Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/TKRH97Ondvck2LyBQL4xdmYsJNA.mft
File: TKRH97Ondvck2LyBQL4xdmYsJNA.mft (raw, json)
Hash identifier: FboWCdwc4fJgRybkG6pHd9P/jTnUi+pzQk4ahnEnXx0=
Subject key identifier: A3:00:71:F1:5C:F1:8C:B8:CD:57:0A:CE:AA:46:A0:73:0E:98:9D:C2
Authority key identifier: 4C:A4:47:F7:B3:A7:76:F7:24:D8:BC:81:40:BE:31:76:66:2C:24:D0
Certificate issuer: /CN=4ca447f7b3a776f724d8bc8140be3176662c24d0
Certificate serial: 01974967A8FE55E6AE9DF01D0351ADE18B98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TKRH97Ondvck2LyBQL4xdmYsJNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/TKRH97Ondvck2LyBQL4xdmYsJNA.mft
Manifest number: 060E
Signing time: Sat 07 Jun 2025 08:00:19 +0000
Manifest this update: Sat 07 Jun 2025 08:00:19 +0000
Manifest next update: Sun 08 Jun 2025 08:00:19 +0000
Files and hashes: 1: TKRH97Ondvck2LyBQL4xdmYsJNA.crl (hash: PIfrqvjbiKK80yKJ/8a+WkUP4MrudJgbCBNvjci6Nnc=)
2: fIoweheWq1JqzVdLBCrrD-x4kK4.roa (hash: yoQba86aaUs4p2P/E/UoxSeIL5NEm/wDobQOVMT4e5A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/TKRH97Ondvck2LyBQL4xdmYsJNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/TKRH97Ondvck2LyBQL4xdmYsJNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/TKRH97Ondvck2LyBQL4xdmYsJNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 08:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:67:a8:fe:55:e6:ae:9d:f0:1d:03:51:ad:e1:8b:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ca447f7b3a776f724d8bc8140be3176662c24d0
Validity
Not Before: Jun 7 08:00:19 2025 GMT
Not After : Jun 8 08:00:19 2025 GMT
Subject: CN=a30071f15cf18cb8cd570aceaa46a0730e989dc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:54:7c:dd:0d:05:16:86:e1:b6:a3:74:2c:ae:
38:b9:ca:53:90:09:85:1c:72:7f:e9:62:66:a8:c0:
e6:03:ce:24:bf:cb:0e:e1:38:77:1c:70:3b:e0:91:
83:cc:7f:ad:db:d0:97:c7:bf:3b:66:20:16:c8:cb:
1d:16:ce:8b:76:ee:9f:8a:5b:0b:7b:e2:e4:b0:90:
2d:73:2b:45:af:6f:27:cd:ec:6d:6d:dd:f5:ee:3c:
38:2f:65:9f:56:94:a6:d0:3f:c5:69:87:0b:be:d0:
d9:85:ba:84:f0:58:d0:ab:a1:b9:db:92:97:41:2d:
ce:4e:a6:95:79:07:ab:c6:09:0f:81:92:f8:8b:58:
5a:9d:78:5a:c3:55:7f:7e:11:c2:2b:3b:06:b5:2c:
58:2b:d5:36:94:cf:42:55:ee:c9:fd:8b:f5:8c:17:
9a:00:2d:8d:1f:4b:2b:d7:56:46:96:d0:53:f9:c0:
7b:91:b6:85:eb:90:c2:e1:a8:fe:9d:30:de:b9:59:
ee:e5:13:fc:3a:a0:e9:e7:23:4d:9f:19:a1:23:9a:
bc:38:ea:57:89:c1:ab:08:a1:30:2a:2c:35:d3:e5:
63:ed:02:60:c5:b3:53:46:3c:65:d7:83:e7:d8:30:
cd:bf:1e:82:84:f7:36:95:3e:9a:10:2b:43:99:6d:
dc:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:00:71:F1:5C:F1:8C:B8:CD:57:0A:CE:AA:46:A0:73:0E:98:9D:C2
X509v3 Authority Key Identifier:
keyid:4C:A4:47:F7:B3:A7:76:F7:24:D8:BC:81:40:BE:31:76:66:2C:24:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TKRH97Ondvck2LyBQL4xdmYsJNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/TKRH97Ondvck2LyBQL4xdmYsJNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/TKRH97Ondvck2LyBQL4xdmYsJNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:ea:f8:2b:ff:f6:ac:97:ad:27:c8:33:f5:62:0f:89:26:96:
18:83:9b:75:1a:2f:5d:b3:04:50:20:49:95:3d:bf:14:2e:ee:
c9:b4:7d:66:f5:15:3a:19:74:20:72:b4:4d:a7:da:fc:f2:65:
0f:a4:d2:ec:e6:f9:50:21:3c:20:c9:1b:ee:6f:a0:52:6e:eb:
60:60:b7:da:15:d5:73:e3:12:6e:c0:08:cb:87:16:9b:a6:63:
31:5a:26:e1:a6:44:ec:f1:23:21:ca:f3:27:81:6f:9c:14:5f:
1c:15:43:f6:47:f8:cb:f9:5f:d6:ce:14:e5:7c:1a:05:b5:7d:
b3:5c:60:03:b1:8d:5b:87:ce:8c:7d:52:44:71:27:b9:4b:47:
1f:95:ea:34:d1:9a:b3:dc:52:a9:da:52:8b:96:32:da:bc:47:
e2:60:96:85:74:65:88:72:bb:bd:d0:81:0d:89:d9:1d:03:05:
2a:d9:57:e7:08:f1:61:6b:8f:2f:e3:ef:c6:cf:33:45:ed:40:
51:cc:8c:49:6b:ba:41:47:05:9c:d7:77:da:41:bb:2a:3c:9f:
06:55:2c:db:44:70:74:fe:a7:17:a2:a1:71:26:c5:16:a1:05:
22:0e:a4:0d:eb:f4:af:5b:98:a5:54:ce:f1:bd:2f:70:a1:23:
4f:ec:c6:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:32:13 2025 by rpki-client