Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/4f943f-d16a-48da-b93a-1487c6020c46/1/Tj_pDw-taiXUa9fDNbki2gMbLHg.mft
File: Tj_pDw-taiXUa9fDNbki2gMbLHg.mft (raw, json)
Hash identifier: aUZPzyat5vw4pOP/naLB8gNt44F4zg+vDqNVBM16CyU=
Subject key identifier: 5C:0D:6A:99:97:AD:B7:9E:A6:42:D0:01:36:18:23:2B:3D:42:E5:5A
Authority key identifier: 4E:3F:E9:0F:0F:AD:6A:25:D4:6B:D7:C3:35:B9:22:DA:03:1B:2C:78
Certificate issuer: /CN=4e3fe90f0fad6a25d46bd7c335b922da031b2c78
Certificate serial: 01974967DAD66569177245803B930DF4BB54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tj_pDw-taiXUa9fDNbki2gMbLHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/4f943f-d16a-48da-b93a-1487c6020c46/1/Tj_pDw-taiXUa9fDNbki2gMbLHg.mft
Manifest number: 0A24
Signing time: Sat 07 Jun 2025 08:00:32 +0000
Manifest this update: Sat 07 Jun 2025 08:00:32 +0000
Manifest next update: Sun 08 Jun 2025 08:00:32 +0000
Files and hashes: 1: Tj_pDw-taiXUa9fDNbki2gMbLHg.crl (hash: 0zt7+bUZ3TK+HyirQq9YwOARyXancwQPGB8L6ZL9X0g=)
2: xBLWMt7CnhdMhsDQsxTJKsgubzw.roa (hash: ZCdYsbGv+ldj13bvl4ML8UTblRYPsZ2+PffnDm+YrGQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/4f943f-d16a-48da-b93a-1487c6020c46/1/Tj_pDw-taiXUa9fDNbki2gMbLHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/4f943f-d16a-48da-b93a-1487c6020c46/1/Tj_pDw-taiXUa9fDNbki2gMbLHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tj_pDw-taiXUa9fDNbki2gMbLHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 08:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:67:da:d6:65:69:17:72:45:80:3b:93:0d:f4:bb:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e3fe90f0fad6a25d46bd7c335b922da031b2c78
Validity
Not Before: Jun 7 08:00:32 2025 GMT
Not After : Jun 8 08:00:32 2025 GMT
Subject: CN=5c0d6a9997adb79ea642d0013618232b3d42e55a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:72:3c:bf:44:db:91:59:5c:de:be:2e:6e:2d:
85:a4:fa:ee:9c:74:2d:9d:e9:7e:10:57:29:93:70:
1b:db:f5:ea:c4:11:cc:e8:db:28:5b:a5:9c:4b:f3:
a7:50:5c:a2:f2:59:e5:a6:73:e1:22:61:fe:58:ee:
61:07:1a:12:79:30:37:11:76:b3:a2:69:48:12:4f:
4d:93:88:41:bc:87:a5:58:07:c5:9e:29:0e:b1:5a:
39:ee:36:0f:ed:81:00:6f:98:69:b0:26:6e:87:82:
56:ec:64:c8:c1:7a:e7:01:e6:1b:c6:56:75:03:54:
5d:7c:f1:22:d1:bb:5c:ae:60:80:20:59:a4:a3:8d:
0e:b4:28:74:03:75:7b:7c:83:98:10:7e:f7:41:dd:
19:a7:90:dd:5e:05:b4:ec:61:d2:bc:a4:78:99:ba:
04:f3:bc:a2:5a:c9:7b:bb:57:20:2d:ef:09:d9:9a:
ac:6c:8a:2b:9d:0b:0b:5c:83:54:65:b0:ac:7a:96:
88:93:62:e7:23:02:bb:32:ab:f7:6f:cf:c0:a1:d3:
c0:75:93:62:e0:ae:7c:1c:f3:d9:b9:35:7d:0c:f7:
5b:8a:b1:32:98:84:66:89:8e:94:59:11:34:ff:b1:
6a:a1:b6:82:59:fb:24:e5:f3:6c:e8:77:fd:88:98:
10:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:0D:6A:99:97:AD:B7:9E:A6:42:D0:01:36:18:23:2B:3D:42:E5:5A
X509v3 Authority Key Identifier:
keyid:4E:3F:E9:0F:0F:AD:6A:25:D4:6B:D7:C3:35:B9:22:DA:03:1B:2C:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tj_pDw-taiXUa9fDNbki2gMbLHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4f943f-d16a-48da-b93a-1487c6020c46/1/Tj_pDw-taiXUa9fDNbki2gMbLHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4f943f-d16a-48da-b93a-1487c6020c46/1/Tj_pDw-taiXUa9fDNbki2gMbLHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:62:1f:e9:f9:2f:6d:9b:c9:2e:42:24:81:f7:26:74:e1:23:
2d:e5:c5:22:47:19:fe:d1:58:0a:e9:e4:e2:af:41:8f:84:af:
d7:03:1d:cf:7f:4a:0b:b7:d2:8f:f5:6a:5b:ab:5f:98:1b:cb:
6d:58:2c:43:09:df:3a:6a:53:7b:0b:90:7b:ac:9b:d8:fe:a5:
77:9e:54:af:b9:39:20:b6:9b:5a:4f:fb:fe:57:f1:25:08:24:
e5:46:f5:f4:75:a4:97:62:82:cb:ed:26:a0:e8:8a:e5:eb:d8:
55:72:cf:69:2f:a0:2f:ad:22:78:e2:b9:b9:52:c7:dc:e5:a3:
75:4a:c3:90:08:6c:3c:cd:09:5b:26:e5:03:0f:0a:45:09:aa:
05:13:ed:16:ee:fc:15:29:62:4c:7f:83:a3:49:53:9c:6c:89:
a1:62:06:fd:13:24:27:7f:f5:92:cf:03:b8:e2:94:f4:e2:a9:
a9:cb:98:4c:ba:a3:58:d1:15:28:88:68:a4:4f:8a:db:d5:3f:
0a:48:5f:34:7b:11:72:12:9e:68:df:cc:0c:cf:39:c0:c2:60:
e7:77:2e:3b:af:1b:bb:52:fe:a6:e6:ee:cd:74:19:49:07:65:
e1:47:f6:95:05:3f:c2:81:3c:8f:96:91:12:b8:e7:73:fe:33:
4b:ef:1b:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:47:09 2025 by rpki-client