Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d3df26-3db5-4539-8030-f2ce77e3191e/1/TiopnxgqH9UdSwNimXr3qq4Na-k.mft
File: TiopnxgqH9UdSwNimXr3qq4Na-k.mft (raw, json)
Hash identifier: utyiDQspRbJdmuy0p0bF3/s2+VZSRBejafRdxmKJ6UA=
Subject key identifier: 92:D8:09:F3:2F:49:78:AB:CC:CC:77:F8:3D:5C:3C:31:DA:FF:31:D0
Authority key identifier: 4E:2A:29:9F:18:2A:1F:D5:1D:4B:03:62:99:7A:F7:AA:AE:0D:6B:E9
Certificate issuer: /CN=4e2a299f182a1fd51d4b0362997af7aaae0d6be9
Certificate serial: 01974968146884CA4A20D50D33FB086F0694
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TiopnxgqH9UdSwNimXr3qq4Na-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d3df26-3db5-4539-8030-f2ce77e3191e/1/TiopnxgqH9UdSwNimXr3qq4Na-k.mft
Manifest number: 157F
Signing time: Sat 07 Jun 2025 08:00:47 +0000
Manifest this update: Sat 07 Jun 2025 08:00:47 +0000
Manifest next update: Sun 08 Jun 2025 08:00:47 +0000
Files and hashes: 1: 6L1wb6rk6JRmH0kdueo5VHSR6sA.roa (hash: v/vwNDFKpqZbOrt+k+dslXb31bPIeE6v/BAFBhGcR04=)
2: Q1ID3jqh-PT7k00It8t9krcFrp0.roa (hash: 53/LWfxj68LBwdUpxNq1PQF6QDcY5qwZBSFj5Skh+H4=)
3: TiopnxgqH9UdSwNimXr3qq4Na-k.crl (hash: fkpBEYSMObheh3jdR8O2LnWAqsARHGk1CZ9x7fBTiH4=)
4: uAwoVI3dpDeVF6OQWKoCJ5jN8xY.roa (hash: tIErXtWim6v8+5J+f3v+yr7n8hWCWnrcd2Ahi85yzJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d3df26-3db5-4539-8030-f2ce77e3191e/1/TiopnxgqH9UdSwNimXr3qq4Na-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/d3df26-3db5-4539-8030-f2ce77e3191e/1/TiopnxgqH9UdSwNimXr3qq4Na-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/TiopnxgqH9UdSwNimXr3qq4Na-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 08:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:68:14:68:84:ca:4a:20:d5:0d:33:fb:08:6f:06:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e2a299f182a1fd51d4b0362997af7aaae0d6be9
Validity
Not Before: Jun 7 08:00:47 2025 GMT
Not After : Jun 8 08:00:47 2025 GMT
Subject: CN=92d809f32f4978abcccc77f83d5c3c31daff31d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d5:6f:56:6e:34:44:c0:6c:a6:00:2a:9c:b6:
c4:24:21:bd:a1:24:e0:f5:a9:7f:65:13:2a:97:16:
a8:28:f4:06:35:52:30:d0:7e:77:49:24:19:41:12:
d7:08:e8:9c:07:b4:95:9e:81:a9:66:01:b5:95:b6:
16:c9:1d:1e:4a:26:1a:88:93:de:9d:1a:a9:5a:42:
33:d0:0b:c9:0b:2f:08:13:64:fe:84:05:0a:e3:e9:
a7:3d:08:19:70:f2:4c:56:5a:41:20:ff:05:df:cc:
ea:01:ab:e7:82:8e:26:52:7c:35:85:40:16:85:02:
8f:28:31:ad:c8:79:70:df:3c:c2:75:b3:6d:72:53:
25:28:76:6c:e7:09:42:5a:cb:1c:1f:60:f2:8b:2f:
c9:4c:0f:77:bb:c7:00:9d:b5:27:b3:bb:89:16:d2:
74:8d:e9:d2:f1:d5:46:0b:76:83:1e:c9:ba:b8:62:
ee:62:44:ea:95:6e:78:71:b5:e6:79:3f:bb:bd:da:
7e:5a:21:31:23:2f:c5:47:99:1c:40:a2:3c:ea:4c:
bd:4b:f5:90:1b:68:d5:fd:9e:40:04:14:f0:21:e2:
4b:65:ff:91:7f:e4:9b:53:f5:b9:d7:99:99:77:8b:
b2:d0:43:51:bf:92:fd:47:98:db:f7:98:ca:21:dc:
f7:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:D8:09:F3:2F:49:78:AB:CC:CC:77:F8:3D:5C:3C:31:DA:FF:31:D0
X509v3 Authority Key Identifier:
keyid:4E:2A:29:9F:18:2A:1F:D5:1D:4B:03:62:99:7A:F7:AA:AE:0D:6B:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TiopnxgqH9UdSwNimXr3qq4Na-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d3df26-3db5-4539-8030-f2ce77e3191e/1/TiopnxgqH9UdSwNimXr3qq4Na-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d3df26-3db5-4539-8030-f2ce77e3191e/1/TiopnxgqH9UdSwNimXr3qq4Na-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:4a:c1:3d:0f:a3:8f:54:c2:0c:1d:7e:9d:bd:fa:ec:68:22:
3b:dd:2a:1a:6c:3b:9d:c4:95:60:24:0e:44:11:74:91:19:bf:
81:88:db:f1:f7:2f:e8:fa:91:86:12:99:a2:df:82:c8:a7:a0:
77:0a:46:78:0c:e8:8e:11:4e:b5:76:52:a1:97:f3:02:ec:74:
38:a6:f9:0f:56:a4:58:cf:1b:57:e9:e3:ac:af:0e:9f:c1:9d:
f4:56:ec:31:8f:9e:82:1c:d7:7c:24:1a:14:b5:40:2d:51:1b:
34:98:b7:80:ee:70:2f:d9:d0:a5:81:f9:4b:6b:0e:f8:6a:a8:
cd:7f:33:ec:5e:25:09:76:57:62:d4:f7:a7:fe:eb:03:79:05:
f6:bc:49:e2:c5:14:7c:2a:db:1c:3f:cb:86:85:c8:d5:96:21:
08:e2:0c:2f:11:0a:5a:d8:5c:d5:0e:a7:94:51:64:33:9a:87:
c0:ae:ef:65:2c:41:f5:8b:7d:87:ed:15:cb:f7:f5:ee:67:a6:
12:c7:90:56:b9:e7:41:e4:e8:ac:a0:4d:6b:91:8c:38:18:99:
60:90:28:5d:2d:ee:c1:84:03:a3:aa:8c:80:b1:74:29:3f:1c:
c5:9f:8a:23:8e:b0:30:c5:9c:b0:6f:0b:f7:d2:43:a7:43:19:
32:8e:2e:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:33:13 2025 by rpki-client