Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.mft
File: tOxsCl6-xYF9kbkeeaa8YTLrnSw.mft (raw, json)
Hash identifier: oaPH2L3FTtOy6JKDqVabuJz6IjfSmr76hHDe2sKIZsY=
Subject key identifier: 49:C0:DA:CD:30:54:F3:65:2D:C8:B1:FB:3C:37:7D:B8:16:BC:C2:88
Authority key identifier: B4:EC:6C:0A:5E:BE:C5:81:7D:91:B9:1E:79:A6:BC:61:32:EB:9D:2C
Certificate issuer: /CN=b4ec6c0a5ebec5817d91b91e79a6bc6132eb9d2c
Certificate serial: 01976772687E7D2CFFEBCE5A87049D9498DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tOxsCl6-xYF9kbkeeaa8YTLrnSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.mft
Manifest number: 158F
Signing time: Fri 13 Jun 2025 04:00:40 +0000
Manifest this update: Fri 13 Jun 2025 04:00:40 +0000
Manifest next update: Sat 14 Jun 2025 04:00:40 +0000
Files and hashes: 1: 0WgKhjREJrZPp5eivCc5Ledwy08.roa (hash: g1cMz695Vu5b1v4C7JspTc1yMqOrx6XRuND1g3o80ZU=)
2: c4XFDsuP3oiOPuoN5dW6Mp7swps.roa (hash: RShjOJ6yyL7rh4X46zYbqRc79tC1/dWZp0uZXHk88jM=)
3: tOxsCl6-xYF9kbkeeaa8YTLrnSw.crl (hash: iM2zTZUOY1abylUgzVt37+gPvuBABcZSu5uLOwvRm14=)
4: x8qy1V86ggKXIYJ47lPp7-bEQ08.roa (hash: Tid2ObTc99hFnnGIy0KhVlQV4ZEsaX9AQcsvz/R/sw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tOxsCl6-xYF9kbkeeaa8YTLrnSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 04:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:67:72:68:7e:7d:2c:ff:eb:ce:5a:87:04:9d:94:98:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4ec6c0a5ebec5817d91b91e79a6bc6132eb9d2c
Validity
Not Before: Jun 13 04:00:40 2025 GMT
Not After : Jun 14 04:00:40 2025 GMT
Subject: CN=49c0dacd3054f3652dc8b1fb3c377db816bcc288
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:3b:08:c0:50:ec:9b:81:6a:e8:ef:14:4b:3c:
be:99:0f:74:f4:bb:b4:a0:c1:7a:8b:25:06:45:9c:
e6:ee:1a:31:ff:a8:a7:47:de:62:77:76:79:e6:04:
b2:40:eb:50:17:35:ab:9f:0f:9c:38:88:b4:7e:4e:
aa:11:d1:9b:5b:43:45:b8:c7:a8:fd:87:12:b3:5a:
6e:52:92:9f:1b:b9:f4:3d:60:51:58:da:6c:2e:bb:
87:9f:87:22:dd:77:98:35:5a:cd:9d:5a:5a:45:4e:
8a:3c:ba:1d:c4:98:f7:6f:e7:39:5d:16:cb:6f:30:
af:ea:93:83:ed:67:9e:38:1f:d6:8e:9a:69:dc:75:
37:1e:5e:9e:19:c7:a0:79:35:53:e4:12:76:d4:3f:
4d:93:2e:91:7b:6d:ae:bb:bd:f4:aa:62:e7:61:73:
88:d8:6a:2c:b1:28:ed:35:af:7b:16:2f:b5:c2:93:
ee:f4:d4:87:82:30:52:38:d1:8c:f2:e6:05:f6:29:
3a:3a:68:0b:4f:6e:62:da:8b:de:39:3f:2b:72:5f:
ab:b4:a8:0c:d7:7a:4d:c5:77:7b:df:49:ba:cc:40:
49:55:cd:bd:e4:b3:08:a4:78:f8:47:99:58:10:d6:
db:5b:99:39:a1:34:01:6a:99:aa:d8:b4:db:9f:97:
38:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:C0:DA:CD:30:54:F3:65:2D:C8:B1:FB:3C:37:7D:B8:16:BC:C2:88
X509v3 Authority Key Identifier:
keyid:B4:EC:6C:0A:5E:BE:C5:81:7D:91:B9:1E:79:A6:BC:61:32:EB:9D:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tOxsCl6-xYF9kbkeeaa8YTLrnSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:aa:13:47:ca:0c:9a:5a:4c:65:aa:30:f7:8d:6c:d3:b6:77:
fb:5c:45:c2:08:c7:2d:7b:bc:1c:36:57:4e:20:47:f8:a4:b0:
52:eb:cb:91:08:03:7a:f7:43:44:90:fd:22:01:ac:c8:36:19:
27:d8:68:66:0b:0a:62:00:98:88:0e:6f:77:11:a2:2e:10:09:
af:e4:20:f6:31:d1:64:1b:8b:1d:ac:98:53:78:84:6a:25:3f:
4d:e2:b3:60:36:ff:4c:26:8a:ea:62:cb:cf:13:bb:d3:94:66:
09:1a:a0:bc:f5:48:b5:3e:d0:c0:73:b7:67:c0:a3:be:d4:62:
b0:5e:cc:4e:a1:6e:78:2c:da:6c:c1:c5:6f:f7:26:90:4d:80:
9e:b7:aa:11:ca:9b:6e:4b:8d:24:d5:08:3f:72:a3:94:8f:61:
24:4e:8e:8d:85:a1:06:cb:8d:79:de:a6:6d:5d:19:72:b4:d3:
54:1a:bb:81:f6:52:6b:23:a1:8b:04:f0:37:04:9e:63:0b:27:
a5:62:3d:0b:7a:0f:bf:c3:9f:3a:33:03:4d:ca:8d:a0:d8:19:
2b:c4:65:39:e9:a8:3b:d4:0e:be:1b:47:05:10:f4:4e:a7:d5:
83:48:ca:8b:d5:e5:e5:28:12:62:c4:3e:d6:2e:b2:0e:5a:11:
0d:68:1b:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 13:19:34 2025 by rpki-client