Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/a3baca-437d-4607-9c1a-557a4c31e02e/1/tMQeWYNNphLYPKJBlPAsptdgJEg.mft
File: tMQeWYNNphLYPKJBlPAsptdgJEg.mft (raw, json)
Hash identifier: 4pApU22wI49Xj01Rmc6ou92XO2sjBuLhvP8B4KQf/Ro=
Subject key identifier: D7:4E:6E:0A:DF:70:30:38:F1:06:ED:9F:30:ED:3E:E9:EB:C8:2F:28
Authority key identifier: B4:C4:1E:59:83:4D:A6:12:D8:3C:A2:41:94:F0:2C:A6:D7:60:24:48
Certificate issuer: /CN=b4c41e59834da612d83ca24194f02ca6d7602448
Certificate serial: 019746670BD0B77D3733FE1369592F3230F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tMQeWYNNphLYPKJBlPAsptdgJEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/a3baca-437d-4607-9c1a-557a4c31e02e/1/tMQeWYNNphLYPKJBlPAsptdgJEg.mft
Manifest number: 03A0
Signing time: Fri 06 Jun 2025 18:00:47 +0000
Manifest this update: Fri 06 Jun 2025 18:00:47 +0000
Manifest next update: Sat 07 Jun 2025 18:00:47 +0000
Files and hashes: 1: hrqEKTykKr09BUd_K3mCMU0oC6Q.roa (hash: pufSFJ+QVHIcFkxQwEPRtygVlxFuvFk+kfnkYeAvjWg=)
2: tMQeWYNNphLYPKJBlPAsptdgJEg.crl (hash: nTcE9TkeTSSjxZ+tK0hqevYBLE66yecXLKmsWGutU5Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/a3baca-437d-4607-9c1a-557a4c31e02e/1/tMQeWYNNphLYPKJBlPAsptdgJEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/a3baca-437d-4607-9c1a-557a4c31e02e/1/tMQeWYNNphLYPKJBlPAsptdgJEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/tMQeWYNNphLYPKJBlPAsptdgJEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 18:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:67:0b:d0:b7:7d:37:33:fe:13:69:59:2f:32:30:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4c41e59834da612d83ca24194f02ca6d7602448
Validity
Not Before: Jun 6 18:00:47 2025 GMT
Not After : Jun 7 18:00:47 2025 GMT
Subject: CN=d74e6e0adf703038f106ed9f30ed3ee9ebc82f28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d8:6a:74:ed:ea:31:8c:f7:7e:58:8e:24:d2:
bf:87:1b:9f:96:ea:ff:4e:b6:11:4f:56:92:ee:38:
e3:1c:89:5a:ea:96:ba:34:6f:71:a3:ec:1b:49:7d:
88:05:02:d7:0a:e0:83:2f:6f:0c:4b:72:81:61:3d:
3f:75:ad:69:62:f6:ad:a7:42:30:e6:a0:23:05:f0:
ad:af:ba:82:24:d5:35:11:98:1b:ad:4f:72:71:c7:
5b:ab:dd:1b:26:a7:05:46:c1:e1:16:f2:7f:b7:e5:
71:6d:9d:81:10:fe:0d:40:0e:37:a8:da:53:da:70:
6f:a2:ca:cd:47:84:44:a6:e6:f6:1a:3c:3c:de:d8:
20:6d:09:c9:90:9c:1b:cd:a9:ba:41:ed:1f:51:da:
30:70:65:2b:b6:15:b3:40:6a:97:f6:0b:60:c8:fb:
77:ab:4a:29:e9:77:c4:39:1a:27:18:1f:7f:c5:88:
76:ec:f0:58:75:ec:a1:4e:37:fd:1d:9d:e8:d1:de:
f4:05:58:c1:12:ff:2d:78:6f:e5:8b:15:04:1c:3e:
77:8e:76:81:9d:ea:9c:32:43:ab:97:31:38:15:fe:
a4:b6:06:51:a5:bd:0c:3a:8f:d0:2e:a3:29:0b:4a:
48:bd:60:70:47:da:39:b3:e5:f2:bd:fc:be:26:8d:
b3:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:4E:6E:0A:DF:70:30:38:F1:06:ED:9F:30:ED:3E:E9:EB:C8:2F:28
X509v3 Authority Key Identifier:
keyid:B4:C4:1E:59:83:4D:A6:12:D8:3C:A2:41:94:F0:2C:A6:D7:60:24:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tMQeWYNNphLYPKJBlPAsptdgJEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a3baca-437d-4607-9c1a-557a4c31e02e/1/tMQeWYNNphLYPKJBlPAsptdgJEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a3baca-437d-4607-9c1a-557a4c31e02e/1/tMQeWYNNphLYPKJBlPAsptdgJEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:49:98:1b:62:b9:7b:a3:1c:ed:5f:ec:71:a2:58:73:24:33:
01:8c:6b:25:b4:bd:c5:10:a8:f7:18:f4:73:3d:51:f2:d9:1f:
35:a8:15:2e:96:29:46:23:97:58:6d:d6:18:2b:e7:61:1f:d2:
1f:2d:9b:0a:66:c9:bc:2d:aa:bb:c5:ca:cc:de:51:27:6f:70:
d2:2b:ad:db:c5:2b:eb:ff:cd:19:ef:64:cb:d2:6b:de:2b:fd:
44:39:20:92:d7:43:35:32:dd:b7:71:5e:c8:0d:7b:a5:e6:8f:
de:91:a4:34:17:4a:d2:8e:db:78:d8:ad:9e:b8:98:89:e0:3e:
a8:73:21:68:20:1e:10:45:92:90:3f:67:e3:86:0c:21:53:34:
6e:e9:60:54:97:9b:57:ef:45:23:4e:00:1d:c4:01:d2:fd:de:
ae:28:5c:78:a8:50:6f:f6:61:cf:c8:1b:65:b3:e8:60:02:23:
e9:d3:76:3a:bf:e5:7f:88:82:49:53:8d:0b:ab:91:23:4c:0f:
7f:9e:48:e4:e1:dd:c2:b9:34:86:43:80:61:74:5b:59:75:43:
be:99:06:d3:e1:b4:04:51:b2:11:f7:01:aa:bb:05:67:18:d4:
c3:13:58:14:cf:1c:0d:00:8a:1f:97:71:d5:73:a1:0b:a2:f9:
c7:cc:9e:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:26:23 2025 by rpki-client