Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/1f82e5-3098-453a-af64-cab717a809e7/1/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.mft
File: tmd58gVbJU9dWzKS7q8N1Xl3N6Y.mft (raw, json)
Hash identifier: G3qgBc9xyrTO5vyTS06AQ1RDHRZNatvEwlWqUQWbV8U=
Subject key identifier: 46:E7:AF:09:C8:0E:98:4D:92:39:48:73:80:22:C3:BC:81:F8:95:1C
Authority key identifier: B6:67:79:F2:05:5B:25:4F:5D:5B:32:92:EE:AF:0D:D5:79:77:37:A6
Certificate issuer: /CN=b66779f2055b254f5d5b3292eeaf0dd5797737a6
Certificate serial: 01974930F78073195760320AEDC79045F2EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/1f82e5-3098-453a-af64-cab717a809e7/1/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.mft
Manifest number: 0AD7
Signing time: Sat 07 Jun 2025 07:00:35 +0000
Manifest this update: Sat 07 Jun 2025 07:00:35 +0000
Manifest next update: Sun 08 Jun 2025 07:00:35 +0000
Files and hashes: 1: DWyS6ktuYXD1HWtRdim_tw6aAHw.roa (hash: ZpPs8QmClGInLrYdfgabA/tiTnRpT7Agrz+vwk6fAyc=)
2: ebklZqmx0-dRJX-3stcdCCjPSZQ.roa (hash: oxCqtL4IdqqluHjcszErTou8uGJlC2MCnMVsPPzgZCM=)
3: tmd58gVbJU9dWzKS7q8N1Xl3N6Y.crl (hash: aaZVF3pnRzg5uInOy72YFbfxtUbf4RhaE350HfQNg6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/1f82e5-3098-453a-af64-cab717a809e7/1/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/1f82e5-3098-453a-af64-cab717a809e7/1/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:30:f7:80:73:19:57:60:32:0a:ed:c7:90:45:f2:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b66779f2055b254f5d5b3292eeaf0dd5797737a6
Validity
Not Before: Jun 7 07:00:35 2025 GMT
Not After : Jun 8 07:00:35 2025 GMT
Subject: CN=46e7af09c80e984d923948738022c3bc81f8951c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e7:b5:2a:8d:24:97:2f:f5:18:66:22:0f:2e:
18:f4:0f:85:ba:06:6c:36:ab:d7:5f:2b:ef:dd:28:
c1:87:46:3d:9f:d4:af:b2:33:b4:43:39:69:54:62:
5a:54:a5:e2:28:f6:e6:3c:28:48:ad:30:58:03:5a:
ba:12:4e:06:e9:2b:6b:e2:4b:fb:b1:5c:3d:1f:d3:
94:35:4a:b7:c2:8d:b9:5f:a7:2a:d8:21:4d:bd:e6:
e8:77:d1:18:0d:c9:03:95:63:d3:20:0f:43:93:cb:
93:c8:3b:47:4a:a9:b2:9a:9a:4a:b3:aa:e2:c9:0a:
68:a0:84:5b:8a:0f:b0:f9:a6:86:52:65:fa:1b:23:
27:24:70:d4:c5:b4:ec:4e:47:9f:50:ae:17:a7:f2:
0a:83:d3:4c:d1:84:1f:b4:a4:55:cd:3b:01:4d:a7:
19:08:7f:68:34:85:6b:f4:37:06:c1:c3:dc:7a:7c:
fe:b4:a1:8d:f9:85:b9:b4:57:d8:1c:f2:a0:a7:27:
90:93:1a:a1:8d:4b:b5:b1:2e:19:9f:ab:96:a6:17:
6e:e1:f9:b8:0a:da:38:ce:87:43:98:99:63:d6:d4:
a1:24:c6:40:40:f0:c2:24:2f:92:8c:bc:8f:2f:32:
20:c3:fc:d4:f7:5e:95:b5:7c:f1:fe:4c:e4:d8:d5:
54:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:E7:AF:09:C8:0E:98:4D:92:39:48:73:80:22:C3:BC:81:F8:95:1C
X509v3 Authority Key Identifier:
keyid:B6:67:79:F2:05:5B:25:4F:5D:5B:32:92:EE:AF:0D:D5:79:77:37:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/1f82e5-3098-453a-af64-cab717a809e7/1/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/1f82e5-3098-453a-af64-cab717a809e7/1/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:0d:d6:0f:c1:5b:f2:d5:35:fc:86:c7:da:33:ac:fb:9a:54:
0c:64:7e:47:78:57:ed:08:17:d6:d9:d7:e0:56:9c:2a:77:37:
b6:86:93:4d:f5:71:48:3c:5c:b9:7d:44:e4:eb:dc:4f:5b:8e:
9f:fb:86:7a:24:24:45:a0:23:f0:e7:d1:c6:c5:a2:bf:a8:90:
25:98:ca:a4:5e:df:53:5b:52:ff:4b:35:6d:a5:e1:c3:11:a5:
7d:f7:ea:8a:d6:00:05:68:7a:5d:5b:d3:65:6d:e5:45:28:fb:
64:f2:f7:b8:a6:9c:b8:ca:58:23:3a:e7:1c:bc:be:75:1c:1c:
ca:6d:cc:ab:94:58:c6:bf:66:8c:86:b8:dd:1d:2f:f7:34:16:
bb:7d:d0:74:49:1d:60:2f:57:69:15:6d:b4:5c:6c:af:ae:09:
80:c4:93:70:83:8c:9e:7c:26:3c:fe:ab:95:87:8b:d8:14:95:
d5:59:ec:90:59:fd:28:31:89:6f:65:3b:5a:dd:eb:50:0f:fa:
36:56:e8:11:16:88:3a:f8:22:32:8a:11:d9:93:df:83:88:c7:
29:b8:48:53:77:f4:6f:b5:13:27:13:a7:1c:26:f6:84:28:88:
18:ae:87:14:a3:04:4a:fe:f4:80:9e:e5:b4:a9:ae:63:f4:c8:
04:a2:d9:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 10:38:55 2025 by rpki-client