Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/68c296-69b2-4070-9ff9-4243decad360/1/tfrsS42ZLda5zYmoSJ08OmUq7NI.mft
File: tfrsS42ZLda5zYmoSJ08OmUq7NI.mft (raw, json)
Hash identifier: 6OIJCicozmp937QNrCu3Tz39lQGVqhm0J8zSnZUfEwk=
Subject key identifier: 9F:E9:77:47:4C:1E:B3:4E:6C:39:F4:D0:01:D4:46:3E:F7:47:97:37
Authority key identifier: B5:FA:EC:4B:8D:99:2D:D6:B9:CD:89:A8:48:9D:3C:3A:65:2A:EC:D2
Certificate issuer: /CN=b5faec4b8d992dd6b9cd89a8489d3c3a652aecd2
Certificate serial: 01974D44B7C6AB3F47585170FD255C00F3C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tfrsS42ZLda5zYmoSJ08OmUq7NI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/68c296-69b2-4070-9ff9-4243decad360/1/tfrsS42ZLda5zYmoSJ08OmUq7NI.mft
Manifest number: 157D
Signing time: Sun 08 Jun 2025 02:00:38 +0000
Manifest this update: Sun 08 Jun 2025 02:00:38 +0000
Manifest next update: Mon 09 Jun 2025 02:00:38 +0000
Files and hashes: 1: 4yLFcyM54Hv8nF5ON-TIrD-1oYQ.roa (hash: hE+OT4FiIcXi0TRuDiRDYqpuBeR4hhUYci4sdFCd/CY=)
2: jKEy0LJLh7AqTPNLnCDWho1dIJ0.roa (hash: BKRsVG5h+FxIv9YJSObhtgL9EqcN1BIPxpc/4d7NHx4=)
3: tfrsS42ZLda5zYmoSJ08OmUq7NI.crl (hash: tthhsH2kXs7Dc1+CVDko1tPSanKAv4Eme/DjWUJTqYM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/68c296-69b2-4070-9ff9-4243decad360/1/tfrsS42ZLda5zYmoSJ08OmUq7NI.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/68c296-69b2-4070-9ff9-4243decad360/1/tfrsS42ZLda5zYmoSJ08OmUq7NI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tfrsS42ZLda5zYmoSJ08OmUq7NI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 02:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:44:b7:c6:ab:3f:47:58:51:70:fd:25:5c:00:f3:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5faec4b8d992dd6b9cd89a8489d3c3a652aecd2
Validity
Not Before: Jun 8 02:00:38 2025 GMT
Not After : Jun 9 02:00:38 2025 GMT
Subject: CN=9fe977474c1eb34e6c39f4d001d4463ef7479737
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f7:32:87:7e:01:b9:1e:04:cb:2d:aa:d6:ab:
3e:8f:03:c9:83:3f:1b:a4:6f:f8:4d:a0:ad:a0:16:
85:e8:08:09:49:73:8a:1e:36:a9:1e:ac:bf:71:ac:
c9:7e:b1:00:ae:03:f8:78:18:f1:b3:c4:15:36:0c:
00:dd:ea:1f:62:af:1b:dc:60:a5:be:fe:41:62:ff:
18:74:61:d1:20:51:84:2c:67:5c:46:4d:7f:c9:d1:
6b:b5:a0:54:b8:fa:ca:1c:07:65:f1:8b:5e:19:c6:
2d:fb:9a:98:80:10:79:d5:7d:8d:bc:a8:9f:a7:13:
0f:c9:ab:f5:be:5e:de:88:df:b2:73:71:13:73:7c:
eb:21:35:10:7f:a0:e3:fe:ce:ee:5c:71:b6:d7:e8:
be:1f:dc:45:73:37:de:fc:d8:53:23:3e:cf:c6:aa:
b4:5c:c6:3f:1d:8f:00:7a:16:4e:19:1e:f3:10:4b:
39:2c:24:01:e7:fd:94:c3:dd:b8:ee:00:76:87:ed:
93:6e:3a:53:e8:62:6a:63:31:45:ce:3a:95:d5:53:
ff:1f:44:e1:32:89:b1:72:81:52:b5:12:0e:61:8f:
5c:7e:a6:7e:50:58:a9:20:ca:d5:dd:9a:ce:8a:a9:
e2:65:f8:6e:40:31:df:4c:7c:08:1f:91:a6:8f:84:
24:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:E9:77:47:4C:1E:B3:4E:6C:39:F4:D0:01:D4:46:3E:F7:47:97:37
X509v3 Authority Key Identifier:
keyid:B5:FA:EC:4B:8D:99:2D:D6:B9:CD:89:A8:48:9D:3C:3A:65:2A:EC:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tfrsS42ZLda5zYmoSJ08OmUq7NI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/68c296-69b2-4070-9ff9-4243decad360/1/tfrsS42ZLda5zYmoSJ08OmUq7NI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/68c296-69b2-4070-9ff9-4243decad360/1/tfrsS42ZLda5zYmoSJ08OmUq7NI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:26:f4:a5:94:c9:f4:0b:25:c5:6b:47:28:ca:7e:e9:e5:87:
7d:7f:c7:88:d3:a3:37:4b:38:1d:52:3a:01:c6:72:85:72:81:
7c:10:bd:f8:06:42:fc:29:29:13:ae:67:f6:11:7f:59:4c:39:
45:b1:c7:42:05:5a:a7:68:88:37:85:ac:c0:7c:56:01:46:e6:
c3:f4:b2:2c:e8:39:c2:a8:b5:61:a3:53:40:15:4d:2c:83:64:
64:0e:30:cf:ba:8f:b6:b8:c3:1f:e9:73:95:c1:45:e6:63:de:
91:3c:73:5d:2a:09:a0:1d:ad:c7:34:1a:bb:47:24:d7:66:0c:
da:8a:8d:8e:ee:12:ac:03:28:df:52:ab:84:59:d2:e7:13:7a:
6f:9f:6b:bc:b0:ea:4d:9a:6b:f3:5c:55:42:15:49:81:a0:39:
eb:28:80:bd:d0:51:91:4a:65:d2:6d:ce:b9:19:b5:98:ee:0b:
88:38:47:7e:e0:70:ea:fd:e8:17:0a:f4:fe:05:c6:63:09:98:
54:37:42:3b:c0:56:40:d1:0a:76:b1:ff:ab:89:cf:c9:a0:a5:
e0:e8:15:d5:6d:61:a7:a8:69:12:31:88:de:e5:28:00:98:18:
76:f5:a2:c2:b8:38:ce:02:4f:00:31:32:30:55:06:4c:34:8c:
14:02:ca:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:30:53 2025 by rpki-client