Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/e4e696-9d78-414c-af40-cf56c66a0ac0/1/TJMhPYj6h060Rg4sXPG7GpHakHg.mft
File: TJMhPYj6h060Rg4sXPG7GpHakHg.mft (raw, json)
Hash identifier: QK8uDkYFhb2VOW0PNJZwhBkId/pWRJXes/wFoLxbW7A=
Subject key identifier: D9:BC:20:2F:9B:FB:34:E7:00:04:F2:18:97:EF:16:0C:29:27:EB:1A
Authority key identifier: 4C:93:21:3D:88:FA:87:4E:B4:46:0E:2C:5C:F1:BB:1A:91:DA:90:78
Certificate issuer: /CN=4c93213d88fa874eb4460e2c5cf1bb1a91da9078
Certificate serial: 0197499F26E03167119FB49EDB37B678F498
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TJMhPYj6h060Rg4sXPG7GpHakHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/e4e696-9d78-414c-af40-cf56c66a0ac0/1/TJMhPYj6h060Rg4sXPG7GpHakHg.mft
Manifest number: 157B
Signing time: Sat 07 Jun 2025 09:00:56 +0000
Manifest this update: Sat 07 Jun 2025 09:00:56 +0000
Manifest next update: Sun 08 Jun 2025 09:00:56 +0000
Files and hashes: 1: Rg6hH-WpB5JizUzL9_m7Rs15AT8.roa (hash: evDadyMTuwtAOSC/b6PGvpRRvlRN1DP+6W56r0BhqXQ=)
2: TJMhPYj6h060Rg4sXPG7GpHakHg.crl (hash: /KsGZYG0VnmiMD6KvCA8qSUDRuFUVXyJ4zH3Ezzj/5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/e4e696-9d78-414c-af40-cf56c66a0ac0/1/TJMhPYj6h060Rg4sXPG7GpHakHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/e4e696-9d78-414c-af40-cf56c66a0ac0/1/TJMhPYj6h060Rg4sXPG7GpHakHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/TJMhPYj6h060Rg4sXPG7GpHakHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:9f:26:e0:31:67:11:9f:b4:9e:db:37:b6:78:f4:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c93213d88fa874eb4460e2c5cf1bb1a91da9078
Validity
Not Before: Jun 7 09:00:56 2025 GMT
Not After : Jun 8 09:00:56 2025 GMT
Subject: CN=d9bc202f9bfb34e70004f21897ef160c2927eb1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:9b:98:5a:67:91:c5:64:47:8d:82:38:ce:10:
07:ba:b2:2c:2b:2d:d3:92:9b:9e:1b:d9:e7:58:51:
65:ce:25:84:2f:e1:63:3d:18:82:3a:b2:02:e1:d3:
df:a2:77:e3:f2:c0:43:98:02:bd:8d:c6:3f:37:c5:
7c:e8:95:97:ab:bf:49:11:ca:5e:fa:2b:d6:fa:cf:
6a:0b:d0:57:45:7f:ca:b6:00:07:ba:f0:57:46:e3:
62:91:53:2b:ce:07:4e:d2:60:c7:23:5a:8d:c4:46:
e2:62:d6:bc:d7:97:81:cb:c9:43:ec:7b:d6:68:7b:
5c:99:61:2b:76:0a:32:0e:15:39:f5:4e:a0:8b:48:
56:ca:f4:29:c4:e9:7b:b2:7e:c9:10:67:00:c3:98:
27:a3:43:a4:51:dc:03:35:22:41:31:1a:35:ab:8e:
6e:51:a5:3a:7a:71:f1:a4:25:78:54:63:09:25:69:
f5:d6:91:1b:61:7b:08:8b:3b:54:8d:13:c8:d6:be:
a1:5c:61:e4:54:46:be:69:4c:39:0a:66:b1:27:a3:
3f:aa:ce:9c:59:31:1c:64:a1:0d:25:35:59:a2:f5:
e4:d5:09:0a:58:db:08:fd:51:f9:17:c5:af:a6:d1:
28:ee:58:e6:ee:51:71:33:19:ee:f7:b7:89:76:bb:
19:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:BC:20:2F:9B:FB:34:E7:00:04:F2:18:97:EF:16:0C:29:27:EB:1A
X509v3 Authority Key Identifier:
keyid:4C:93:21:3D:88:FA:87:4E:B4:46:0E:2C:5C:F1:BB:1A:91:DA:90:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TJMhPYj6h060Rg4sXPG7GpHakHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/e4e696-9d78-414c-af40-cf56c66a0ac0/1/TJMhPYj6h060Rg4sXPG7GpHakHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/e4e696-9d78-414c-af40-cf56c66a0ac0/1/TJMhPYj6h060Rg4sXPG7GpHakHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:74:bc:48:5b:57:c7:86:ef:bb:1b:ce:8d:29:41:dd:06:97:
4d:a5:0c:3b:e3:95:45:ad:91:e4:69:fb:d3:c2:d1:14:3e:2c:
03:2a:a7:ad:05:a5:0c:3b:fb:ae:0b:ab:5c:00:d3:06:a3:4f:
84:3a:34:c3:78:90:bf:05:e2:49:71:1f:7d:64:f3:a2:8e:a9:
b8:f6:c2:9e:5c:4e:c1:32:19:72:a8:c9:84:ac:00:56:4a:1f:
f7:54:8a:72:13:71:2c:7f:ba:2d:86:d8:d0:a7:8f:f6:9b:2e:
e1:82:13:f1:02:aa:76:4c:93:cb:aa:8e:30:7e:e5:8d:08:4f:
dc:ce:8a:73:7f:2f:f6:5c:92:35:b9:49:74:f8:03:bb:32:3c:
59:7f:1a:78:24:97:b0:bd:e6:59:8d:b2:60:a5:7e:ca:84:af:
91:47:f6:18:a8:0e:96:5a:78:33:4b:f3:c3:38:05:c1:97:e6:
a6:34:9d:80:d0:e2:f9:68:57:48:e0:a0:86:31:96:3f:17:2b:
04:6e:eb:7c:b5:d4:0f:70:e8:ec:79:c8:bb:d1:86:c2:3e:52:
c4:eb:6b:64:60:11:75:9b:ab:56:97:ec:fb:4f:4a:a2:ee:3c:
7e:fb:dc:52:3b:60:f8:58:53:b0:08:d9:b7:d3:e5:2b:e5:e1:
0a:b4:65:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 18:36:23 2025 by rpki-client