Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/34d470-49f7-4ae0-b61a-0944bed0ed26/1/tL3eeEFbacMSd8Cqx_ymYH1jXYg.mft
File: tL3eeEFbacMSd8Cqx_ymYH1jXYg.mft (raw, json)
Hash identifier: Nt0yidC6HRyDXXXHAnb/SfalIytYT9hMhxS9P5zv/wY=
Subject key identifier: F0:74:33:A6:0F:14:EC:96:85:FB:AA:1A:19:57:CD:90:A8:99:A7:24
Authority key identifier: B4:BD:DE:78:41:5B:69:C3:12:77:C0:AA:C7:FC:A6:60:7D:63:5D:88
Certificate issuer: /CN=b4bdde78415b69c31277c0aac7fca6607d635d88
Certificate serial: 01974666CD3668AA1C10A7D286F00641A3F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tL3eeEFbacMSd8Cqx_ymYH1jXYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/34d470-49f7-4ae0-b61a-0944bed0ed26/1/tL3eeEFbacMSd8Cqx_ymYH1jXYg.mft
Manifest number: 1579
Signing time: Fri 06 Jun 2025 18:00:31 +0000
Manifest this update: Fri 06 Jun 2025 18:00:31 +0000
Manifest next update: Sat 07 Jun 2025 18:00:31 +0000
Files and hashes: 1: ag-uYpovt5JPQ3cFAXtXn4zz86A.roa (hash: 2LKnP2sHY9S5jGwYqiGKID4jG+yM+87plZe5I7Vq4ns=)
2: tL3eeEFbacMSd8Cqx_ymYH1jXYg.crl (hash: MvLK56kDTCgRykfmDCngoTLbJ69HuqI+EgZP+GfhMfY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/34d470-49f7-4ae0-b61a-0944bed0ed26/1/tL3eeEFbacMSd8Cqx_ymYH1jXYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/34d470-49f7-4ae0-b61a-0944bed0ed26/1/tL3eeEFbacMSd8Cqx_ymYH1jXYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/tL3eeEFbacMSd8Cqx_ymYH1jXYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:66:cd:36:68:aa:1c:10:a7:d2:86:f0:06:41:a3:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4bdde78415b69c31277c0aac7fca6607d635d88
Validity
Not Before: Jun 6 18:00:31 2025 GMT
Not After : Jun 7 18:00:31 2025 GMT
Subject: CN=f07433a60f14ec9685fbaa1a1957cd90a899a724
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:cf:fa:3b:e1:ac:2b:98:2e:5c:a8:11:66:c5:
0d:c6:ca:2e:02:13:12:27:d0:9c:65:c7:f6:ab:c1:
ca:43:d5:51:2e:ca:bd:81:ea:29:ae:96:a3:e3:3b:
07:82:5a:cd:9e:6d:10:bb:d4:90:3e:f8:01:bd:ad:
22:d9:73:89:ff:bf:dc:69:69:2e:29:b2:86:de:dc:
87:84:ec:90:f5:ac:d9:c8:89:d2:fb:ed:f1:fd:18:
59:a9:4b:47:55:fb:c8:36:29:94:92:21:e2:8e:c9:
b8:36:17:55:3e:65:11:6d:db:bc:5e:2f:d8:eb:4f:
fb:1e:92:31:5a:a5:c0:35:d2:a5:a9:af:a8:7b:a2:
16:80:ab:a1:a0:a2:c5:bb:65:a1:0d:71:7f:c7:c8:
99:0f:f2:3b:3f:1c:39:0d:47:8c:a6:b5:8d:92:c2:
02:15:0e:e9:8f:89:95:92:e7:cc:3e:29:6a:46:e1:
6c:fb:88:4d:0b:51:63:fe:96:29:92:6a:f5:92:89:
fe:c1:d5:5e:dd:a3:7a:d6:bb:db:3a:ed:26:17:da:
2b:c3:3f:a9:47:53:a6:84:9f:1f:61:de:58:10:8d:
a3:fc:89:c2:af:29:77:b4:44:aa:85:e8:de:3b:b6:
c9:9d:23:66:77:42:21:b4:01:ff:cc:fd:01:bd:57:
f2:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:74:33:A6:0F:14:EC:96:85:FB:AA:1A:19:57:CD:90:A8:99:A7:24
X509v3 Authority Key Identifier:
keyid:B4:BD:DE:78:41:5B:69:C3:12:77:C0:AA:C7:FC:A6:60:7D:63:5D:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tL3eeEFbacMSd8Cqx_ymYH1jXYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/34d470-49f7-4ae0-b61a-0944bed0ed26/1/tL3eeEFbacMSd8Cqx_ymYH1jXYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/34d470-49f7-4ae0-b61a-0944bed0ed26/1/tL3eeEFbacMSd8Cqx_ymYH1jXYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:ea:a1:ad:2e:50:84:95:69:f9:8b:d6:1d:6f:bb:ab:cc:2c:
16:6e:47:61:37:07:32:c4:f1:12:64:28:c3:a2:21:70:2f:d1:
47:ea:57:da:74:3e:f8:61:a0:76:49:28:59:90:e1:85:9a:3f:
47:19:7a:cb:2b:62:6c:55:06:1f:ac:f3:50:9a:5e:48:9b:8f:
be:11:c4:91:a0:9d:98:db:26:88:82:ca:fd:e5:b5:61:e5:50:
29:22:3a:e9:da:e1:9d:60:3f:ab:27:b0:fd:ed:48:82:1e:81:
a9:15:c4:bd:b8:84:6a:5b:b6:80:b9:fa:fe:e4:1b:b9:d5:80:
d4:b0:5c:47:9e:fe:7b:6f:c2:c0:dd:35:f8:e2:9e:c2:f0:3c:
42:0b:1f:1f:d2:93:a9:1c:84:0a:42:82:b9:42:86:ca:f8:dd:
52:d0:18:bb:63:69:56:0c:69:63:cf:89:1e:82:f8:dd:1f:07:
48:26:eb:6c:af:32:3f:f4:56:1b:28:7d:b2:22:83:86:ea:13:
89:ab:be:fe:5f:36:67:53:51:f0:28:86:a4:c9:e5:48:0e:5c:
e1:05:6e:68:73:5f:dc:ba:aa:93:e0:59:71:55:85:10:ba:9a:
fd:c1:9b:14:ff:bc:96:cc:78:46:ca:b8:4f:0d:a0:18:e1:fb:
09:ed:ce:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:00:27 2025 by rpki-client