Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/4afeab-02b9-4ebd-bfa2-8e80b496a03e/1/TgTgpximE5qcZfDUiGu4JxTaZoI.mft
File: TgTgpximE5qcZfDUiGu4JxTaZoI.mft (raw, json)
Hash identifier: 5J65JgpNLW0sEcTAXjJA3V8oZb+OCZNktMtlf6TdsWw=
Subject key identifier: CB:3A:7E:C1:2C:62:28:94:8E:BD:9B:13:C0:4F:2A:56:5A:EB:B7:65
Authority key identifier: 4E:04:E0:A7:18:A6:13:9A:9C:65:F0:D4:88:6B:B8:27:14:DA:66:82
Certificate issuer: /CN=4e04e0a718a6139a9c65f0d4886bb82714da6682
Certificate serial: 01975DCB1EE803C355DB532D416A2DCCCBA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TgTgpximE5qcZfDUiGu4JxTaZoI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/4afeab-02b9-4ebd-bfa2-8e80b496a03e/1/TgTgpximE5qcZfDUiGu4JxTaZoI.mft
Manifest number: 1587
Signing time: Wed 11 Jun 2025 07:01:22 +0000
Manifest this update: Wed 11 Jun 2025 07:01:22 +0000
Manifest next update: Thu 12 Jun 2025 07:01:22 +0000
Files and hashes: 1: TgTgpximE5qcZfDUiGu4JxTaZoI.crl (hash: J86VgyDqk7WGP5mc921VKeiZ/IuBQn2Cspz7xCfCikQ=)
2: _DVbXJIlrc4WueVJodx5_dUQQGU.roa (hash: qLnLYdx/R1C59idEfb9lAoJsSeK5qnRHJhL7xW0LEkE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/4afeab-02b9-4ebd-bfa2-8e80b496a03e/1/TgTgpximE5qcZfDUiGu4JxTaZoI.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/4afeab-02b9-4ebd-bfa2-8e80b496a03e/1/TgTgpximE5qcZfDUiGu4JxTaZoI.mft
rsync://rpki.ripe.net/repository/DEFAULT/TgTgpximE5qcZfDUiGu4JxTaZoI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 07:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5d:cb:1e:e8:03:c3:55:db:53:2d:41:6a:2d:cc:cb:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e04e0a718a6139a9c65f0d4886bb82714da6682
Validity
Not Before: Jun 11 07:01:22 2025 GMT
Not After : Jun 12 07:01:22 2025 GMT
Subject: CN=cb3a7ec12c6228948ebd9b13c04f2a565aebb765
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a9:e6:0b:db:07:e7:a3:2d:20:06:2a:4b:13:
fb:b6:fc:66:84:04:88:be:8e:5d:31:47:44:ff:9b:
0a:d3:51:46:b2:57:e0:b2:6e:7a:4f:f7:84:86:14:
bd:98:66:d1:bb:03:68:bd:82:50:bc:fe:01:d8:e4:
a2:c5:87:d9:7b:3f:2a:66:bb:24:d3:13:bc:b7:2a:
3e:2d:7a:88:cb:71:a6:e1:70:e3:4f:fd:15:5f:04:
ed:f9:f4:e9:f0:42:fb:72:7c:55:e9:5d:8f:39:5b:
87:38:40:a4:6e:a1:a6:b8:60:22:dd:33:ee:17:41:
04:d2:42:75:5e:46:67:9e:a7:30:14:73:74:84:74:
bc:56:5a:9d:46:85:8c:ca:be:9b:33:29:db:c4:09:
18:4b:d8:8c:ae:f3:14:87:11:a0:92:52:07:32:7f:
19:3a:bb:25:af:9e:9f:54:7e:ff:ee:be:fe:9a:3a:
99:50:cb:51:1f:8e:19:fa:dc:40:dc:8c:bb:b9:b5:
68:a2:0e:df:f0:32:85:98:dd:6f:ef:72:45:6c:be:
5c:fe:88:a9:77:85:a7:8c:cb:20:f4:a0:b2:80:b1:
61:b6:4c:1d:21:ae:42:03:7a:87:f7:83:10:d0:ed:
0a:28:44:20:7d:f4:42:14:9c:a6:bd:03:ec:70:20:
de:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:3A:7E:C1:2C:62:28:94:8E:BD:9B:13:C0:4F:2A:56:5A:EB:B7:65
X509v3 Authority Key Identifier:
keyid:4E:04:E0:A7:18:A6:13:9A:9C:65:F0:D4:88:6B:B8:27:14:DA:66:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TgTgpximE5qcZfDUiGu4JxTaZoI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4afeab-02b9-4ebd-bfa2-8e80b496a03e/1/TgTgpximE5qcZfDUiGu4JxTaZoI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4afeab-02b9-4ebd-bfa2-8e80b496a03e/1/TgTgpximE5qcZfDUiGu4JxTaZoI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:ea:f2:97:43:6f:99:e9:26:f4:4d:af:de:7e:b9:49:ca:22:
5c:03:0e:c3:9c:84:53:5b:45:c1:e8:d1:74:d3:f0:03:a0:73:
e1:67:f7:46:dd:8f:15:2c:db:e4:1a:53:2e:fa:e9:6e:29:56:
62:eb:9a:80:ef:49:76:04:43:c5:6b:fc:3c:78:22:18:17:11:
9b:cf:8d:b8:14:a8:ed:3e:96:9a:65:8a:a8:c0:f8:99:3d:ae:
63:40:8b:ab:47:67:97:59:a6:f5:4a:af:6c:c0:c7:de:8c:2d:
3c:8d:ea:46:32:91:7c:d2:6f:73:fa:ce:af:e6:12:a5:e5:5d:
2a:00:25:ee:b8:0e:fc:ed:02:6d:3e:d4:fa:e4:c1:31:2f:53:
47:a1:c6:b9:20:93:55:ff:4f:da:11:a9:45:59:bb:7e:b3:7c:
fc:85:1b:1b:fb:1c:44:d0:58:b1:54:a0:a7:be:40:4a:b4:eb:
73:db:05:51:70:38:60:70:d1:f3:63:eb:ec:60:e4:d2:92:e2:
1f:10:61:55:b7:47:c3:7e:63:c1:40:28:c0:c3:03:3c:a9:ec:
15:3c:76:f1:16:e3:e3:54:15:77:5f:27:e0:e5:da:ec:34:47:
31:d0:a3:af:08:d0:ae:52:4d:ef:f8:4b:16:65:66:42:f8:9e:
3b:15:41:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 13:30:34 2025 by rpki-client