Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/7358bd-c72f-4d9b-bb0d-0b4f717aa363/1/TVg7b1bPCSco3lk62VKuoZzjGIY.mft
File: TVg7b1bPCSco3lk62VKuoZzjGIY.mft (raw, json)
Hash identifier: IN+dphL/EblTLdVvbx5ShOKFmI+tXzW9xCO0weBq2Lg=
Subject key identifier: 69:09:DE:D9:F7:42:1E:73:A4:DF:0B:DF:45:D3:10:86:AE:D7:D9:85
Authority key identifier: 4D:58:3B:6F:56:CF:09:27:28:DE:59:3A:D9:52:AE:A1:9C:E3:18:86
Certificate issuer: /CN=4d583b6f56cf092728de593ad952aea19ce31886
Certificate serial: 01974C31F1599E92354346CA76E6CD7F06DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TVg7b1bPCSco3lk62VKuoZzjGIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/7358bd-c72f-4d9b-bb0d-0b4f717aa363/1/TVg7b1bPCSco3lk62VKuoZzjGIY.mft
Manifest number: 14D4
Signing time: Sat 07 Jun 2025 21:00:30 +0000
Manifest this update: Sat 07 Jun 2025 21:00:30 +0000
Manifest next update: Sun 08 Jun 2025 21:00:30 +0000
Files and hashes: 1: TVg7b1bPCSco3lk62VKuoZzjGIY.crl (hash: 3iGIRzSeIImO0BJsCZX9tUrwXLbSXD4iuXNqG/viaN4=)
2: bOLohqMKHagd_oJ4fhpVo7NmmeM.roa (hash: zc2jSYa3eGI9kHGQfF97SUcixmU4Ya6CBO+chtxYjPg=)
3: rAEXG8LVncu-VzH6pWQ3O-v7vJk.roa (hash: pHtLRGskuQm7vCqkOegxgViLMoHSueDTg44n3jic3FY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/7358bd-c72f-4d9b-bb0d-0b4f717aa363/1/TVg7b1bPCSco3lk62VKuoZzjGIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/7358bd-c72f-4d9b-bb0d-0b4f717aa363/1/TVg7b1bPCSco3lk62VKuoZzjGIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/TVg7b1bPCSco3lk62VKuoZzjGIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 21:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:31:f1:59:9e:92:35:43:46:ca:76:e6:cd:7f:06:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d583b6f56cf092728de593ad952aea19ce31886
Validity
Not Before: Jun 7 21:00:30 2025 GMT
Not After : Jun 8 21:00:30 2025 GMT
Subject: CN=6909ded9f7421e73a4df0bdf45d31086aed7d985
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:0a:b1:f5:c3:e5:7f:f2:c8:e6:8b:5d:ae:ec:
e6:5e:2c:1b:10:dc:2b:1e:f9:03:e7:02:cf:6f:da:
ba:a3:a9:c0:93:63:5a:40:bc:22:7a:92:ea:0f:39:
8e:cf:d1:08:56:9b:1d:d0:62:e6:f2:73:d6:27:24:
3f:15:67:e1:da:ff:51:11:a4:f7:67:d5:92:3e:7a:
2f:9a:42:6f:7e:12:96:86:7a:ee:d7:5a:28:6e:bd:
10:39:ae:36:d9:14:9d:70:f2:77:e5:1a:19:e5:9b:
e7:4d:1d:43:ae:ed:84:be:83:70:7f:12:26:6e:b1:
d5:79:67:53:87:ae:5c:e8:b5:3d:27:83:0f:2f:fa:
a5:46:97:d4:25:6d:00:40:28:f0:64:2f:d5:23:21:
cb:a2:e7:fc:b6:8c:07:b8:80:ab:90:c3:a8:21:a4:
cb:f2:2d:c2:e4:13:9b:19:ab:ed:f4:51:a2:9b:e2:
64:a1:3a:b4:b1:07:18:60:b6:6e:25:9a:7e:f7:f7:
db:fd:1e:41:ea:15:a2:c5:5b:a1:12:cb:a0:c5:db:
07:9c:ca:b0:fc:9a:67:57:30:35:1f:ec:74:0e:4d:
79:29:dd:0c:67:7b:52:94:1f:53:8c:e4:94:63:79:
11:2a:db:bd:44:41:c6:3d:8e:a4:71:ed:1c:71:9f:
f2:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:09:DE:D9:F7:42:1E:73:A4:DF:0B:DF:45:D3:10:86:AE:D7:D9:85
X509v3 Authority Key Identifier:
keyid:4D:58:3B:6F:56:CF:09:27:28:DE:59:3A:D9:52:AE:A1:9C:E3:18:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TVg7b1bPCSco3lk62VKuoZzjGIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/7358bd-c72f-4d9b-bb0d-0b4f717aa363/1/TVg7b1bPCSco3lk62VKuoZzjGIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/7358bd-c72f-4d9b-bb0d-0b4f717aa363/1/TVg7b1bPCSco3lk62VKuoZzjGIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:dd:84:09:bc:6d:b9:0a:f8:dd:8c:15:21:88:9a:de:8a:9f:
d1:b5:93:12:e7:10:1e:7d:74:99:e6:78:ee:25:14:cb:86:fc:
d6:6b:ed:21:35:c2:20:5c:e2:13:94:18:a7:44:2e:ad:6d:84:
43:44:98:12:21:87:ef:16:af:d2:ad:01:6f:88:6e:cc:a0:81:
8a:82:9d:d6:d9:20:b7:2b:c7:1b:ae:c4:b4:33:40:d9:2c:77:
06:bb:d4:7c:e1:00:4a:92:9a:90:ad:2e:88:55:5c:93:dc:80:
bd:5f:bd:d6:35:60:ba:1f:af:cd:64:57:58:6d:5d:ba:ec:55:
1b:2c:0d:eb:80:10:46:37:33:83:c7:47:63:6b:74:20:f1:bc:
53:6b:f5:36:de:ad:d0:7a:8d:cb:ea:e8:0f:a2:cb:8b:5c:6d:
d6:19:97:fc:02:75:eb:c4:35:9d:d5:4b:02:9f:19:7e:20:22:
ee:a9:05:a9:19:92:5b:84:a7:a9:f7:1b:85:9b:d1:8a:bb:2c:
c3:7e:64:5f:36:ce:00:4d:f0:6b:5b:a0:89:eb:a0:f0:26:13:
1e:a4:d7:78:9a:f8:dc:df:96:2c:1c:55:a0:6d:04:0b:f8:1b:
69:75:ef:4e:e6:1e:d6:d1:6f:12:77:96:0d:69:16:b9:95:0a:
9a:b8:79:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:55:02 2025 by rpki-client