Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/c1d9b7-393d-4625-afe7-f3c887281eba/1/tZvm7lSfM1xyhJennxRBA06FLDU.mft
File: tZvm7lSfM1xyhJennxRBA06FLDU.mft (raw, json)
Hash identifier: iJ8vPI1ZtsTOKRBa5gitXTeZN+q/BLkxDEbZPfINkrc=
Subject key identifier: A0:E3:C7:D5:63:77:4C:3A:D1:17:A7:3F:E2:8E:BF:F4:1B:6C:03:CB
Authority key identifier: B5:9B:E6:EE:54:9F:33:5C:72:84:97:A7:9F:14:41:03:4E:85:2C:35
Certificate issuer: /CN=b59be6ee549f335c728497a79f1441034e852c35
Certificate serial: 019750469AD730168FF647301DA0408171E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tZvm7lSfM1xyhJennxRBA06FLDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/c1d9b7-393d-4625-afe7-f3c887281eba/1/tZvm7lSfM1xyhJennxRBA06FLDU.mft
Manifest number: 144B
Signing time: Sun 08 Jun 2025 16:01:33 +0000
Manifest this update: Sun 08 Jun 2025 16:01:33 +0000
Manifest next update: Mon 09 Jun 2025 16:01:33 +0000
Files and hashes: 1: KDCfBX3ad6A_00hrvSAJKYMpmcs.roa (hash: fNL/A2pz+GNUAG3d72o3KDJ4AJqpHRk0BtaNcUYXr/8=)
2: tZvm7lSfM1xyhJennxRBA06FLDU.crl (hash: cfqz9+0ZdoUmI1gVn/3LU7EWoKYeNqbG2YRomRUlGfY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/c1d9b7-393d-4625-afe7-f3c887281eba/1/tZvm7lSfM1xyhJennxRBA06FLDU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/c1d9b7-393d-4625-afe7-f3c887281eba/1/tZvm7lSfM1xyhJennxRBA06FLDU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tZvm7lSfM1xyhJennxRBA06FLDU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 16:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:46:9a:d7:30:16:8f:f6:47:30:1d:a0:40:81:71:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b59be6ee549f335c728497a79f1441034e852c35
Validity
Not Before: Jun 8 16:01:33 2025 GMT
Not After : Jun 9 16:01:33 2025 GMT
Subject: CN=a0e3c7d563774c3ad117a73fe28ebff41b6c03cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:81:40:19:98:0a:50:f4:e4:ba:00:75:96:4a:
90:d1:1f:f5:c3:6c:ce:9b:fb:96:38:f0:29:ee:cd:
04:37:15:be:30:0e:7a:4e:f9:7e:6f:62:9f:b5:ed:
89:ab:ed:02:49:db:58:e6:b5:33:df:b4:0c:7a:3e:
51:a6:0c:16:01:08:44:4c:4e:f8:8e:f2:13:9b:02:
2a:e4:bb:f5:ad:e3:a3:87:98:7a:c0:9a:42:b8:6c:
5d:e3:cf:5a:fb:e2:39:fb:fa:16:2d:39:85:aa:fa:
0c:a4:e0:ed:e1:97:22:85:cf:de:07:80:91:4d:66:
aa:2c:07:59:bc:7d:ca:f9:b9:13:8d:56:84:c8:19:
89:4f:53:9b:39:5b:5f:89:5b:77:c8:84:ff:5f:6f:
ed:9f:b0:eb:7f:2c:66:fc:94:c9:f4:4b:b7:32:72:
59:8a:ff:ca:b5:46:af:88:00:8d:82:b0:60:dc:31:
37:5a:f4:09:1b:a5:9f:5d:04:67:b8:63:18:2c:6b:
01:7f:07:0f:45:87:70:c8:15:d0:f5:27:27:a6:03:
27:68:a1:6f:5a:3b:95:5a:4c:94:5e:61:77:9b:46:
fe:10:c1:3e:1f:06:34:db:15:34:b9:bb:bd:32:71:
e1:08:52:20:ae:3a:02:91:cf:9d:c5:cd:5c:96:32:
5b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:E3:C7:D5:63:77:4C:3A:D1:17:A7:3F:E2:8E:BF:F4:1B:6C:03:CB
X509v3 Authority Key Identifier:
keyid:B5:9B:E6:EE:54:9F:33:5C:72:84:97:A7:9F:14:41:03:4E:85:2C:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tZvm7lSfM1xyhJennxRBA06FLDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/c1d9b7-393d-4625-afe7-f3c887281eba/1/tZvm7lSfM1xyhJennxRBA06FLDU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/c1d9b7-393d-4625-afe7-f3c887281eba/1/tZvm7lSfM1xyhJennxRBA06FLDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
db:ad:63:59:0a:71:e9:9b:c9:9e:ad:79:af:47:7a:a1:6e:ae:
8d:3f:2f:c7:89:55:a6:ab:1b:6e:e0:33:1e:c0:91:6b:52:72:
6d:e0:7f:96:c2:8e:fd:4b:98:5e:3d:57:05:9c:8a:da:ef:df:
ee:bf:a7:85:25:c8:5f:04:fe:a7:34:d7:df:cd:50:b8:a5:7e:
a7:cf:62:bf:3d:aa:7d:ad:1c:8a:6d:5f:b6:83:bc:be:7f:9a:
99:76:aa:cf:69:20:6e:84:5c:81:eb:36:04:a6:28:03:11:97:
5a:eb:78:1e:62:0c:f7:ea:b3:4d:9d:b6:c9:b7:d0:b7:88:b4:
c1:5c:26:b0:87:84:e9:9e:c3:05:e3:9e:cf:ec:9b:df:12:53:
15:e1:3f:90:bb:52:11:f4:3e:ce:8a:7c:32:b0:a5:26:5e:8f:
f4:f7:02:7d:01:71:70:65:ac:4e:87:1f:9d:ab:51:31:1f:b5:
0f:d6:6d:75:7e:40:6a:bb:48:4f:95:6b:2e:ff:1b:1b:ea:8a:
34:b1:06:6c:d5:79:4d:6f:c5:94:d8:bf:71:91:69:2c:69:87:
72:3f:24:79:dc:cf:33:e9:a1:78:29:1e:66:d9:2e:b9:40:61:
08:03:84:d2:fa:4a:76:fc:eb:8f:3b:e6:a7:be:7c:13:93:a9:
63:d0:52:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:25:23 2025 by rpki-client