Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/220b38-77ca-4de4-8b86-9f845c546470/1/TjbM4hQsoYtQWJcVjSblg50rQX8.mft
File: TjbM4hQsoYtQWJcVjSblg50rQX8.mft (raw, json)
Hash identifier: Mba78Kle1Y1xQYx3S9fanHzEQXkFDPrshhceTDaQ1Cc=
Subject key identifier: 3E:C9:3A:53:5C:C9:4B:6E:4C:81:C4:14:4F:D5:2B:98:D9:B8:3E:50
Authority key identifier: 4E:36:CC:E2:14:2C:A1:8B:50:58:97:15:8D:26:E5:83:9D:2B:41:7F
Certificate issuer: /CN=4e36cce2142ca18b505897158d26e5839d2b417f
Certificate serial: 0197580033691272C027786318A1DC58C508
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TjbM4hQsoYtQWJcVjSblg50rQX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/220b38-77ca-4de4-8b86-9f845c546470/1/TjbM4hQsoYtQWJcVjSblg50rQX8.mft
Manifest number: 1584
Signing time: Tue 10 Jun 2025 04:01:37 +0000
Manifest this update: Tue 10 Jun 2025 04:01:37 +0000
Manifest next update: Wed 11 Jun 2025 04:01:37 +0000
Files and hashes: 1: TjbM4hQsoYtQWJcVjSblg50rQX8.crl (hash: AbWf2T8MSMXVkYhPazx3gX1zrCwQYsbq11JDHcbgJKY=)
2: XbP44H3vmNpq_6C_0jvpv9umOf0.roa (hash: DcrY51YDFwazT333yz0LqnUGv8gSeHfRdQ2uMNMEV+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/220b38-77ca-4de4-8b86-9f845c546470/1/TjbM4hQsoYtQWJcVjSblg50rQX8.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/220b38-77ca-4de4-8b86-9f845c546470/1/TjbM4hQsoYtQWJcVjSblg50rQX8.mft
rsync://rpki.ripe.net/repository/DEFAULT/TjbM4hQsoYtQWJcVjSblg50rQX8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 04:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:58:00:33:69:12:72:c0:27:78:63:18:a1:dc:58:c5:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e36cce2142ca18b505897158d26e5839d2b417f
Validity
Not Before: Jun 10 04:01:37 2025 GMT
Not After : Jun 11 04:01:37 2025 GMT
Subject: CN=3ec93a535cc94b6e4c81c4144fd52b98d9b83e50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:60:1c:0e:b2:99:6d:1b:4a:e5:da:cf:16:fc:
c8:64:fa:4d:85:ff:ee:c1:ad:4e:23:18:d3:28:05:
47:3f:b2:17:f9:68:a8:57:b2:44:76:78:0a:8e:2a:
a7:7f:d2:13:95:f6:6e:7c:95:22:3f:0a:ba:c8:81:
79:bc:c8:99:0f:39:48:9d:22:2e:05:2c:79:18:04:
9c:3f:5f:16:00:13:cf:aa:ec:86:d0:41:9a:e2:20:
fa:34:09:3c:97:89:18:57:5a:c6:52:5b:a0:29:96:
4f:25:4c:ea:2b:32:5a:ab:c5:22:ed:52:65:16:49:
78:f5:9e:6a:a4:9d:12:8d:1d:ff:9f:3d:9a:12:c3:
79:23:44:f6:95:c1:b1:84:7a:47:72:48:4d:5e:0a:
f6:cf:92:e4:f2:a1:9b:cc:e5:ce:e9:6a:57:89:1c:
f6:e9:be:7c:9e:0b:4b:59:56:0a:29:e1:de:34:0f:
6b:aa:de:40:fe:65:6b:58:38:c4:aa:6a:39:40:23:
52:d5:d5:75:f2:30:39:1a:72:a4:a2:c3:1e:75:f9:
a8:ad:92:7d:f7:e9:ce:7d:db:ee:43:1e:da:ef:c5:
20:fb:b4:1b:48:cc:ee:70:6b:e7:2e:f7:aa:79:91:
e7:59:0c:7b:9e:bf:63:6e:25:3f:57:62:6b:f7:02:
2e:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:C9:3A:53:5C:C9:4B:6E:4C:81:C4:14:4F:D5:2B:98:D9:B8:3E:50
X509v3 Authority Key Identifier:
keyid:4E:36:CC:E2:14:2C:A1:8B:50:58:97:15:8D:26:E5:83:9D:2B:41:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TjbM4hQsoYtQWJcVjSblg50rQX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/220b38-77ca-4de4-8b86-9f845c546470/1/TjbM4hQsoYtQWJcVjSblg50rQX8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/220b38-77ca-4de4-8b86-9f845c546470/1/TjbM4hQsoYtQWJcVjSblg50rQX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:1c:8b:38:19:7b:37:cc:aa:80:ec:f2:ea:eb:71:f4:ac:9e:
47:1c:21:08:c5:e4:76:88:de:30:19:95:49:9c:de:70:49:4a:
e9:ad:31:ff:55:5e:68:aa:4b:a2:01:2b:e7:25:49:3d:19:e6:
8d:60:21:0e:0b:5d:e4:50:11:4a:d0:e5:4e:39:02:73:b2:bd:
43:38:7c:20:05:14:08:6e:ca:a7:48:8e:6e:e5:23:fe:cb:fa:
56:16:5c:59:cd:54:6f:04:07:ac:11:f6:59:d0:14:1c:af:4e:
7b:55:f5:6e:ba:31:11:16:a5:90:b7:b8:ba:a1:86:0e:c0:b4:
91:10:8e:d4:1f:1c:4c:73:ed:cf:21:cf:88:29:e3:17:bb:8b:
c7:fb:d7:b6:0c:ab:20:37:09:fb:1b:08:55:0a:16:a1:1b:fb:
4a:42:67:c5:07:1b:3a:95:b4:ce:0a:49:9e:c5:d9:2b:2d:5c:
84:c5:32:53:37:6f:54:70:3e:9d:c6:91:a8:8b:f5:72:6b:6c:
d5:dd:82:99:32:a7:3e:50:6a:5a:48:f6:06:6c:4a:cc:68:77:
1b:c4:43:42:bb:b6:d9:c2:35:37:c3:aa:05:86:08:08:d7:68:
e9:e4:97:66:5d:78:51:48:e1:e2:f6:8d:6a:55:be:ca:7b:6c:
8b:66:78:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 16:04:09 2025 by rpki-client