Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/9ff43e-f817-4ebe-a0d9-7a18931d985b/1/tn8bh-Z1L0VDm4UozJaLR3CloPs.mft
File: tn8bh-Z1L0VDm4UozJaLR3CloPs.mft (raw, json)
Hash identifier: 3vlZbdbcnnkvx3ktetGbD3eWHbQlryXVxxyPhU75x4c=
Subject key identifier: D9:78:A0:D9:43:4E:EA:86:D3:17:E7:FA:C8:B5:56:77:13:3F:19:F2
Authority key identifier: B6:7F:1B:87:E6:75:2F:45:43:9B:85:28:CC:96:8B:47:70:A5:A0:FB
Certificate issuer: /CN=b67f1b87e6752f45439b8528cc968b4770a5a0fb
Certificate serial: 019748FA7DD6E3294DABDBCCAF44130AD86C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tn8bh-Z1L0VDm4UozJaLR3CloPs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/9ff43e-f817-4ebe-a0d9-7a18931d985b/1/tn8bh-Z1L0VDm4UozJaLR3CloPs.mft
Manifest number: 157A
Signing time: Sat 07 Jun 2025 06:01:04 +0000
Manifest this update: Sat 07 Jun 2025 06:01:04 +0000
Manifest next update: Sun 08 Jun 2025 06:01:04 +0000
Files and hashes: 1: kYfhtSfEKW3P-62E9GiF_Ua9EUo.roa (hash: p1no5bz1+uk9Sv3KCtgs/QuEn0taiRhnvBxPn7m9ACY=)
2: tn8bh-Z1L0VDm4UozJaLR3CloPs.crl (hash: 8Li/TusIgYc9MaXFRTVoKo7eyQTTMwHsPgaNw/cB6p8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/9ff43e-f817-4ebe-a0d9-7a18931d985b/1/tn8bh-Z1L0VDm4UozJaLR3CloPs.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/9ff43e-f817-4ebe-a0d9-7a18931d985b/1/tn8bh-Z1L0VDm4UozJaLR3CloPs.mft
rsync://rpki.ripe.net/repository/DEFAULT/tn8bh-Z1L0VDm4UozJaLR3CloPs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:7d:d6:e3:29:4d:ab:db:cc:af:44:13:0a:d8:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b67f1b87e6752f45439b8528cc968b4770a5a0fb
Validity
Not Before: Jun 7 06:01:04 2025 GMT
Not After : Jun 8 06:01:04 2025 GMT
Subject: CN=d978a0d9434eea86d317e7fac8b55677133f19f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:39:00:93:e1:62:cd:3b:4c:28:d1:d7:a6:f8:
62:d2:3a:a4:a5:a6:b2:86:9e:55:94:37:99:f9:18:
f0:64:08:e7:08:17:82:2e:33:0f:e8:fc:82:73:e1:
9b:2e:6d:a4:fa:cb:4c:59:9a:d0:6f:3c:13:37:3a:
b4:3f:6e:a4:0c:9d:a2:a8:d0:d2:f6:35:a8:22:39:
33:d8:f2:60:7a:ce:dd:03:31:e6:3f:41:04:4c:1b:
a4:93:83:45:a8:63:7d:c4:0e:9e:c8:29:a7:a9:59:
b1:58:f5:8b:2c:ea:47:cc:5d:09:46:cb:56:d1:a7:
2c:b5:68:8c:e3:5e:d5:cb:be:ca:df:e9:8b:2e:1d:
0d:ff:b7:f1:b7:56:37:72:a0:01:78:e6:d4:91:19:
a3:c1:8d:ca:3e:84:18:81:02:f3:d1:e6:f1:8b:37:
3d:e0:5f:f3:72:20:f3:42:9b:db:a6:37:9a:bc:e5:
75:13:a4:c2:87:16:a1:9e:e4:55:3b:c2:6d:58:6e:
24:94:d4:80:5c:da:3e:5c:7f:c0:32:1e:53:86:9b:
fa:89:08:e9:e7:e1:de:f7:26:cc:b6:c8:0e:b3:c5:
00:b9:6d:8d:58:88:65:8a:c7:fd:6a:92:f8:45:e7:
35:fd:75:2c:56:cb:d3:08:82:08:91:1a:45:33:76:
7b:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:78:A0:D9:43:4E:EA:86:D3:17:E7:FA:C8:B5:56:77:13:3F:19:F2
X509v3 Authority Key Identifier:
keyid:B6:7F:1B:87:E6:75:2F:45:43:9B:85:28:CC:96:8B:47:70:A5:A0:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tn8bh-Z1L0VDm4UozJaLR3CloPs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9ff43e-f817-4ebe-a0d9-7a18931d985b/1/tn8bh-Z1L0VDm4UozJaLR3CloPs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9ff43e-f817-4ebe-a0d9-7a18931d985b/1/tn8bh-Z1L0VDm4UozJaLR3CloPs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:35:ab:b5:79:80:d4:87:50:3a:01:e7:9f:94:3b:d8:9a:e2:
c5:2f:fd:08:b4:01:2c:3e:3e:ec:80:e7:2b:1b:e5:34:02:a2:
ab:11:7e:fd:f9:f6:58:99:e5:c0:20:36:9e:9d:62:49:c3:7b:
a5:f5:63:cd:cb:9f:74:a1:bf:36:a5:48:d5:66:4e:ee:72:39:
7f:d1:3c:5b:ac:26:6b:61:0e:c1:a6:7f:1a:1b:60:3c:38:c6:
65:93:23:ee:d4:d7:08:09:59:05:22:bf:c2:3c:dd:45:20:a4:
30:c1:59:95:db:17:de:c5:d6:73:62:ac:22:c3:40:58:ba:cb:
fc:74:33:af:01:99:66:3a:bc:e4:e4:f4:86:40:e8:f3:1b:4e:
b1:18:f5:db:95:f0:47:52:c9:d5:61:91:ec:26:18:d1:26:0f:
9a:3a:3d:d7:fe:3b:29:c9:e1:b5:dd:18:a4:8a:86:79:c8:23:
19:6f:e5:27:ff:e7:23:ac:6e:bb:62:9d:bb:01:ef:4e:0e:1c:
34:1c:4e:16:9a:3b:a7:b9:b6:11:51:d7:d2:3a:73:1f:c6:c3:
d6:90:ca:8f:ea:95:25:84:b6:f2:3e:0a:6f:db:e8:80:2d:0d:
06:f2:39:88:51:b9:4e:c1:7b:71:df:24:b8:4d:06:59:8a:00:
64:01:cc:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:10:14 2025 by rpki-client