Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/a35f7f-2194-46d3-91bd-cc0f50bda159/1/TN1pc0k84MOEm4uRm3UCul-gE9c.mft
File: TN1pc0k84MOEm4uRm3UCul-gE9c.mft (raw, json)
Hash identifier: M9Tb9QMZDNNO92yNH10+mXwpMHRre1g9a6CxsLMcasw=
Subject key identifier: 32:C4:1B:66:A5:02:27:13:1A:71:B7:95:F9:D0:EF:5F:BA:2F:AF:60
Authority key identifier: 4C:DD:69:73:49:3C:E0:C3:84:9B:8B:91:9B:75:02:BA:5F:A0:13:D7
Certificate issuer: /CN=4cdd6973493ce0c3849b8b919b7502ba5fa013d7
Certificate serial: 0197B632F23D37D39AD2361DCA898486A6E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TN1pc0k84MOEm4uRm3UCul-gE9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/a35f7f-2194-46d3-91bd-cc0f50bda159/1/TN1pc0k84MOEm4uRm3UCul-gE9c.mft
Manifest number: 023D
Signing time: Sat 28 Jun 2025 11:01:21 +0000
Manifest this update: Sat 28 Jun 2025 11:01:21 +0000
Manifest next update: Sun 29 Jun 2025 11:01:21 +0000
Files and hashes: 1: TN1pc0k84MOEm4uRm3UCul-gE9c.crl (hash: m+rFZlYTAfH0ZZtZ7n3tTufwJlwQqQ4nwqaQKrP7ncg=)
2: iTC7AIloz6nQaL3mT_rFGYZ-wig.roa (hash: fesaTZGLmhO2WzwSQegYz6bFqw2Ey8O4XUX49y7XEFA=)
3: uAJKiTWW3Ub4f2F2pRQzTM4uTxQ.roa (hash: QYC9wZJDQP4jalSd59izpnWdNPoZL5WfK7FyvYaliJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/a35f7f-2194-46d3-91bd-cc0f50bda159/1/TN1pc0k84MOEm4uRm3UCul-gE9c.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/a35f7f-2194-46d3-91bd-cc0f50bda159/1/TN1pc0k84MOEm4uRm3UCul-gE9c.mft
rsync://rpki.ripe.net/repository/DEFAULT/TN1pc0k84MOEm4uRm3UCul-gE9c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 11:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:f2:3d:37:d3:9a:d2:36:1d:ca:89:84:86:a6:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cdd6973493ce0c3849b8b919b7502ba5fa013d7
Validity
Not Before: Jun 28 11:01:21 2025 GMT
Not After : Jun 29 11:01:21 2025 GMT
Subject: CN=32c41b66a50227131a71b795f9d0ef5fba2faf60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ec:5b:bd:7b:75:4a:af:d3:1d:4a:64:da:b7:
96:df:5d:f9:31:5d:bd:7d:f1:08:f0:81:a4:72:2b:
cd:bc:a1:d7:66:e1:46:20:d8:46:33:6a:08:8e:7d:
ab:e8:22:d0:e6:4b:3c:5f:9c:af:fe:d1:aa:62:45:
59:a8:2a:ff:98:0d:39:b3:09:69:86:6a:da:47:d2:
4f:1a:0d:bb:af:f4:c0:be:64:ad:6e:41:ce:4e:51:
55:dc:3d:00:4c:e2:ec:b1:07:f9:98:12:03:2b:62:
ec:3b:0f:f5:68:2e:8b:9e:16:32:a3:a2:dc:33:65:
73:ac:1d:54:3b:e8:e6:ec:f0:2b:93:49:a9:7e:9a:
4c:e2:4a:ff:03:56:07:7e:e9:47:db:72:7a:3d:85:
8b:36:39:81:01:16:a8:d6:7c:17:99:44:18:75:45:
37:f4:a0:eb:96:52:46:fe:f0:7c:2a:e3:2c:ba:48:
49:0a:f5:ed:80:94:f4:c9:3f:17:97:5a:c1:21:8d:
e9:d8:c2:69:86:e0:1d:df:c3:4c:fc:18:37:ae:85:
7d:d8:8b:8b:46:d4:b0:3e:60:b5:6d:b2:8c:c3:a1:
60:c4:71:ed:ba:d7:fc:85:c3:03:d1:ed:2e:82:e6:
4c:f5:c7:cd:e0:3b:ae:1c:44:78:d3:26:a4:1d:0c:
04:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:C4:1B:66:A5:02:27:13:1A:71:B7:95:F9:D0:EF:5F:BA:2F:AF:60
X509v3 Authority Key Identifier:
keyid:4C:DD:69:73:49:3C:E0:C3:84:9B:8B:91:9B:75:02:BA:5F:A0:13:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TN1pc0k84MOEm4uRm3UCul-gE9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a35f7f-2194-46d3-91bd-cc0f50bda159/1/TN1pc0k84MOEm4uRm3UCul-gE9c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a35f7f-2194-46d3-91bd-cc0f50bda159/1/TN1pc0k84MOEm4uRm3UCul-gE9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:05:a9:f1:36:3c:4b:f9:1a:5f:d3:7e:5f:a4:15:6d:7f:c7:
25:0a:67:81:4a:23:f3:86:d8:7d:3e:11:ab:fe:c2:ed:32:d1:
5b:2c:ac:34:d7:70:93:04:ce:0d:8d:d9:f6:a0:44:e1:8e:1a:
de:37:c0:7c:3e:83:d7:45:3e:74:43:28:2a:d7:aa:a1:86:0f:
26:51:fc:15:94:6b:b3:23:90:3b:9e:62:e3:de:cd:b4:04:ed:
35:3d:f1:11:22:25:4b:f4:c6:3c:ba:3a:e5:89:55:5e:7a:55:
74:0a:9d:0c:cf:4f:59:f0:7a:82:8e:42:fc:05:d1:66:87:55:
90:ba:a9:eb:e0:6d:52:7f:01:c7:43:0c:95:e0:a7:e5:14:e0:
9b:e3:ab:17:a3:7a:13:7b:87:af:22:69:f7:55:58:0d:5c:41:
93:e0:99:9a:09:21:4d:35:9d:d7:64:49:25:79:25:84:3a:0c:
11:b4:53:e0:e1:67:ab:9a:72:30:95:01:15:53:ab:bd:71:36:
0d:16:a9:0c:3a:2e:b2:2d:93:2f:a5:4b:e4:3f:a3:07:92:12:
29:69:c7:23:20:82:75:8c:dd:39:22:f5:54:4a:00:e6:f5:8e:
25:f6:9b:a9:2e:04:39:45:ec:c8:2c:82:4f:51:a3:b8:21:ca:
d8:e7:67:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:34:46 2025 by rpki-client