Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/fe6363-6ed5-467d-b96e-8e0bdff237f8/1/TWJ4HKFDbZbWd1uiDFzyx139E-k.mft
File: TWJ4HKFDbZbWd1uiDFzyx139E-k.mft (raw, json)
Hash identifier: zCaWKbLu43bToHttyVfXOYB1JvzlyBb3Ekg1B7ttxnE=
Subject key identifier: A8:E1:F9:75:80:52:01:92:C4:03:36:6F:1B:56:12:2E:1B:8E:42:4F
Authority key identifier: 4D:62:78:1C:A1:43:6D:96:D6:77:5B:A2:0C:5C:F2:C7:5D:FD:13:E9
Certificate issuer: /CN=4d62781ca1436d96d6775ba20c5cf2c75dfd13e9
Certificate serial: 0197B7B3136EC2FDC672187E0210669F9C7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TWJ4HKFDbZbWd1uiDFzyx139E-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/fe6363-6ed5-467d-b96e-8e0bdff237f8/1/TWJ4HKFDbZbWd1uiDFzyx139E-k.mft
Manifest number: 150E
Signing time: Sat 28 Jun 2025 18:00:55 +0000
Manifest this update: Sat 28 Jun 2025 18:00:55 +0000
Manifest next update: Sun 29 Jun 2025 18:00:55 +0000
Files and hashes: 1: TWJ4HKFDbZbWd1uiDFzyx139E-k.crl (hash: arrtwIlS68CpurHnzIQOyu4jyutv2tUFlS+v5MnttyY=)
2: aMDb2aqsB1gnaYoCsXASMw4mf7g.roa (hash: nKgevpuMWVmNTWjVHVyGbe988HLYNNZK38XCR2Z6V2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/fe6363-6ed5-467d-b96e-8e0bdff237f8/1/TWJ4HKFDbZbWd1uiDFzyx139E-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/fe6363-6ed5-467d-b96e-8e0bdff237f8/1/TWJ4HKFDbZbWd1uiDFzyx139E-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/TWJ4HKFDbZbWd1uiDFzyx139E-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:13:6e:c2:fd:c6:72:18:7e:02:10:66:9f:9c:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d62781ca1436d96d6775ba20c5cf2c75dfd13e9
Validity
Not Before: Jun 28 18:00:55 2025 GMT
Not After : Jun 29 18:00:55 2025 GMT
Subject: CN=a8e1f97580520192c403366f1b56122e1b8e424f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a1:d0:c6:8e:c0:fd:b5:24:f2:a0:44:7a:b5:
a8:93:82:ed:1e:f3:4b:00:77:e7:d3:a3:70:7f:70:
39:fe:99:62:76:73:c5:32:15:ce:86:9d:c6:b6:7b:
c7:2e:b1:51:96:d6:c7:69:f1:44:c7:d9:b0:77:5c:
c9:b3:38:1b:28:ff:35:cb:5a:23:b6:8c:8f:cc:39:
32:b9:12:7b:aa:2e:98:29:e7:50:05:93:f3:89:a4:
98:b6:b7:82:cf:7b:13:66:63:ad:0d:38:42:f3:f5:
c9:5a:61:09:0b:2e:02:ec:c9:85:7b:21:6b:36:c1:
d1:40:1a:6f:6d:be:03:ed:22:c4:4c:75:5b:ca:f8:
1a:b3:b8:51:bd:d0:52:e6:6f:79:8d:96:40:4c:6d:
27:82:2d:4c:7d:db:37:1b:56:ab:8f:32:b4:c7:25:
01:57:1d:87:69:5c:a3:21:53:dd:d7:07:b3:b2:46:
59:7a:8a:fc:9d:77:96:33:82:9e:8f:d3:56:4e:9d:
6b:92:99:1c:3c:42:c0:8f:05:b1:11:b7:f2:a9:11:
ca:1b:b3:c9:e3:7f:20:a3:6b:1e:08:59:29:b2:a3:
4c:57:7d:80:fb:83:80:fa:3f:bd:51:24:31:8e:41:
be:59:bf:03:48:68:bd:2f:ba:09:b0:1d:b9:5b:7f:
87:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:E1:F9:75:80:52:01:92:C4:03:36:6F:1B:56:12:2E:1B:8E:42:4F
X509v3 Authority Key Identifier:
keyid:4D:62:78:1C:A1:43:6D:96:D6:77:5B:A2:0C:5C:F2:C7:5D:FD:13:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TWJ4HKFDbZbWd1uiDFzyx139E-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/fe6363-6ed5-467d-b96e-8e0bdff237f8/1/TWJ4HKFDbZbWd1uiDFzyx139E-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/fe6363-6ed5-467d-b96e-8e0bdff237f8/1/TWJ4HKFDbZbWd1uiDFzyx139E-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:bc:71:13:f4:be:c3:e7:3a:41:eb:d6:8e:ad:b4:17:a1:fa:
41:fa:52:fd:c0:39:a2:9a:af:93:8d:01:ad:18:a9:cc:1e:ac:
11:68:06:90:ec:9d:93:cd:46:a0:6e:bf:ea:49:52:51:7c:8d:
b8:e2:f7:cc:53:65:36:2e:e4:12:c9:29:30:c0:fe:83:3f:04:
8c:fb:c3:12:84:19:01:55:55:77:26:df:64:80:b2:8b:dc:0c:
d9:87:e2:73:81:5e:e4:a4:5f:53:cf:18:22:4b:e6:c1:ad:34:
2e:1a:99:38:86:8b:fe:6f:84:ad:09:11:07:bc:25:5a:a6:10:
b3:7b:a4:84:eb:a4:55:c3:a9:84:c0:54:f2:ce:90:af:e5:5d:
e4:50:37:47:da:02:f7:41:72:cf:20:4f:6e:d3:7e:f3:c2:8d:
fa:f5:2b:f3:60:60:cb:b7:35:be:32:a4:53:25:79:f0:cb:0f:
74:09:50:43:4e:a5:58:ee:44:94:df:48:c5:b4:e1:de:d6:dd:
4f:cf:ef:f7:3e:0e:f4:2a:c3:f9:4d:7d:6f:4a:61:b3:3c:c0:
2d:40:22:38:16:e7:6c:0d:b2:37:ff:55:74:e0:77:8a:06:17:
c1:66:ef:54:14:49:71:d4:c3:33:fd:cf:52:0c:be:16:97:5e:
f4:ee:27:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 00:21:48 2025 by rpki-client