Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/d282be-7ca5-400f-be84-cfab10d30693/1/tTRCGKSIC1AMAzMh52vXi088Flg.mft
File: tTRCGKSIC1AMAzMh52vXi088Flg.mft (raw, json)
Hash identifier: dWu8xPGc5fFGFGJByIZGkkZjbTVW9Bm4xoPytEvkNR0=
Subject key identifier: C1:2C:49:0B:01:51:3D:3D:A0:1F:6A:62:BB:B3:43:96:5D:3C:07:AD
Authority key identifier: B5:34:42:18:A4:88:0B:50:0C:03:33:21:E7:6B:D7:8B:4F:3C:16:58
Certificate issuer: /CN=b5344218a4880b500c033321e76bd78b4f3c1658
Certificate serial: 0197466727545AC0763463D1B632AC15283D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tTRCGKSIC1AMAzMh52vXi088Flg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/d282be-7ca5-400f-be84-cfab10d30693/1/tTRCGKSIC1AMAzMh52vXi088Flg.mft
Manifest number: 1580
Signing time: Fri 06 Jun 2025 18:00:54 +0000
Manifest this update: Fri 06 Jun 2025 18:00:54 +0000
Manifest next update: Sat 07 Jun 2025 18:00:54 +0000
Files and hashes: 1: 8Pm542mxmtNx79Ipw8aJ3MUUUlw.roa (hash: wUyn8TfNac0yPrEyoAGwGRLxadfovmjunsKwqoO4Tic=)
2: MK5kvHBNAAlnKRq0I1CvZhVF9Ng.roa (hash: ku7EY/yVBZoDpf18kdWwR04OCaLbQDYij0LYSvbt0Ho=)
3: tTRCGKSIC1AMAzMh52vXi088Flg.crl (hash: +y6zef+X/KxUIwdAO55KhJ8rJBspDDrktmfvZl2/ROM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/d282be-7ca5-400f-be84-cfab10d30693/1/tTRCGKSIC1AMAzMh52vXi088Flg.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/d282be-7ca5-400f-be84-cfab10d30693/1/tTRCGKSIC1AMAzMh52vXi088Flg.mft
rsync://rpki.ripe.net/repository/DEFAULT/tTRCGKSIC1AMAzMh52vXi088Flg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:67:27:54:5a:c0:76:34:63:d1:b6:32:ac:15:28:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5344218a4880b500c033321e76bd78b4f3c1658
Validity
Not Before: Jun 6 18:00:54 2025 GMT
Not After : Jun 7 18:00:54 2025 GMT
Subject: CN=c12c490b01513d3da01f6a62bbb343965d3c07ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a8:d3:03:b0:53:ce:91:5c:b8:4b:88:d0:2a:
39:b6:67:38:2a:89:07:92:96:dc:70:be:ea:64:48:
b7:89:40:3f:69:54:2d:49:a7:a1:99:61:cc:0e:c8:
c6:64:f3:e0:eb:6f:30:ed:c4:33:19:8d:4f:5b:c3:
0d:da:c2:1b:21:3e:fc:75:e4:d7:e4:8a:fe:72:a2:
a0:1c:a9:98:1c:d5:46:f6:52:de:7a:db:e6:09:11:
45:d4:36:93:4a:98:72:ab:8e:f4:c2:ce:f6:3a:ac:
2c:aa:dc:5e:c1:49:dd:29:95:4e:19:76:16:f7:bf:
45:c3:a5:7f:c0:bd:ae:36:80:92:a3:5b:5a:78:db:
2b:b8:d7:70:db:ae:25:5f:49:ad:c2:ec:2a:de:bc:
c5:d8:82:6a:c0:b0:ac:f8:f1:f7:74:03:02:5b:19:
e0:09:ea:a1:72:54:1f:ba:0a:17:84:85:37:fd:99:
4f:d8:7e:96:62:0f:f7:11:aa:77:d6:55:67:ea:f7:
c9:f9:b8:7c:eb:d3:8b:cd:88:40:8f:c8:22:37:29:
82:74:34:c5:6a:81:00:ba:f2:e9:9a:5b:c1:2c:50:
de:f8:89:b2:c8:6f:b9:d6:9d:ad:41:aa:d4:d8:35:
49:e6:2b:af:f7:b9:ff:d2:8d:19:66:7c:76:87:98:
16:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:2C:49:0B:01:51:3D:3D:A0:1F:6A:62:BB:B3:43:96:5D:3C:07:AD
X509v3 Authority Key Identifier:
keyid:B5:34:42:18:A4:88:0B:50:0C:03:33:21:E7:6B:D7:8B:4F:3C:16:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tTRCGKSIC1AMAzMh52vXi088Flg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/d282be-7ca5-400f-be84-cfab10d30693/1/tTRCGKSIC1AMAzMh52vXi088Flg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/d282be-7ca5-400f-be84-cfab10d30693/1/tTRCGKSIC1AMAzMh52vXi088Flg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:dc:b2:9a:94:fd:51:59:60:4b:3d:6f:17:89:8f:dc:5b:0d:
14:b9:72:ca:2c:7b:07:56:d6:78:3a:b2:01:9b:93:07:55:ec:
de:e1:bf:0d:0c:8f:0a:b6:a6:a0:de:91:c1:16:60:b1:c4:50:
e3:21:25:a8:6c:be:db:ff:e3:bf:51:e5:93:08:cd:f2:0d:1e:
db:c1:de:98:e8:89:e9:4a:61:45:22:63:ec:d5:f5:71:e0:69:
07:eb:96:c5:b6:9b:a1:b6:46:bf:75:5b:5a:46:83:ac:c8:55:
40:3c:3b:3d:b7:78:90:94:87:c3:a6:11:b5:ff:23:00:78:3c:
4c:77:c5:79:38:38:73:6e:36:aa:dc:3c:89:55:93:18:ba:c6:
c4:1f:5c:a6:96:b0:bb:b9:1f:c1:0b:eb:80:44:12:87:3c:f5:
38:dc:c1:1d:6a:36:f3:92:d6:37:4e:0d:41:81:10:0b:8a:4a:
24:a3:3e:03:0b:21:65:a8:70:52:77:93:5b:e6:e6:dc:bc:49:
23:df:07:da:90:e7:05:15:b2:2e:d8:89:36:90:4d:64:a9:7c:
be:3c:13:01:c8:bc:fa:56:c4:a7:f6:a3:40:cb:68:fd:18:a8:
02:bd:ac:e1:89:4c:15:07:11:63:b7:a2:36:f4:c3:70:b7:4f:
a9:97:cb:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:25:23 2025 by rpki-client