Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/a07523-8392-47f5-82b3-30c430a398e6/1/TnKscetFB6wKZSpUWY2uRR_jP0c.mft
File: TnKscetFB6wKZSpUWY2uRR_jP0c.mft (raw, json)
Hash identifier: CWbcz8/l/6cD1hTvJv48Jxp5zW0y47RL5sPt1YbmvkE=
Subject key identifier: 8D:6C:07:09:95:5A:7A:63:24:34:2C:42:8A:80:3C:95:61:C4:38:8F
Authority key identifier: 4E:72:AC:71:EB:45:07:AC:0A:65:2A:54:59:8D:AE:45:1F:E3:3F:47
Certificate issuer: /CN=4e72ac71eb4507ac0a652a54598dae451fe33f47
Certificate serial: 0197B6D7B19CC3121F11E92211575362A729
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TnKscetFB6wKZSpUWY2uRR_jP0c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/a07523-8392-47f5-82b3-30c430a398e6/1/TnKscetFB6wKZSpUWY2uRR_jP0c.mft
Manifest number: 12E0
Signing time: Sat 28 Jun 2025 14:01:18 +0000
Manifest this update: Sat 28 Jun 2025 14:01:18 +0000
Manifest next update: Sun 29 Jun 2025 14:01:18 +0000
Files and hashes: 1: 4zuoqc0Glu6ApY4rQHmNAlxxavo.roa (hash: qDD4JCBpI34S2Q624/ndlMxJa6qHAv5moxaFgFJvL3I=)
2: TnKscetFB6wKZSpUWY2uRR_jP0c.crl (hash: 4E6bV6ZF1AfLlAff1otAXm61Egs3eDo8QAIdb3OROxw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/a07523-8392-47f5-82b3-30c430a398e6/1/TnKscetFB6wKZSpUWY2uRR_jP0c.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/a07523-8392-47f5-82b3-30c430a398e6/1/TnKscetFB6wKZSpUWY2uRR_jP0c.mft
rsync://rpki.ripe.net/repository/DEFAULT/TnKscetFB6wKZSpUWY2uRR_jP0c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:b1:9c:c3:12:1f:11:e9:22:11:57:53:62:a7:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e72ac71eb4507ac0a652a54598dae451fe33f47
Validity
Not Before: Jun 28 14:01:18 2025 GMT
Not After : Jun 29 14:01:18 2025 GMT
Subject: CN=8d6c0709955a7a6324342c428a803c9561c4388f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f8:4e:f3:59:8c:26:f6:e7:e3:27:57:82:4c:
b2:4f:1f:d0:8a:68:f6:37:b6:c6:c0:b3:56:b6:db:
22:de:c3:39:cd:36:40:67:94:72:ca:8d:d2:b1:55:
94:95:6b:23:b4:af:a5:01:4d:da:04:37:30:ee:92:
55:2e:a0:ae:13:b9:29:32:a3:52:1c:57:20:44:53:
ae:6c:c9:da:0f:84:20:b3:3a:82:ca:4e:d3:73:59:
09:70:5c:e9:5c:fa:47:07:90:3d:e8:9d:b0:5c:b8:
68:0d:4a:23:4a:d6:88:56:e5:dc:8c:9e:96:3c:10:
3d:55:72:25:65:10:29:a1:d9:2f:04:34:59:f8:9a:
b8:35:ca:84:a3:58:74:45:f3:86:ea:99:1e:b7:7d:
b3:47:85:cf:8d:dc:21:4f:2d:c0:0c:37:90:1d:2b:
f3:91:c1:db:ed:5b:0c:6f:67:5f:37:fe:db:ca:4d:
07:c0:e5:18:c9:b9:c3:19:47:57:ea:08:18:61:d2:
e6:e4:f2:be:36:d3:7f:7e:dd:51:36:fa:d3:e6:ac:
a0:e2:1d:7e:b7:e7:0f:2b:80:7f:fe:0c:c0:6e:33:
67:56:7a:e8:3a:ac:5d:cf:a4:81:ea:da:ee:1d:89:
04:24:17:93:5d:da:e7:a2:8b:9b:40:fb:16:9e:ba:
67:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:6C:07:09:95:5A:7A:63:24:34:2C:42:8A:80:3C:95:61:C4:38:8F
X509v3 Authority Key Identifier:
keyid:4E:72:AC:71:EB:45:07:AC:0A:65:2A:54:59:8D:AE:45:1F:E3:3F:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TnKscetFB6wKZSpUWY2uRR_jP0c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a07523-8392-47f5-82b3-30c430a398e6/1/TnKscetFB6wKZSpUWY2uRR_jP0c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a07523-8392-47f5-82b3-30c430a398e6/1/TnKscetFB6wKZSpUWY2uRR_jP0c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:d6:02:51:eb:cc:b2:64:03:11:65:b1:c3:6b:40:d2:32:34:
42:a5:b0:95:7d:5d:0e:af:e8:f2:46:76:cd:ef:ae:01:f1:1e:
2a:67:ae:20:7c:42:5b:dc:29:25:89:55:75:0a:a8:57:d7:af:
01:19:3e:2a:9c:db:17:d9:79:d2:b5:57:93:5f:ca:b9:c0:7c:
9e:a4:e8:85:f0:d7:76:e3:33:06:35:0f:64:75:02:4c:b8:86:
e8:dc:d4:76:5f:29:02:98:bb:92:9f:e0:37:46:4a:2a:d8:4e:
31:39:bd:a2:24:d8:03:93:36:c1:11:21:b5:8d:85:41:80:fc:
25:47:67:9f:ca:81:1d:2f:6a:ce:01:04:b2:61:c0:b7:72:12:
64:b3:8f:0d:81:78:6b:ff:2b:b6:2d:71:1e:39:69:e7:a6:90:
c9:f1:78:a1:29:5b:68:af:bd:56:ff:55:d1:07:f8:23:99:17:
5d:e4:08:78:0a:8f:e0:8e:46:ab:5a:39:2e:75:1d:12:55:29:
df:0f:ff:78:c9:0b:31:b4:38:88:54:ed:fb:e5:7c:d9:f8:8f:
88:f9:9b:e9:24:36:5f:2c:c3:2d:84:38:81:ab:dd:d3:65:9a:
8f:46:8f:78:e7:bd:fd:32:9c:b1:ce:65:0e:f6:c2:fb:f1:c4:
9a:c7:96:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:35:44 2025 by rpki-client