Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/e4d20f-6dc8-497d-a8d6-9dddd6802088/1/tjowlEOcrA9VVwEobNVDc7zmy1A.mft
File: tjowlEOcrA9VVwEobNVDc7zmy1A.mft (raw, json)
Hash identifier: E/9m9qFPSPn8zoijhS0KfbJrh+PmY33JMFZ8UJKR6xI=
Subject key identifier: 72:69:15:81:F8:42:0B:2E:A1:1D:BF:61:26:CF:BA:51:41:E2:F1:01
Authority key identifier: B6:3A:30:94:43:9C:AC:0F:55:57:01:28:6C:D5:43:73:BC:E6:CB:50
Certificate issuer: /CN=b63a3094439cac0f555701286cd54373bce6cb50
Certificate serial: 0197C3499A3FDD2D960B9F012907EAECDFA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tjowlEOcrA9VVwEobNVDc7zmy1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/e4d20f-6dc8-497d-a8d6-9dddd6802088/1/tjowlEOcrA9VVwEobNVDc7zmy1A.mft
Manifest number: 035D
Signing time: Tue 01 Jul 2025 00:01:10 +0000
Manifest this update: Tue 01 Jul 2025 00:01:10 +0000
Manifest next update: Wed 02 Jul 2025 00:01:10 +0000
Files and hashes: 1: lCtCcNNufTLwFJhkrWabEjjBy0k.roa (hash: mf7pg/6iwjdXTSMTSKNkIUvc6nvXHprTVxoK02WKi+Y=)
2: tjowlEOcrA9VVwEobNVDc7zmy1A.crl (hash: T1Q/qjH5yFQ7VM3BCbO6g1HRE9PvpXTecLm0aSdqoWU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/e4d20f-6dc8-497d-a8d6-9dddd6802088/1/tjowlEOcrA9VVwEobNVDc7zmy1A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/e4d20f-6dc8-497d-a8d6-9dddd6802088/1/tjowlEOcrA9VVwEobNVDc7zmy1A.mft
rsync://rpki.ripe.net/repository/DEFAULT/tjowlEOcrA9VVwEobNVDc7zmy1A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c3:49:9a:3f:dd:2d:96:0b:9f:01:29:07:ea:ec:df:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b63a3094439cac0f555701286cd54373bce6cb50
Validity
Not Before: Jul 1 00:01:10 2025 GMT
Not After : Jul 2 00:01:10 2025 GMT
Subject: CN=72691581f8420b2ea11dbf6126cfba5141e2f101
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f0:5d:08:df:b2:8e:9b:9a:11:40:08:a0:1b:
a4:50:e3:e4:2c:82:9d:53:60:af:0c:48:be:3c:c9:
95:b0:9b:fa:93:4c:42:d6:5e:d8:08:23:c5:bb:22:
d9:f1:74:fb:42:92:eb:d6:34:b0:12:20:b3:ab:4c:
e8:86:d7:63:39:b2:ba:99:b8:f9:98:89:2c:f4:0b:
97:3b:aa:62:b7:c1:cf:a7:a1:53:b2:94:35:50:3d:
56:aa:50:42:5f:74:36:89:c3:29:75:48:6f:74:f2:
19:d7:c4:2e:8b:ec:89:7e:0e:e2:61:dd:00:17:7d:
e7:4a:09:96:02:23:e1:2e:de:17:5f:13:33:2d:fe:
3a:9c:05:31:bd:b9:fa:54:69:b4:3d:c8:a4:c5:23:
c6:14:fc:e4:04:0f:29:f2:b6:9a:f7:bb:4b:62:d6:
1b:5f:b2:91:55:17:73:9e:2e:9f:01:18:a0:17:08:
4b:2a:19:3b:5e:ee:c8:3f:f6:8f:d4:46:13:48:60:
c9:e2:14:9b:73:c4:43:5a:39:8e:72:24:82:f6:30:
da:66:ba:e7:5d:48:31:f9:af:ee:5d:a4:5e:3a:bd:
87:df:3a:2b:07:83:32:e3:a9:5b:5d:60:8c:b0:97:
1f:16:2e:43:b0:73:f4:86:26:5e:eb:18:60:05:7f:
6d:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:69:15:81:F8:42:0B:2E:A1:1D:BF:61:26:CF:BA:51:41:E2:F1:01
X509v3 Authority Key Identifier:
keyid:B6:3A:30:94:43:9C:AC:0F:55:57:01:28:6C:D5:43:73:BC:E6:CB:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tjowlEOcrA9VVwEobNVDc7zmy1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/e4d20f-6dc8-497d-a8d6-9dddd6802088/1/tjowlEOcrA9VVwEobNVDc7zmy1A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/e4d20f-6dc8-497d-a8d6-9dddd6802088/1/tjowlEOcrA9VVwEobNVDc7zmy1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:3f:16:c6:f1:ab:28:12:38:ce:4c:22:a8:18:1e:ec:c1:5a:
5b:68:4e:26:c8:51:0b:21:14:0b:a5:fc:42:57:82:bb:ee:c0:
dd:b3:3c:8f:2f:55:79:d3:dc:db:fc:7b:1b:f0:30:bb:24:5d:
17:71:23:0e:b6:d4:81:8c:70:72:39:30:09:81:b7:11:d9:93:
5b:22:13:e0:56:64:8e:49:6a:8b:0f:65:99:8b:a6:82:f5:ba:
94:c2:e1:c6:ea:e7:b6:42:c5:c5:1e:b8:d6:98:4b:51:ca:27:
78:62:7f:44:92:0c:5c:ed:a6:fd:37:2b:b7:1d:1e:0b:e5:ad:
1c:a9:6b:b6:4f:3a:2f:aa:ff:2c:9d:37:58:02:83:fb:a7:87:
fa:33:bb:b3:1d:34:ec:14:5f:3b:47:e7:c6:83:a8:41:d9:cb:
be:68:e0:da:13:23:6e:43:ad:25:02:a3:f5:d7:36:6e:4c:99:
0c:d0:15:80:b4:a8:45:7b:00:70:c9:41:22:6f:69:ab:65:3d:
3d:ff:46:1f:b6:4b:9e:94:1a:51:67:ab:a3:5f:5b:93:72:01:
83:e8:c3:35:43:56:e8:ec:b2:34:36:8f:38:32:7f:04:b3:47:
25:cf:46:95:ed:1c:a1:e8:da:d2:bc:d9:50:a2:a2:c4:d6:ad:
6f:77:65:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 03:11:17 2025 by rpki-client