Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/3ae541-57f4-4466-91d5-02a3be4773a3/1/TWFl5PGBPks_XEhyBjHHzAsjdNI.mft
File: TWFl5PGBPks_XEhyBjHHzAsjdNI.mft (raw, json)
Hash identifier: C/2R2a5SxXwPjsG7G/dA8n/Xmj6tlDgxGU7NTrdt1R8=
Subject key identifier: AD:85:26:B5:DB:CD:DA:62:D0:E4:54:70:50:CE:D5:A6:FC:5F:D1:61
Authority key identifier: 4D:61:65:E4:F1:81:3E:4B:3F:5C:48:72:06:31:C7:CC:0B:23:74:D2
Certificate issuer: /CN=4d6165e4f1813e4b3f5c48720631c7cc0b2374d2
Certificate serial: 01974EC5ADA9C7975297A919650C49C50768
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TWFl5PGBPks_XEhyBjHHzAsjdNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/3ae541-57f4-4466-91d5-02a3be4773a3/1/TWFl5PGBPks_XEhyBjHHzAsjdNI.mft
Manifest number: 0B7A
Signing time: Sun 08 Jun 2025 09:01:07 +0000
Manifest this update: Sun 08 Jun 2025 09:01:07 +0000
Manifest next update: Mon 09 Jun 2025 09:01:07 +0000
Files and hashes: 1: NvJ8oLDEBqhT1H-zCdKolqnypws.roa (hash: aLhfn5rS031yK9YSuCvXO/dQvbflGZGOUFgblOZMFc4=)
2: TWFl5PGBPks_XEhyBjHHzAsjdNI.crl (hash: QhK3GwZE/cGq01ArKqhnPK0H0ty4/PLZE4JJ3YoOM1k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/3ae541-57f4-4466-91d5-02a3be4773a3/1/TWFl5PGBPks_XEhyBjHHzAsjdNI.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/3ae541-57f4-4466-91d5-02a3be4773a3/1/TWFl5PGBPks_XEhyBjHHzAsjdNI.mft
rsync://rpki.ripe.net/repository/DEFAULT/TWFl5PGBPks_XEhyBjHHzAsjdNI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:c5:ad:a9:c7:97:52:97:a9:19:65:0c:49:c5:07:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d6165e4f1813e4b3f5c48720631c7cc0b2374d2
Validity
Not Before: Jun 8 09:01:07 2025 GMT
Not After : Jun 9 09:01:07 2025 GMT
Subject: CN=ad8526b5dbcdda62d0e4547050ced5a6fc5fd161
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:de:87:83:c2:00:dd:f7:43:2e:8c:82:89:bb:
70:30:96:82:e4:68:a6:71:49:30:b9:a2:cd:5c:36:
af:d2:17:9c:a2:01:9b:f6:2b:2a:b4:b8:f6:02:c7:
1d:f8:db:6c:32:7d:d2:6f:10:30:dd:e4:30:73:e1:
38:f2:a1:f3:05:46:20:bc:29:84:63:ce:cc:cd:35:
32:32:b8:2b:fa:5d:0c:33:27:e2:9b:4c:fd:d2:85:
b5:6b:ff:2b:0b:44:f2:09:03:d0:cc:9a:69:e7:23:
b2:d8:8d:39:10:55:bc:6e:a3:a7:da:95:2f:15:38:
6b:e8:b2:d4:13:9e:fd:c2:7b:a9:e8:6e:55:39:ca:
6c:ca:14:ca:19:10:0e:51:5b:1b:1f:11:0a:a1:92:
17:99:1c:88:33:b2:11:38:26:92:eb:bf:60:2e:09:
2a:fe:ec:8c:31:f3:e1:b3:cb:53:47:aa:2a:d8:5d:
fb:e5:23:de:b4:de:ad:e2:4b:bb:3d:b2:f1:f0:86:
ee:9b:e6:45:f5:0f:b5:1f:e1:39:99:1e:b3:77:8a:
d7:6a:80:12:83:aa:fc:7b:d3:5b:e9:1b:be:f9:72:
a2:fd:12:01:8c:5d:27:4b:b6:72:10:b0:d2:11:4a:
d5:b3:41:18:52:3b:ed:25:88:17:4c:fa:c5:0f:cb:
1f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:85:26:B5:DB:CD:DA:62:D0:E4:54:70:50:CE:D5:A6:FC:5F:D1:61
X509v3 Authority Key Identifier:
keyid:4D:61:65:E4:F1:81:3E:4B:3F:5C:48:72:06:31:C7:CC:0B:23:74:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TWFl5PGBPks_XEhyBjHHzAsjdNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/3ae541-57f4-4466-91d5-02a3be4773a3/1/TWFl5PGBPks_XEhyBjHHzAsjdNI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/3ae541-57f4-4466-91d5-02a3be4773a3/1/TWFl5PGBPks_XEhyBjHHzAsjdNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:f0:29:0a:8d:9f:7c:60:5c:b8:0e:1e:92:1f:be:16:ac:8d:
05:b3:00:24:cd:ee:13:a1:fc:2f:e3:59:2b:1b:96:82:70:5b:
5b:06:9f:e9:36:9b:d8:3a:a5:19:fb:67:c2:bb:71:cf:17:c9:
eb:2a:77:d1:bf:ac:cd:9b:a0:ac:98:d3:d6:07:3c:ce:16:3a:
92:8e:f0:f4:da:d9:76:6f:7f:eb:58:1c:19:2e:41:42:25:e8:
49:6c:59:01:18:ec:03:56:23:7d:44:89:36:25:ed:7a:a7:df:
4f:2a:1d:78:0d:ca:37:ae:c0:e3:80:1d:2b:8e:81:8b:da:d3:
dd:10:0f:42:5f:4d:07:c9:64:46:00:a4:03:27:56:6a:09:3b:
ba:36:f3:4c:f7:b1:b4:8c:02:1f:2a:1b:9c:3c:49:f9:22:39:
af:17:43:8b:44:68:67:55:02:a0:0a:bd:44:0f:ae:17:2f:16:
09:97:51:cb:64:43:06:cf:ef:44:39:c6:7b:70:a3:30:e5:ac:
3d:4e:9f:9f:26:bd:fe:8f:25:ac:01:ef:d5:e1:91:b1:13:52:
30:1a:79:a3:10:6e:90:38:05:cf:11:01:0a:48:5f:44:93:85:
48:86:27:57:d8:e1:85:51:a5:e4:3d:f1:23:db:12:4f:40:8b:
c3:42:66:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 14:41:53 2025 by rpki-client