Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/8e1198-e50f-416f-9d6b-1e9bff5e4021/1/TfCXBITrJrxZ_Y-o1b98PHIS0BE.mft
File: TfCXBITrJrxZ_Y-o1b98PHIS0BE.mft (raw, json)
Hash identifier: fZmBdJ34xNEB3VovtbJWFOzcMDMjeBqbXFYUNM4BEdY=
Subject key identifier: C5:39:1B:7E:F9:C7:B0:E4:8C:B0:2F:4C:4F:96:8B:63:51:E7:D1:2D
Authority key identifier: 4D:F0:97:04:84:EB:26:BC:59:FD:8F:A8:D5:BF:7C:3C:72:12:D0:11
Certificate issuer: /CN=4df0970484eb26bc59fd8fa8d5bf7c3c7212d011
Certificate serial: 019745C2A329E418255ED0DF8AF21CD58081
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TfCXBITrJrxZ_Y-o1b98PHIS0BE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/8e1198-e50f-416f-9d6b-1e9bff5e4021/1/TfCXBITrJrxZ_Y-o1b98PHIS0BE.mft
Manifest number: 0B1A
Signing time: Fri 06 Jun 2025 15:01:13 +0000
Manifest this update: Fri 06 Jun 2025 15:01:13 +0000
Manifest next update: Sat 07 Jun 2025 15:01:13 +0000
Files and hashes: 1: RdCbQ_v6C3AqgUPprLsURH8LT5w.roa (hash: kXBabjQsEi+6w0J2wLx2a1ynhFaoOMH+SG7D7xchscI=)
2: TfCXBITrJrxZ_Y-o1b98PHIS0BE.crl (hash: SntgO4MX6Yv2WF4iAdDCtXY49cmEoBwRBOI2/SrZLe4=)
3: lJrwoyCHk-KhLsTndl2kfTJmzS0.roa (hash: QQVDCU2+xswVxXyXjpbkieNuyjdGUltA6OYqC3/o4lo=)
4: ukETrBXaXN-UD0p_P4lkBp13yEg.roa (hash: 1tDW+L2GN0E1ucMKdwQbOBeshAxIT1tSiJJRpkDWW6c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/8e1198-e50f-416f-9d6b-1e9bff5e4021/1/TfCXBITrJrxZ_Y-o1b98PHIS0BE.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/8e1198-e50f-416f-9d6b-1e9bff5e4021/1/TfCXBITrJrxZ_Y-o1b98PHIS0BE.mft
rsync://rpki.ripe.net/repository/DEFAULT/TfCXBITrJrxZ_Y-o1b98PHIS0BE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:45:c2:a3:29:e4:18:25:5e:d0:df:8a:f2:1c:d5:80:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4df0970484eb26bc59fd8fa8d5bf7c3c7212d011
Validity
Not Before: Jun 6 15:01:13 2025 GMT
Not After : Jun 7 15:01:13 2025 GMT
Subject: CN=c5391b7ef9c7b0e48cb02f4c4f968b6351e7d12d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9d:d7:35:7f:e5:71:ad:b2:81:95:2d:0d:81:
4c:72:55:30:2f:0f:84:86:af:f7:3c:69:bc:28:60:
1c:5d:d9:ef:4f:e6:ab:38:39:d1:0f:52:e4:a0:55:
9a:92:fc:18:0e:3d:19:20:bc:af:87:85:43:42:c2:
b3:d4:70:d4:12:16:b2:f0:6d:92:91:ee:28:2b:d3:
6b:44:57:41:c5:a0:13:ac:42:08:4c:f3:78:4a:92:
e2:6d:50:4f:5d:f3:fd:ec:32:e0:d2:84:23:db:05:
10:41:1b:0c:40:40:77:11:52:c8:b7:ae:2a:18:22:
22:3d:62:89:e0:fc:0c:56:36:a5:3c:fe:c2:ad:07:
0a:93:94:0a:65:20:d4:e4:d5:13:51:c8:ba:70:1f:
8a:11:01:60:c8:c4:05:09:15:60:9b:4e:d0:e6:4c:
d6:49:fa:74:6a:44:37:04:65:fe:04:88:90:02:ae:
1b:b8:37:84:5a:76:30:f1:7d:c0:62:2d:27:09:8a:
10:a9:fd:93:03:af:f7:77:7c:04:83:26:47:85:2a:
8b:99:14:80:04:64:2e:c6:51:97:f6:3c:a3:1b:59:
f0:76:76:96:f0:4d:bd:d8:61:99:e1:10:9f:0f:35:
8b:cd:35:9f:52:f2:16:6e:63:92:03:3a:ea:43:1f:
ef:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:39:1B:7E:F9:C7:B0:E4:8C:B0:2F:4C:4F:96:8B:63:51:E7:D1:2D
X509v3 Authority Key Identifier:
keyid:4D:F0:97:04:84:EB:26:BC:59:FD:8F:A8:D5:BF:7C:3C:72:12:D0:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TfCXBITrJrxZ_Y-o1b98PHIS0BE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8e1198-e50f-416f-9d6b-1e9bff5e4021/1/TfCXBITrJrxZ_Y-o1b98PHIS0BE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8e1198-e50f-416f-9d6b-1e9bff5e4021/1/TfCXBITrJrxZ_Y-o1b98PHIS0BE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:3f:5b:df:3a:e7:a2:be:a4:ce:bd:cd:20:42:aa:b1:b2:ad:
20:33:cd:02:4c:db:93:b0:fe:36:4f:44:9c:54:6a:46:9b:e8:
ec:c3:22:90:9f:47:2a:45:c6:1a:06:c1:12:ec:59:cb:31:c0:
7f:91:c7:69:8e:c0:d0:f3:d6:e5:76:fd:fa:a2:3c:a3:49:9b:
a8:3e:d6:1e:ac:3e:5e:d2:2b:d4:6a:7a:cf:49:c9:0c:a3:32:
0c:68:b6:8a:fc:1d:01:73:aa:55:44:de:a0:6c:92:25:a7:e0:
7d:e5:df:82:64:35:d7:96:25:01:8e:e0:6e:e6:38:b6:e2:33:
ca:63:bb:5d:b6:88:16:7c:fd:74:01:46:d2:b8:9c:7b:c4:c8:
dd:ea:db:14:43:e4:a9:a5:02:72:b9:a2:9c:38:9f:17:7a:fa:
1b:fe:0e:b3:68:94:4d:4e:1b:01:0a:2c:e2:9d:b9:a2:e1:b2:
b2:ce:47:d3:36:be:24:12:02:6f:39:e9:4f:7a:eb:f3:78:a2:
2a:d6:97:8e:c7:de:2e:ae:e9:81:81:da:e7:f7:0c:44:28:d5:
76:f1:dc:2e:db:2f:b6:3b:3b:f6:fe:8d:5b:d7:80:8d:89:1c:
2d:21:9f:01:27:a7:da:ac:08:e1:ee:22:38:de:69:c8:c2:6e:
28:6c:5d:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:05:33 2025 by rpki-client