Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/TPgIAsZXmk1KEGCNz5LprOmQWxY.mft
File: TPgIAsZXmk1KEGCNz5LprOmQWxY.mft (raw, json)
Hash identifier: zx1MIQsl3//uw698he5lYacI+HCCQOafLx9449X1zTQ=
Subject key identifier: 12:C4:03:89:B5:83:2D:F2:BA:5B:A7:56:3F:64:43:C5:FF:5A:06:1A
Authority key identifier: 4C:F8:08:02:C6:57:9A:4D:4A:10:60:8D:CF:92:E9:AC:E9:90:5B:16
Certificate issuer: /CN=4cf80802c6579a4d4a10608dcf92e9ace9905b16
Certificate serial: 01974AE8CF5B1A040DC7ACF6257FEF61C2C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TPgIAsZXmk1KEGCNz5LprOmQWxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/TPgIAsZXmk1KEGCNz5LprOmQWxY.mft
Manifest number: 043A
Signing time: Sat 07 Jun 2025 15:01:00 +0000
Manifest this update: Sat 07 Jun 2025 15:01:00 +0000
Manifest next update: Sun 08 Jun 2025 15:01:00 +0000
Files and hashes: 1: FXVByNPxdRkMO-o6GsvvheK9loQ.roa (hash: cJsMagby7QEs7crG2RTXoRPWZv4X7cM8ggqQkmQ3WIs=)
2: TPgIAsZXmk1KEGCNz5LprOmQWxY.crl (hash: RKP+loTHWxW8aAo4sIo+cT413PmjGF6jBNKFRP1Kja8=)
3: lUkUA-Czwa2okiPJT7Kq8pTW_Yo.roa (hash: fS+41ubfx3zCs5hYx7i3kz5j50EsoWw6NrXQjh9DDSs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/TPgIAsZXmk1KEGCNz5LprOmQWxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/TPgIAsZXmk1KEGCNz5LprOmQWxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/TPgIAsZXmk1KEGCNz5LprOmQWxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:e8:cf:5b:1a:04:0d:c7:ac:f6:25:7f:ef:61:c2:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cf80802c6579a4d4a10608dcf92e9ace9905b16
Validity
Not Before: Jun 7 15:01:00 2025 GMT
Not After : Jun 8 15:01:00 2025 GMT
Subject: CN=12c40389b5832df2ba5ba7563f6443c5ff5a061a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:47:3a:95:57:f3:df:8d:e2:f1:f3:f0:f1:35:
7a:f1:0c:89:ad:e5:c9:09:12:73:16:36:b1:21:b7:
2e:b9:12:a5:27:be:f7:27:de:17:94:f1:dc:f3:bf:
a9:12:d8:06:0a:34:bd:f0:31:35:ef:60:d0:3d:d6:
5f:c9:93:92:d8:01:a1:d0:f6:de:7b:36:ce:17:49:
21:cc:0a:ab:d1:e0:e7:d6:dd:b7:6a:64:b2:2a:b8:
b9:fd:b4:7d:98:b0:8a:66:2c:5d:db:92:8d:fc:f7:
41:96:48:27:9d:d6:4a:20:18:81:1b:ba:30:06:59:
d7:19:4b:21:fe:9d:4a:d7:c1:d3:03:83:ec:5e:c9:
93:bd:9d:35:0a:04:ba:b9:7e:23:b1:6f:c1:51:99:
88:52:0a:ea:31:3c:c4:f8:d3:39:61:bc:9c:58:28:
a0:5c:b1:00:96:bb:3e:c6:70:20:a0:d9:c7:5e:17:
dd:04:34:12:d4:c3:c5:8e:81:09:f6:6e:89:da:27:
33:db:4b:f8:be:85:49:fb:87:6d:a7:83:ab:72:96:
7f:28:75:1a:75:f6:7f:76:cf:f5:ed:97:8e:c1:9a:
bf:e6:bc:e2:16:f5:83:7c:5f:54:86:69:08:1f:8c:
e5:a1:f8:b3:6a:4d:bd:3f:41:56:69:3a:6c:0a:56:
9d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:C4:03:89:B5:83:2D:F2:BA:5B:A7:56:3F:64:43:C5:FF:5A:06:1A
X509v3 Authority Key Identifier:
keyid:4C:F8:08:02:C6:57:9A:4D:4A:10:60:8D:CF:92:E9:AC:E9:90:5B:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TPgIAsZXmk1KEGCNz5LprOmQWxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/TPgIAsZXmk1KEGCNz5LprOmQWxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/TPgIAsZXmk1KEGCNz5LprOmQWxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:26:7d:81:71:b5:6f:49:c6:a2:37:d6:b0:c7:0a:9c:ca:b7:
f4:36:63:94:1a:54:6e:95:4f:d9:8e:48:11:da:95:0d:4d:90:
70:dc:d8:d9:5a:61:f8:0e:83:23:84:ab:42:17:18:5f:09:7c:
3b:bc:d3:3f:c4:fb:ec:bf:99:88:55:27:7b:b2:b0:8c:e5:7e:
be:2d:b9:62:09:24:37:89:0f:8b:a8:3b:14:5f:b6:be:25:7c:
2d:a3:a1:13:68:32:cd:8c:4d:19:b0:ff:93:1e:16:01:02:6f:
b9:f9:ce:6b:e8:3a:85:5f:28:d2:d0:07:74:e7:5c:a4:24:5d:
79:30:a5:35:81:ee:9b:47:b3:e6:e6:df:51:0b:b0:2a:b3:28:
ab:3f:4e:21:6c:e4:64:c6:7b:ca:58:aa:3e:e2:45:8e:92:ef:
32:8e:e0:4a:f6:bc:08:00:3c:2c:f1:91:05:a5:17:bb:38:ef:
25:c4:85:d1:63:2b:8c:87:36:cb:30:1c:da:3f:a8:41:c2:45:
b0:0d:30:08:ac:67:93:c5:a2:f0:be:55:80:d5:2a:35:b5:99:
87:48:fc:01:d8:59:61:90:7e:aa:d3:0e:ec:19:28:98:49:96:
50:ff:1c:b4:90:c0:6a:2c:3b:1d:04:bd:07:1f:3d:9e:ec:c4:
dc:bc:b4:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 19:49:21 2025 by rpki-client