Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/TGtjcblFo16d8wj_Q4A-JheFEGk.mft
File: TGtjcblFo16d8wj_Q4A-JheFEGk.mft (raw, json)
Hash identifier: bISGZLAAq1RuwNgsQwatee48kCXWOROXpXlX1flP9NU=
Subject key identifier: F7:CC:E5:2D:9B:F0:E3:AC:EE:6C:2A:BF:7A:4B:81:8E:02:29:1A:F7
Authority key identifier: 4C:6B:63:71:B9:45:A3:5E:9D:F3:08:FF:43:80:3E:26:17:85:10:69
Certificate issuer: /CN=4c6b6371b945a35e9df308ff43803e2617851069
Certificate serial: 01974743080B13362575548C24716549CD57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TGtjcblFo16d8wj_Q4A-JheFEGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/TGtjcblFo16d8wj_Q4A-JheFEGk.mft
Manifest number: 1031
Signing time: Fri 06 Jun 2025 22:01:04 +0000
Manifest this update: Fri 06 Jun 2025 22:01:04 +0000
Manifest next update: Sat 07 Jun 2025 22:01:04 +0000
Files and hashes: 1: NETt5LyS--lV9_ycDBmp9TmpxP4.roa (hash: rz60bepxWIT7kbaafyZ48rHU8Vmg6Vvtzt7Ebp5hgDU=)
2: TGtjcblFo16d8wj_Q4A-JheFEGk.crl (hash: UEC4OvBxGDV4X83kMnhku85CzZEDPlKdjkLYSL9PUGk=)
3: YU0ymXaczDxniPQtB_xa4RTEU2Q.roa (hash: +3YrNwFP0+tuTgevzTw2FGRwOLOaLfupz3GSxL5OXLE=)
4: e99v7pEfrFm4Dg1SnIaNO39I8Ws.roa (hash: GWy1k4OaIi0pC/Ap0hgLnIy0Gp664zirmOTGWdfBTaE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/TGtjcblFo16d8wj_Q4A-JheFEGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/TGtjcblFo16d8wj_Q4A-JheFEGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TGtjcblFo16d8wj_Q4A-JheFEGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:43:08:0b:13:36:25:75:54:8c:24:71:65:49:cd:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c6b6371b945a35e9df308ff43803e2617851069
Validity
Not Before: Jun 6 22:01:04 2025 GMT
Not After : Jun 7 22:01:04 2025 GMT
Subject: CN=f7cce52d9bf0e3acee6c2abf7a4b818e02291af7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:38:c9:0f:88:c7:64:60:49:88:f0:06:37:ae:
a2:75:a0:26:68:f2:20:fa:e1:22:56:42:f8:09:fa:
1d:b9:c7:68:e3:95:0f:a6:03:f7:86:b4:6a:77:e1:
0c:81:7e:d7:fa:b2:30:a5:fa:97:ec:7c:fe:4f:a3:
79:b5:b1:b9:ae:5f:1f:3b:30:5b:a9:3f:cd:ff:a7:
9b:9f:90:7f:48:14:4c:54:a7:e2:29:b0:9a:11:b3:
54:c7:3e:48:7a:d5:7a:32:65:f3:0b:39:a1:74:66:
62:38:ca:51:0d:14:d7:b1:ec:bf:28:e2:70:bc:42:
da:57:b7:35:69:9b:c2:ad:c4:60:21:43:ba:bb:0a:
89:4f:8a:3b:3d:2e:e2:bb:3a:61:1c:a1:58:b7:51:
7b:13:9e:5c:33:9e:f8:f4:3a:33:40:bb:4b:2e:ee:
f3:ab:a4:1b:8b:0f:54:32:64:a8:2b:46:7d:76:45:
dc:e2:65:c6:ee:f8:42:f9:53:12:ba:19:8f:95:4e:
8e:61:49:5e:f3:87:4e:05:6b:f4:3e:8f:7a:65:24:
b5:02:a2:1b:77:78:b0:0c:9f:ec:6e:24:8e:9d:1d:
0b:bd:51:cf:4c:c2:06:fb:82:6f:aa:d0:42:ed:d2:
d8:79:5b:bf:2d:75:f2:1f:2b:54:8c:cf:d0:2a:98:
e0:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:CC:E5:2D:9B:F0:E3:AC:EE:6C:2A:BF:7A:4B:81:8E:02:29:1A:F7
X509v3 Authority Key Identifier:
keyid:4C:6B:63:71:B9:45:A3:5E:9D:F3:08:FF:43:80:3E:26:17:85:10:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TGtjcblFo16d8wj_Q4A-JheFEGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/TGtjcblFo16d8wj_Q4A-JheFEGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/TGtjcblFo16d8wj_Q4A-JheFEGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:93:b5:b3:83:e8:cd:6b:72:73:90:2e:91:05:ec:3b:da:5a:
01:a2:94:a1:a1:22:8b:ff:9f:31:85:58:0b:3c:e4:5f:d7:3d:
e5:b9:1c:a6:73:57:a3:b4:f2:48:0a:75:c5:c8:a4:72:7a:79:
21:36:a2:f6:0f:b2:ba:2f:b2:66:7f:f5:41:76:dd:6a:a0:21:
a3:77:20:cd:cd:82:3c:a4:f5:08:6a:dc:34:55:45:1e:1e:3a:
c2:15:7c:e2:0c:24:3a:d2:0b:99:fb:2a:6f:82:83:6a:c9:70:
53:6d:70:92:98:9b:e4:b0:4e:b2:8e:18:8d:ee:33:59:08:55:
f0:4b:46:cb:ae:ab:f4:7c:22:ad:ab:1b:e9:90:d8:19:54:fb:
84:98:f4:39:b8:3f:1d:b3:f2:4b:15:f4:68:9a:7a:2f:e4:19:
b5:bc:7b:41:e5:b5:55:92:72:02:2d:13:3a:38:44:81:90:af:
00:79:d4:0b:30:2d:b4:49:52:de:cb:91:f8:97:41:c4:47:b1:
84:56:32:0f:ff:bf:c0:72:c0:f4:22:97:69:74:a3:46:84:5c:
08:1b:df:6d:65:1f:bb:9f:6f:20:2f:50:ba:ca:49:e1:38:f2:
0f:26:ab:f3:44:b0:9a:59:8a:c8:45:de:b7:d7:00:21:96:0d:
7e:76:d6:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:13:29 2025 by rpki-client