Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/cf2ebf-2a09-43d2-a225-a165359a6211/1/TuQFf56gFAzvfOR4k2nFzwH3xo4.mft
File: TuQFf56gFAzvfOR4k2nFzwH3xo4.mft (raw, json)
Hash identifier: C1IxQoomrEIg4vJcdkJ8OwtJpz6M6UspytD067P4kf4=
Subject key identifier: C0:97:90:B0:26:EC:9F:83:E0:1B:CF:A1:67:B2:4B:F6:96:AF:72:0C
Authority key identifier: 4E:E4:05:7F:9E:A0:14:0C:EF:7C:E4:78:93:69:C5:CF:01:F7:C6:8E
Certificate issuer: /CN=4ee4057f9ea0140cef7ce4789369c5cf01f7c68e
Certificate serial: 01974C68D06950FC8DD6E102B64AE9DBE64C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TuQFf56gFAzvfOR4k2nFzwH3xo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/cf2ebf-2a09-43d2-a225-a165359a6211/1/TuQFf56gFAzvfOR4k2nFzwH3xo4.mft
Manifest number: 13D4
Signing time: Sat 07 Jun 2025 22:00:26 +0000
Manifest this update: Sat 07 Jun 2025 22:00:26 +0000
Manifest next update: Sun 08 Jun 2025 22:00:26 +0000
Files and hashes: 1: CEuXJrDVGtc7Z4aBHwivyFbJk6I.roa (hash: YlEuDFYK1ghHbSy2lJ7W4OAiAQ8b74GXZr4K2Q1Nk+o=)
2: TuQFf56gFAzvfOR4k2nFzwH3xo4.crl (hash: UflS83nRrgMbgHrN+S1QLQFwHBmVhb5peRTEJXCwUNc=)
3: zQYGnUVB4bBy-t9A3BsXP2JPTI8.roa (hash: yYhiUqDeYjOIAS1CW8QCSgxrWRWrSjdPUM0N7RvDxVg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/cf2ebf-2a09-43d2-a225-a165359a6211/1/TuQFf56gFAzvfOR4k2nFzwH3xo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/cf2ebf-2a09-43d2-a225-a165359a6211/1/TuQFf56gFAzvfOR4k2nFzwH3xo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TuQFf56gFAzvfOR4k2nFzwH3xo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:68:d0:69:50:fc:8d:d6:e1:02:b6:4a:e9:db:e6:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ee4057f9ea0140cef7ce4789369c5cf01f7c68e
Validity
Not Before: Jun 7 22:00:26 2025 GMT
Not After : Jun 8 22:00:26 2025 GMT
Subject: CN=c09790b026ec9f83e01bcfa167b24bf696af720c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4b:1a:e5:e4:eb:2c:ae:3b:23:55:fa:b9:02:
72:b0:f4:d8:2b:9a:3a:8c:97:e5:62:a8:e3:1f:47:
aa:dc:e3:79:13:8e:69:fe:33:81:f7:d0:08:7e:e2:
ca:78:22:e4:35:48:81:36:28:03:80:46:44:52:c9:
0a:a6:0f:1d:5a:2d:8e:87:48:8f:4f:28:64:32:ed:
2b:09:34:5e:c3:a1:e3:6c:d8:e2:98:83:b8:55:78:
30:2b:3d:ac:7d:81:40:98:cd:8c:45:72:46:47:f5:
ff:e9:51:2a:90:0d:b6:af:fe:e8:40:18:6c:95:c8:
e8:dc:f2:12:2c:33:82:04:9c:1e:1c:cd:7a:f5:fa:
2e:32:6a:57:87:bd:e1:26:5c:f3:3d:91:d0:7c:76:
8e:eb:44:5a:68:21:94:6f:96:ab:99:4c:85:b2:98:
ee:9f:d4:49:93:66:11:40:f2:4f:26:73:96:16:e6:
5f:95:72:d3:1e:8d:6c:f7:45:ac:3e:07:67:f1:3f:
4f:d7:16:d4:0b:df:54:32:a6:24:50:da:40:d1:5b:
0a:21:e2:20:61:14:2a:4d:01:96:d4:ea:c9:cc:b9:
26:d6:07:08:f1:cf:44:3e:30:63:38:89:6b:b6:9c:
df:8e:f9:67:ff:fe:55:f2:71:30:05:ba:9a:43:7e:
57:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:97:90:B0:26:EC:9F:83:E0:1B:CF:A1:67:B2:4B:F6:96:AF:72:0C
X509v3 Authority Key Identifier:
keyid:4E:E4:05:7F:9E:A0:14:0C:EF:7C:E4:78:93:69:C5:CF:01:F7:C6:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuQFf56gFAzvfOR4k2nFzwH3xo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/cf2ebf-2a09-43d2-a225-a165359a6211/1/TuQFf56gFAzvfOR4k2nFzwH3xo4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/cf2ebf-2a09-43d2-a225-a165359a6211/1/TuQFf56gFAzvfOR4k2nFzwH3xo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:ca:42:cf:85:c2:dd:a1:a1:2a:4f:b1:68:03:a3:e1:b9:f5:
39:30:bb:de:b7:d6:db:78:7b:12:b5:65:ab:fa:13:5e:cd:2b:
bb:f7:49:5e:12:74:e0:0c:ca:89:6c:dc:0c:73:61:ef:e7:df:
c9:7d:7b:eb:0a:e2:2c:0a:56:fb:ee:19:ab:36:6f:37:fd:32:
b1:8b:25:32:e6:da:7d:f2:90:77:67:90:17:6a:32:34:d5:c0:
0c:03:ec:c6:7c:0f:81:d6:16:fd:79:83:48:60:57:91:a6:4f:
c5:d7:bd:06:06:c5:e0:57:d1:a0:e6:e0:81:11:cc:62:6e:69:
bb:ff:4e:7d:ea:1f:4d:60:25:a5:37:99:10:e2:11:75:6f:ef:
6a:77:34:04:65:32:b0:69:7d:5a:db:e3:73:12:35:41:15:d3:
29:b3:8c:8c:50:5a:83:50:e8:05:69:a7:6f:61:52:df:fd:da:
1c:41:ca:15:9a:ef:e3:f3:12:70:67:54:ac:ed:78:3f:24:e7:
af:55:85:8b:3a:71:ab:f4:1e:2c:13:78:26:47:4f:48:d5:e2:
39:7d:77:e9:d4:21:0d:56:67:77:f5:44:c2:9a:18:19:f0:24:
5e:02:4e:b4:91:4c:f8:ab:22:ab:df:7c:f7:97:a6:46:f1:19:
fc:1f:54:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:47:50 2025 by rpki-client