Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/f3695c-e340-4e2f-afeb-6b95d3c89c91/1/TK8RFQzl_p9w82yYBnR7toKxyiE.mft
File: TK8RFQzl_p9w82yYBnR7toKxyiE.mft (raw, json)
Hash identifier: ANexzLt4Gpm6SlJ9SIX2jeVhRvqDsVgm9Peuri/eAdA=
Subject key identifier: 44:D3:E2:4B:0E:B4:AB:ED:D6:3F:D3:5F:80:DA:DA:F0:8A:A7:C0:3B
Authority key identifier: 4C:AF:11:15:0C:E5:FE:9F:70:F3:6C:98:06:74:7B:B6:82:B1:CA:21
Certificate issuer: /CN=4caf11150ce5fe9f70f36c9806747bb682b1ca21
Certificate serial: 01974F32FC55CFED5353F0906704B770D460
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TK8RFQzl_p9w82yYBnR7toKxyiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/f3695c-e340-4e2f-afeb-6b95d3c89c91/1/TK8RFQzl_p9w82yYBnR7toKxyiE.mft
Manifest number: 14B3
Signing time: Sun 08 Jun 2025 11:00:30 +0000
Manifest this update: Sun 08 Jun 2025 11:00:30 +0000
Manifest next update: Mon 09 Jun 2025 11:00:30 +0000
Files and hashes: 1: TK8RFQzl_p9w82yYBnR7toKxyiE.crl (hash: iPDp39GuilQw+MX9zS1zPlwcsNg/UY/6C3bWFnDnlao=)
2: fuMrSOrjtC2Pjn0DbbjzzEXmpIM.roa (hash: 82A1cuez1ZD0Bc+8PeFu3N5JKG3dUU8f0mhUHsfa/b0=)
3: tT8Bhk3TRbD92onTtD9xdUFkuBo.roa (hash: nGHXcTt4lmnaxv72VD2WiGZwBBegRpFmPrLz3wSYepE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/f3695c-e340-4e2f-afeb-6b95d3c89c91/1/TK8RFQzl_p9w82yYBnR7toKxyiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/f3695c-e340-4e2f-afeb-6b95d3c89c91/1/TK8RFQzl_p9w82yYBnR7toKxyiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/TK8RFQzl_p9w82yYBnR7toKxyiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 11:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:32:fc:55:cf:ed:53:53:f0:90:67:04:b7:70:d4:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4caf11150ce5fe9f70f36c9806747bb682b1ca21
Validity
Not Before: Jun 8 11:00:30 2025 GMT
Not After : Jun 9 11:00:30 2025 GMT
Subject: CN=44d3e24b0eb4abedd63fd35f80dadaf08aa7c03b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a7:40:3b:36:59:70:04:9e:e2:f5:e3:56:a8:
ca:d5:c6:ce:bb:81:59:8a:35:3a:52:20:f1:1e:87:
46:b6:37:14:1f:95:d2:bc:9e:11:64:68:c3:3e:46:
ca:dd:9e:b1:8c:b4:8f:48:80:a4:7b:26:a9:a5:7f:
15:2f:af:12:28:07:45:9e:a0:87:f9:ef:59:20:81:
f2:53:da:41:e5:bf:65:06:8b:f9:b7:81:fb:d2:3b:
f0:4c:91:1b:a1:8b:e4:80:86:ea:61:66:4b:46:fc:
c7:8f:77:75:c9:33:4c:79:4e:fe:81:7a:1b:12:8d:
eb:45:3e:4d:8a:c4:6d:47:c4:83:7e:76:48:1a:df:
8a:47:47:da:0a:c4:53:26:c2:c3:c2:c7:80:d4:ae:
13:ed:7f:35:01:cf:ea:5f:59:d6:cd:c4:df:68:36:
7f:4f:a1:23:e6:f0:2f:03:2d:0a:b8:67:f7:11:1c:
99:c5:22:55:90:33:3d:78:54:15:b3:bd:17:af:65:
93:4c:2f:8e:7f:2a:2b:91:81:17:0c:fd:65:ae:45:
ab:cc:cf:13:d0:ce:00:48:b6:7e:1a:31:bf:5a:ef:
21:4b:a4:98:6c:55:0b:a4:57:a1:cf:4e:82:77:b3:
b7:e6:e8:04:47:1e:58:2e:a2:19:44:d1:39:27:b6:
f2:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:D3:E2:4B:0E:B4:AB:ED:D6:3F:D3:5F:80:DA:DA:F0:8A:A7:C0:3B
X509v3 Authority Key Identifier:
keyid:4C:AF:11:15:0C:E5:FE:9F:70:F3:6C:98:06:74:7B:B6:82:B1:CA:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TK8RFQzl_p9w82yYBnR7toKxyiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f3695c-e340-4e2f-afeb-6b95d3c89c91/1/TK8RFQzl_p9w82yYBnR7toKxyiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f3695c-e340-4e2f-afeb-6b95d3c89c91/1/TK8RFQzl_p9w82yYBnR7toKxyiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:cb:1f:6d:df:6d:b2:53:47:e7:b9:18:67:94:76:e8:88:b1:
3a:e2:09:6d:28:18:98:d9:c9:dc:17:d9:46:b9:6c:ad:ce:3b:
ee:0a:73:4d:58:5f:01:56:8e:11:7b:04:a6:ee:2c:ee:77:ca:
6c:49:d5:e6:78:2b:15:2c:3d:67:6a:31:4f:a7:d9:aa:3b:8d:
40:9a:28:a2:52:39:7a:97:74:4c:39:51:ee:5b:a3:9f:18:7a:
0b:80:1d:70:9e:df:78:81:0a:9b:ef:ac:30:9f:9b:0b:4f:4c:
4d:34:b0:3e:97:e6:bb:4f:63:34:12:e7:36:c1:1d:a7:6b:9e:
5b:c8:1f:c4:76:d3:e3:7b:8c:91:cb:d1:53:d9:fa:c7:99:95:
ad:f2:53:02:fd:7a:ea:65:41:da:da:b9:08:53:69:a9:1b:e9:
49:71:9d:4a:fd:a1:7b:01:f1:12:e5:b2:14:5b:f6:2e:52:d7:
b2:4d:15:bc:8e:e7:9e:55:dc:57:1b:f5:c6:d1:de:31:03:2f:
77:9b:ef:f4:49:30:22:b7:eb:3c:51:0c:59:56:95:2e:4e:f2:
de:bb:1e:d8:2f:84:14:4b:e5:62:ee:00:47:3a:7b:f3:1e:e2:
9f:82:fe:50:32:7b:18:02:9b:89:6f:80:86:d7:46:cb:5c:f2:
1b:1e:8b:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 18:26:30 2025 by rpki-client