Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/961f64-837c-4811-aa42-58f215bca53a/1/TjQBh8D85f_wN87ZplCCQ-QE2nE.mft
File: TjQBh8D85f_wN87ZplCCQ-QE2nE.mft (raw, json)
Hash identifier: p7ICE8VJJFlbfJRmq7XvI/RxMPNADTkBf6FrmCMnJik=
Subject key identifier: A1:9C:F0:8A:C6:52:5B:69:3C:60:E7:FF:CE:86:64:00:20:37:C5:9A
Authority key identifier: 4E:34:01:87:C0:FC:E5:FF:F0:37:CE:D9:A6:50:82:43:E4:04:DA:71
Certificate issuer: /CN=4e340187c0fce5fff037ced9a6508243e404da71
Certificate serial: 01974CD68EF9F8729BFD4FC1B9C95972A295
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TjQBh8D85f_wN87ZplCCQ-QE2nE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/961f64-837c-4811-aa42-58f215bca53a/1/TjQBh8D85f_wN87ZplCCQ-QE2nE.mft
Manifest number: 08AA
Signing time: Sun 08 Jun 2025 00:00:19 +0000
Manifest this update: Sun 08 Jun 2025 00:00:19 +0000
Manifest next update: Mon 09 Jun 2025 00:00:19 +0000
Files and hashes: 1: CpuMVh4uJ1tcoj_OkQygaUN_hh8.roa (hash: yhnMpFW3oI3a8/KGPX3tjlLUQZvGsHrg1LJyUrjeFm8=)
2: TjQBh8D85f_wN87ZplCCQ-QE2nE.crl (hash: UxGwbKss6X5dIohYy7VXMiZx6ftTScMp5w6Q4M8yNzg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/961f64-837c-4811-aa42-58f215bca53a/1/TjQBh8D85f_wN87ZplCCQ-QE2nE.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/961f64-837c-4811-aa42-58f215bca53a/1/TjQBh8D85f_wN87ZplCCQ-QE2nE.mft
rsync://rpki.ripe.net/repository/DEFAULT/TjQBh8D85f_wN87ZplCCQ-QE2nE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 00:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:d6:8e:f9:f8:72:9b:fd:4f:c1:b9:c9:59:72:a2:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e340187c0fce5fff037ced9a6508243e404da71
Validity
Not Before: Jun 8 00:00:19 2025 GMT
Not After : Jun 9 00:00:19 2025 GMT
Subject: CN=a19cf08ac6525b693c60e7ffce8664002037c59a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:fa:b0:c7:6f:11:45:32:97:80:95:ae:1e:af:
7a:ff:a8:33:78:05:0f:12:d2:6e:f1:52:a8:3a:c9:
68:6e:03:b5:b0:e2:b9:15:9b:72:e8:e7:26:a5:8b:
a0:29:92:a8:76:1a:ed:f0:53:87:1a:b5:a4:27:6e:
2c:ff:f4:ea:5a:35:d2:4a:bb:07:b5:04:5e:db:fa:
03:a2:3c:45:fb:35:f9:5e:f7:6c:fd:3d:59:b8:93:
32:5f:05:01:93:c4:40:18:5d:fa:9c:d9:dd:e4:d5:
3e:4a:93:77:3c:73:36:b2:c0:c2:4e:42:a5:c3:55:
d9:aa:c1:48:8e:e6:ca:a5:f1:74:50:18:31:30:b3:
c6:af:32:e1:cd:40:00:b3:79:23:6a:25:4c:94:98:
48:59:d6:1b:41:ae:6f:78:63:83:09:0d:38:52:e8:
40:8f:b8:f6:ad:de:9c:85:ed:0f:b2:4e:69:0f:f5:
3b:6c:f3:4e:41:af:f8:14:ff:7f:6c:59:38:0d:c4:
f3:6a:4a:45:69:62:f2:f4:98:e9:6b:77:b5:54:26:
82:24:d5:0d:6f:49:b3:3c:8c:89:f5:db:8b:e8:4c:
f3:8d:1a:59:9d:95:d0:21:9e:aa:60:d1:9c:8b:05:
37:81:6b:87:97:87:60:aa:53:d5:4f:95:93:8e:51:
72:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:9C:F0:8A:C6:52:5B:69:3C:60:E7:FF:CE:86:64:00:20:37:C5:9A
X509v3 Authority Key Identifier:
keyid:4E:34:01:87:C0:FC:E5:FF:F0:37:CE:D9:A6:50:82:43:E4:04:DA:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TjQBh8D85f_wN87ZplCCQ-QE2nE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/961f64-837c-4811-aa42-58f215bca53a/1/TjQBh8D85f_wN87ZplCCQ-QE2nE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/961f64-837c-4811-aa42-58f215bca53a/1/TjQBh8D85f_wN87ZplCCQ-QE2nE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:5d:2d:64:29:52:3e:07:a4:be:85:96:a4:f4:6f:5a:4c:0d:
05:06:0c:76:c0:df:4d:2c:70:d4:ef:37:33:e8:b7:3c:d5:aa:
f9:be:a2:56:15:dc:19:a7:13:e0:f4:db:77:5f:0b:51:49:6f:
1c:c7:b5:1b:da:a7:cf:63:70:0f:cc:79:ee:87:6d:ae:45:ce:
91:e0:b0:f7:c0:57:1e:ce:e8:68:f6:ee:d4:61:31:0f:d7:fe:
86:4f:10:89:d9:20:7f:c5:e0:7e:ad:fa:26:28:fd:4a:db:ce:
9e:f9:e3:a8:6c:91:6b:91:f7:50:b6:23:3c:7f:b5:cb:15:bd:
1e:13:99:e7:9b:76:88:36:5e:d1:f0:12:c5:ec:e9:6a:2d:c0:
34:a7:8a:77:c1:0b:80:2a:2b:56:87:95:19:74:df:3e:fb:f8:
cf:44:b3:f1:33:b2:a5:c7:a6:b4:1d:12:f6:b1:28:3f:52:5e:
5c:77:5d:23:98:cd:95:2e:ed:ce:1d:e9:ee:bf:3f:e6:ea:f8:
b5:9e:17:15:42:fd:48:05:ee:7e:63:c2:ec:57:0f:be:17:8d:
11:08:2b:4f:b4:a7:4a:3a:b7:b2:ca:ba:8d:22:d9:70:65:f8:
53:cb:4b:b2:0e:32:68:30:72:93:5e:ed:5b:d6:7e:48:7e:60:
8b:55:1f:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:32:05 2025 by rpki-client