:08:b9:96:3f:e1:76:9e:dc:2d:
fd:a7:d5:86:1d:63:39:1b:70:85:2a:3b:4e:40:e2:05:8f:6c:
84:09:1d:3e:06:dd:7b:49:da:92:1c:0b:31:6d:95:4f:f6:6a:
7f:d5:fb:f0:0c:f6:c9:5b:9b:9c:e5:75:c2:4a:d6:d4:e6:67:
3a:a6:ff:d5:46:f5:e3:71:c1:1d:5f:f6:63:9a:f3:73:d6:1c:
df:62:53:3e:0d:41:4a:60:ef:ec:b5:56:b1:91:89:47:03:f9:
b5:d4:3a:94:aa:35:e2:f1:71:0a:34:0d:9d:c6:7c:f4:44:09:
62:3c:ae:03:7f:9d:fe:23:ce:1e:8f:03:6e:fa:5f:6e:69:50:
03:b4:e1:a4:9d:0e:f6:4e:51:bd:9c:0f:71:89:a8:28:55:6b:
5f:af:6c:5b:12:ef:c7:52:29:3a:73:6b:ef:b2:94:63:2f:c8:
58:ac:39:38:33:84:bc:ca:bf:e0:36:52:19:48:33:ab:a9:d0:
c9:11:2d:91:d8:f7:c5:5e:5d:aa:9e:61:16:e5:64:c4:b8:cf:
55:c5:a7:7f:52:3e:9f:de:0e:ac:90:0a:4d:97:b9:30:c7:fd:
17:e2:4f:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:46:32 2025 by rpki-client