Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.mft
File: tMgU_8pTEIYqIiTwr9kMqpasC1Q.mft (raw, json)
Hash identifier: U93foLE2gLp2S9u4JkzrkLqmwX3A5J/wN0Ftw9qU7vo=
Subject key identifier: 56:59:10:53:3E:41:4C:2D:7B:0D:34:43:C7:72:10:99:94:CE:8B:AF
Authority key identifier: B4:C8:14:FF:CA:53:10:86:2A:22:24:F0:AF:D9:0C:AA:96:AC:0B:54
Certificate issuer: /CN=b4c814ffca5310862a2224f0afd90caa96ac0b54
Certificate serial: 0197496844A58825DCDB70113203E0E87F08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tMgU_8pTEIYqIiTwr9kMqpasC1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.mft
Manifest number: 04C6
Signing time: Sat 07 Jun 2025 08:00:59 +0000
Manifest this update: Sat 07 Jun 2025 08:00:59 +0000
Manifest next update: Sun 08 Jun 2025 08:00:59 +0000
Files and hashes: 1: JboF5duYkSjIw0cFCDow2D7hhYA.roa (hash: 5ee85IvEdLLZLBu0IK/0DK9QgLyt71g8oPTMmxnM7ss=)
2: bPHOfPhRt9UxNoPYUZyx6NkEcPE.roa (hash: l5CD77LRDYrviJN2I+kUm6dy7C8YOi2kiqH568j84ZE=)
3: tMgU_8pTEIYqIiTwr9kMqpasC1Q.crl (hash: mXZNyekkUlDXy+U4ohaZN5kZn+raRwrZ3uBmbjv0MNs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/tMgU_8pTEIYqIiTwr9kMqpasC1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:68:44:a5:88:25:dc:db:70:11:32:03:e0:e8:7f:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4c814ffca5310862a2224f0afd90caa96ac0b54
Validity
Not Before: Jun 7 08:00:59 2025 GMT
Not After : Jun 8 08:00:59 2025 GMT
Subject: CN=565910533e414c2d7b0d3443c772109994ce8baf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:3c:0a:cd:cf:7c:85:ea:b8:6c:b0:08:21:40:
a2:1d:67:be:49:f0:ad:a4:89:a5:d5:17:39:2e:96:
7d:5f:63:38:c1:af:46:aa:e7:bd:3f:d9:f6:41:02:
75:fb:14:3b:b1:bd:96:ae:b7:7b:20:ba:7c:97:49:
78:1f:20:ca:30:c8:26:8a:d2:85:9c:50:df:1f:9a:
c6:7b:62:a2:20:4e:ea:01:11:f1:8f:2a:88:4a:ad:
1f:26:66:b8:97:d5:58:ce:95:81:38:35:60:98:48:
4b:a8:b7:26:d0:a3:10:a8:dc:f5:57:4a:9c:0e:36:
6e:e4:20:35:47:e9:35:11:45:ca:2a:3d:c8:fc:1d:
d6:22:63:3f:a2:9c:73:ed:c9:77:d1:97:75:a7:30:
a4:74:3e:8d:e7:6d:7f:17:a9:8d:08:5a:20:fe:74:
f1:0e:af:a5:86:f2:f6:24:f1:04:50:9e:5a:c5:35:
48:31:cd:ff:4c:61:d0:e0:f6:d7:b4:ce:d8:0c:11:
cf:fe:ed:07:e1:77:0c:0a:84:37:2b:40:cb:0b:a0:
7c:cc:29:c5:ed:0a:44:dd:5e:2c:47:5d:7d:e6:ec:
cc:b2:3b:88:3c:aa:36:9a:e8:dc:0e:59:1c:f3:48:
a7:8b:7c:0a:b5:c2:69:78:bd:ed:5b:49:ae:e4:f9:
b2:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:59:10:53:3E:41:4C:2D:7B:0D:34:43:C7:72:10:99:94:CE:8B:AF
X509v3 Authority Key Identifier:
keyid:B4:C8:14:FF:CA:53:10:86:2A:22:24:F0:AF:D9:0C:AA:96:AC:0B:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tMgU_8pTEIYqIiTwr9kMqpasC1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:aa:67:d6:11:00:5f:e1:dc:84:49:bb:1b:83:b4:f1:67:6a:
46:d9:5b:0b:3c:19:5e:b9:0c:80:9e:1b:d1:5e:c4:d7:4d:51:
90:4e:59:ab:d1:20:b2:6d:98:cf:92:9a:2a:3c:02:2d:fa:8b:
21:37:1c:bd:ee:7c:0a:0d:32:ef:26:e5:f8:d4:b7:08:0e:03:
94:3a:13:32:0a:82:d8:e5:9a:b1:02:74:5c:d3:a3:2a:cc:96:
9a:27:79:69:94:8a:a4:b2:c4:df:58:bb:3c:04:c7:ff:fb:4d:
71:d0:d4:75:e6:fc:c0:87:df:18:c0:de:90:91:ae:c1:06:5f:
62:c3:ea:de:ec:ae:9b:fe:4d:40:ee:76:11:64:75:fc:09:23:
a1:f8:34:e8:4b:9c:88:75:71:50:60:b9:5a:e9:31:39:a8:c0:
28:a3:6a:51:ee:a2:b3:b0:b4:40:62:49:8e:8b:98:0b:0c:98:
22:f5:0a:27:33:1e:ec:c3:ab:9e:d2:72:cb:a6:d7:15:01:7e:
cf:3f:e6:63:89:ac:09:08:bd:0c:ca:84:2a:fc:52:59:7e:37:
77:33:08:e8:ee:61:7e:7e:83:09:84:fe:b2:f2:a7:ec:03:7f:
58:51:70:b3:70:02:fa:76:df:35:dd:32:1d:1d:c7:96:36:c9:
17:92:f1:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:52:13 2025 by rpki-client