Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/ce876c-2c02-4775-8095-78d4a64d22d9/1/Ti0g8t5NV-G8ZFy2KH_4END1pL8.mft
File: Ti0g8t5NV-G8ZFy2KH_4END1pL8.mft (raw, json)
Hash identifier: 6ezQdvfLNUPeEDAqpswhJZ4BkwRzOoiNEqdJ4hgP8mk=
Subject key identifier: DD:C8:1A:AC:61:25:69:9F:E6:EB:52:F2:63:C2:08:27:7B:5C:3C:C1
Authority key identifier: 4E:2D:20:F2:DE:4D:57:E1:BC:64:5C:B6:28:7F:F8:10:D0:F5:A4:BF
Certificate issuer: /CN=4e2d20f2de4d57e1bc645cb6287ff810d0f5a4bf
Certificate serial: 019749310897C82EEC8E5553E715B8CF44CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ti0g8t5NV-G8ZFy2KH_4END1pL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/ce876c-2c02-4775-8095-78d4a64d22d9/1/Ti0g8t5NV-G8ZFy2KH_4END1pL8.mft
Manifest number: 042E
Signing time: Sat 07 Jun 2025 07:00:39 +0000
Manifest this update: Sat 07 Jun 2025 07:00:39 +0000
Manifest next update: Sun 08 Jun 2025 07:00:39 +0000
Files and hashes: 1: Ti0g8t5NV-G8ZFy2KH_4END1pL8.crl (hash: f21kqn5ytt70MYJcx1tHKiCWvi9oGBAtpYOs1iU4VUg=)
2: h73609pmEogi1mr5yal1sNR_aIM.roa (hash: xECkne1ZTJO+2XS9UZa/R12Y+brbcjW087xGv2+aPVU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/ce876c-2c02-4775-8095-78d4a64d22d9/1/Ti0g8t5NV-G8ZFy2KH_4END1pL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/ce876c-2c02-4775-8095-78d4a64d22d9/1/Ti0g8t5NV-G8ZFy2KH_4END1pL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ti0g8t5NV-G8ZFy2KH_4END1pL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:31:08:97:c8:2e:ec:8e:55:53:e7:15:b8:cf:44:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e2d20f2de4d57e1bc645cb6287ff810d0f5a4bf
Validity
Not Before: Jun 7 07:00:39 2025 GMT
Not After : Jun 8 07:00:39 2025 GMT
Subject: CN=ddc81aac6125699fe6eb52f263c208277b5c3cc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b0:de:66:01:dc:20:fe:47:38:dc:63:0d:47:
97:6e:f9:ba:87:a8:9a:0d:b9:3e:f6:73:a7:61:90:
7f:1b:2d:2c:b3:66:ae:57:80:f8:67:6a:a9:0a:41:
c5:fb:24:2b:d6:d4:a0:f9:41:26:08:f1:5a:bd:3a:
15:88:5f:06:f7:4f:3c:b4:97:04:49:00:b2:c9:65:
ac:b4:00:8d:5d:a2:d3:00:51:ed:20:f6:35:07:09:
06:95:54:eb:f8:df:2a:b1:fb:7a:f5:33:3f:4c:8f:
93:fc:26:37:40:58:14:7b:04:33:c2:f6:e0:4d:e4:
35:86:8f:08:7a:79:fd:50:87:ef:ce:3a:0e:ae:61:
f0:f9:2a:a0:1f:4d:25:4c:22:88:be:23:97:66:1b:
86:07:c9:b5:b1:54:5c:ff:63:52:ed:5f:76:31:a6:
58:9c:25:ae:21:8a:af:f8:c3:15:1e:f9:1d:76:18:
e0:e0:50:5b:33:ee:68:a8:06:b2:53:86:d6:f7:2b:
1e:cf:e7:48:6c:47:fb:8b:bf:25:7a:d6:e5:50:3a:
00:1e:e0:f6:e5:52:82:0d:df:0c:93:b1:71:1d:dd:
33:e2:8f:f9:b4:f7:23:05:8a:3c:40:42:39:f6:3b:
ba:75:5e:16:8f:c2:2c:67:28:08:a6:bf:72:91:a4:
c9:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:C8:1A:AC:61:25:69:9F:E6:EB:52:F2:63:C2:08:27:7B:5C:3C:C1
X509v3 Authority Key Identifier:
keyid:4E:2D:20:F2:DE:4D:57:E1:BC:64:5C:B6:28:7F:F8:10:D0:F5:A4:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ti0g8t5NV-G8ZFy2KH_4END1pL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/ce876c-2c02-4775-8095-78d4a64d22d9/1/Ti0g8t5NV-G8ZFy2KH_4END1pL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/ce876c-2c02-4775-8095-78d4a64d22d9/1/Ti0g8t5NV-G8ZFy2KH_4END1pL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:b3:01:dc:62:38:8a:85:e6:86:9d:f9:77:5e:17:56:6b:ba:
80:0e:ce:e4:b9:be:b9:5d:76:9d:f9:e7:c9:c9:a8:c2:aa:8d:
e9:0c:88:8b:85:44:1f:0a:83:b5:97:34:9c:8d:a4:1f:5c:c6:
8c:dc:b9:7d:51:5c:16:35:63:d8:63:c9:6c:07:4f:1e:05:07:
0c:70:78:fe:ae:40:d1:61:d4:e3:b5:b1:ef:8b:46:0b:61:22:
1d:d7:33:28:ee:78:16:d3:2a:e3:d7:66:f6:e0:84:61:df:6f:
04:10:c6:fb:22:29:34:a9:f5:a1:16:c4:33:67:1e:88:05:56:
0d:22:cf:3c:ce:62:ea:b3:ef:95:66:fa:e6:74:dd:84:9f:a3:
5a:78:6c:c4:03:19:8d:80:65:ef:a8:18:be:d5:d6:81:47:a2:
af:7f:fc:31:9c:94:74:c4:1a:2d:31:df:64:00:b8:32:8d:2f:
74:7a:91:73:4e:f9:3c:1e:54:ea:0c:7a:81:1b:c0:b6:40:80:
10:8c:00:e6:2c:9d:07:05:ad:2b:0e:7a:9e:e8:25:05:1c:84:
db:50:e1:b8:38:e8:8f:43:cb:e8:d6:64:6c:c5:97:ab:9a:20:
5b:05:6d:63:6d:1f:4f:5c:1f:a3:6d:e3:79:bc:1c:0e:6c:59:
c6:be:c5:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:53:33 2025 by rpki-client