Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.mft
File: TSHLmy-MXenaowiJ2eI5RTe6Pjg.mft (raw, json)
Hash identifier: cb6Cdlj+8rCOI5N3NlV75a5S8F/1urTrIQAXS30nRL8=
Subject key identifier: D2:11:26:02:A1:10:56:D5:26:67:B7:9E:6E:CC:6D:26:35:28:F8:92
Authority key identifier: 4D:21:CB:9B:2F:8C:5D:E9:DA:A3:08:89:D9:E2:39:45:37:BA:3E:38
Certificate issuer: /CN=4d21cb9b2f8c5de9daa30889d9e2394537ba3e38
Certificate serial: 0197B7EA4BC5D5EDB19751512FDA99B3F082
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TSHLmy-MXenaowiJ2eI5RTe6Pjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 19:01:14 +0000
Manifest this update: Sat 28 Jun 2025 19:01:14 +0000
Manifest next update: Sun 29 Jun 2025 19:01:14 +0000
Files and hashes: 1: RV8paaJ3goMy9MfTaatO8nD3vp0.roa (hash: e4c5enruS1aSsE+Y/GCFoVHc8KGnXiS/8gSNbBU+Ybc=)
2: TSHLmy-MXenaowiJ2eI5RTe6Pjg.crl (hash: 8IPZ7eW4N368GjXiVLLab62yyuto9dRMyaMOp3xzUEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/TSHLmy-MXenaowiJ2eI5RTe6Pjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:4b:c5:d5:ed:b1:97:51:51:2f:da:99:b3:f0:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d21cb9b2f8c5de9daa30889d9e2394537ba3e38
Validity
Not Before: Jun 28 19:01:14 2025 GMT
Not After : Jun 29 19:01:14 2025 GMT
Subject: CN=d2112602a11056d52667b79e6ecc6d263528f892
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:70:71:6a:b1:82:4c:45:66:4f:c0:a7:2a:72:
52:f2:60:58:84:79:61:04:dd:7e:21:22:8a:10:81:
2f:8c:8e:5b:15:f9:75:3f:38:64:6b:af:b8:61:c3:
88:96:74:fb:7c:1c:5c:08:7d:89:ba:6c:08:0c:be:
06:26:11:ff:b6:81:fc:16:dd:39:7b:09:18:8a:cb:
4c:bb:1e:9c:a8:01:ae:4a:2b:30:b8:f0:1b:13:f3:
28:8b:b5:ab:06:98:4c:6c:2e:2c:5b:88:6c:1c:29:
4b:2a:40:e0:03:4f:38:23:9f:0a:aa:46:7a:83:87:
01:f0:35:54:13:57:3d:95:33:87:d8:a7:79:27:68:
71:91:13:3f:ab:ba:bd:c9:1c:b9:46:3e:7f:44:d0:
6f:03:8b:b6:c6:56:b7:a2:f0:e7:91:a8:95:24:e7:
9b:fb:b2:91:49:7f:97:31:dd:14:a0:ae:47:a7:0a:
96:6c:7b:5e:14:65:cc:bb:c4:25:ff:52:89:e0:1a:
e6:6e:c6:0d:a2:ba:cd:c0:3c:78:a9:ac:c4:d1:e2:
70:cf:c9:87:23:8a:26:54:59:7b:1f:b4:c3:35:11:
a8:54:57:6d:43:fc:a8:c9:7b:50:52:a1:b6:a0:02:
c1:15:f7:a0:8d:3a:0e:46:cc:d5:e8:f3:ca:7e:44:
ce:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:11:26:02:A1:10:56:D5:26:67:B7:9E:6E:CC:6D:26:35:28:F8:92
X509v3 Authority Key Identifier:
keyid:4D:21:CB:9B:2F:8C:5D:E9:DA:A3:08:89:D9:E2:39:45:37:BA:3E:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TSHLmy-MXenaowiJ2eI5RTe6Pjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:b9:ae:11:9f:df:ac:5b:88:3d:d9:cf:77:f1:23:35:74:83:
94:e6:60:a1:3f:31:bb:fc:27:d1:62:59:7d:73:84:c0:98:f8:
83:1c:6c:8e:39:22:c2:62:4d:c0:23:e8:e4:db:40:1a:15:b0:
fb:03:3d:01:9d:33:8e:4b:ab:d8:6a:41:19:91:db:77:f6:88:
e5:60:96:59:4d:ca:31:78:f0:ea:d6:95:a3:72:db:77:56:f0:
a9:be:5b:d3:26:e2:17:33:b8:5c:ab:bb:45:3b:4b:44:0b:2e:
a0:09:d7:c8:0e:a0:bc:50:0c:64:21:bb:a9:67:a8:f5:92:b8:
07:f1:19:16:a9:ef:b5:9e:77:5d:d1:9c:de:b8:c8:f6:41:c9:
68:e8:5b:09:8d:54:bc:1d:c5:c2:57:c6:58:a5:c2:4a:60:65:
14:c4:91:7e:07:11:83:ab:12:07:ea:33:d4:6e:cf:97:66:07:
7b:94:14:ec:64:b2:eb:8b:3d:0c:b9:56:53:c2:4a:6b:de:09:
b8:2e:4b:16:aa:8d:b2:9f:74:77:cb:f3:55:e4:d5:ff:8f:2d:
b4:4e:09:94:41:fd:15:08:56:65:63:83:b8:d0:45:0f:c6:17:
d2:8c:94:7d:cc:dc:f5:e9:9a:fb:57:9f:a0:65:3e:91:32:26:
52:66:89:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:57:27 2025 by rpki-client