Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/36b3fa-c925-4b09-b8ea-32f59fa5b311/1/tDX1JtfQkJ5_Sn3yxcrXLSr2ssM.mft
File: tDX1JtfQkJ5_Sn3yxcrXLSr2ssM.mft (raw, json)
Hash identifier: R6DkLGNwf9VrEQjvYykb97NwaD8vHAVh3pLfBSK7Wj4=
Subject key identifier: 4B:89:E6:7D:33:70:1C:FE:19:0D:08:99:3E:99:7B:1F:57:59:F8:BA
Authority key identifier: B4:35:F5:26:D7:D0:90:9E:7F:4A:7D:F2:C5:CA:D7:2D:2A:F6:B2:C3
Certificate issuer: /CN=b435f526d7d0909e7f4a7df2c5cad72d2af6b2c3
Certificate serial: 01974AB14CD3D3BE5222350637A961C92063
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDX1JtfQkJ5_Sn3yxcrXLSr2ssM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/36b3fa-c925-4b09-b8ea-32f59fa5b311/1/tDX1JtfQkJ5_Sn3yxcrXLSr2ssM.mft
Manifest number: 157C
Signing time: Sat 07 Jun 2025 14:00:22 +0000
Manifest this update: Sat 07 Jun 2025 14:00:22 +0000
Manifest next update: Sun 08 Jun 2025 14:00:22 +0000
Files and hashes: 1: mAE3_QFYxLK2bxPNIhFbVq5Pufo.roa (hash: 8Db1Fqvg0Iw4fJZLlY1WJu1zNG21SFNmOlpLtn7VYgI=)
2: tDX1JtfQkJ5_Sn3yxcrXLSr2ssM.crl (hash: U9q4TnC+at4QC1uLsHd5S2YWzq3b8uF2fXKBYVAAd+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/36b3fa-c925-4b09-b8ea-32f59fa5b311/1/tDX1JtfQkJ5_Sn3yxcrXLSr2ssM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/36b3fa-c925-4b09-b8ea-32f59fa5b311/1/tDX1JtfQkJ5_Sn3yxcrXLSr2ssM.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDX1JtfQkJ5_Sn3yxcrXLSr2ssM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:b1:4c:d3:d3:be:52:22:35:06:37:a9:61:c9:20:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b435f526d7d0909e7f4a7df2c5cad72d2af6b2c3
Validity
Not Before: Jun 7 14:00:22 2025 GMT
Not After : Jun 8 14:00:22 2025 GMT
Subject: CN=4b89e67d33701cfe190d08993e997b1f5759f8ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:53:e3:47:b8:d5:81:bc:fc:45:a6:09:82:e9:
5d:4e:e4:52:36:f7:6d:0b:b6:85:a3:af:5c:2c:e1:
ee:ef:06:bb:8e:4a:d4:03:34:02:d7:1d:4a:d8:27:
79:ac:d8:88:01:09:7e:8c:c4:a0:d7:fb:2c:7e:e8:
6e:7e:5e:f3:c5:d5:f8:96:30:7f:22:e6:fd:ac:2e:
24:56:6d:46:5d:54:f7:40:88:d0:31:4e:b3:3e:32:
8c:af:ae:73:59:18:f7:39:bb:d2:e8:72:97:23:b0:
1d:6b:b1:f7:e9:ae:2b:05:6e:fe:61:32:3e:c8:4f:
15:1f:de:d8:ee:a2:cf:92:6a:f7:e9:28:eb:99:53:
a8:11:fb:04:ee:03:50:bf:a5:61:9f:52:b5:3c:a1:
0f:fc:f4:9f:a7:52:18:e5:5d:d3:08:b6:4b:35:2e:
ce:9b:1e:88:57:83:27:c8:c1:bf:e5:7b:e3:ca:a9:
a1:1e:cd:cd:f9:5f:18:67:e7:77:1c:87:e7:a6:a5:
08:49:cd:ad:6f:b6:c9:a9:0a:82:2e:78:a6:c4:89:
62:49:a0:fd:0c:0a:33:5e:f3:71:fb:8e:2d:c9:04:
e2:5b:de:16:15:4a:68:fc:52:cb:39:0a:69:d9:7d:
f6:2b:e5:d1:cb:b2:07:55:3b:4e:71:fb:d4:7a:29:
3c:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:89:E6:7D:33:70:1C:FE:19:0D:08:99:3E:99:7B:1F:57:59:F8:BA
X509v3 Authority Key Identifier:
keyid:B4:35:F5:26:D7:D0:90:9E:7F:4A:7D:F2:C5:CA:D7:2D:2A:F6:B2:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDX1JtfQkJ5_Sn3yxcrXLSr2ssM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/36b3fa-c925-4b09-b8ea-32f59fa5b311/1/tDX1JtfQkJ5_Sn3yxcrXLSr2ssM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/36b3fa-c925-4b09-b8ea-32f59fa5b311/1/tDX1JtfQkJ5_Sn3yxcrXLSr2ssM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:c9:15:25:bf:51:6c:1b:66:f0:11:b9:b9:84:e9:59:83:da:
76:01:ad:c1:a7:62:ac:b7:12:72:d6:a0:f9:b0:4f:aa:f7:a7:
de:56:53:c0:2e:39:c4:53:5a:fc:e7:73:77:7a:97:56:b0:cc:
50:a3:7c:a3:45:2c:e4:44:3c:22:34:10:23:a8:a1:ff:5c:ed:
06:e6:e2:f5:19:ca:75:fb:86:f4:cc:14:33:6a:96:8f:c2:31:
4a:5a:0e:e0:7b:56:e1:f3:e7:59:50:14:12:35:89:6e:3b:c1:
e4:98:41:03:79:37:cd:3a:c4:36:2f:c1:8b:f2:e4:32:ab:36:
cf:50:e2:1a:c7:ca:e7:23:27:a1:3e:b9:9a:c9:b3:70:2e:95:
60:ee:51:a4:9a:ea:f6:a8:6c:53:33:ed:1b:d0:29:db:1a:fc:
19:ba:b0:8b:83:4a:4d:95:d4:9f:f8:e3:93:99:e3:7b:4b:34:
7d:89:ba:c6:b3:1b:56:6d:ba:08:e7:6d:47:7a:21:98:19:dc:
88:a7:f7:2c:bd:ab:2b:af:95:4e:cc:f2:7a:60:2e:86:ce:1c:
f9:8f:9d:37:50:28:e7:36:2e:70:ea:df:3c:af:26:a9:92:9d:
12:99:a0:64:01:16:74:45:fa:b0:55:2a:b5:24:de:1d:2b:f7:
4a:7b:a0:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 17:49:07 2025 by rpki-client