Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/7bd729-98e5-43ff-afe6-187b1f77c1a5/1/TJMCnFsmOc0pufndUpTMlO9S1q8.mft
File: TJMCnFsmOc0pufndUpTMlO9S1q8.mft (raw, json)
Hash identifier: le9d2/9Tr1QRHi0VuzWOULEBOx0jwcU2AhPIuuYP+10=
Subject key identifier: 3B:40:6D:52:E9:4F:35:63:3C:78:97:A4:85:95:82:76:E5:78:C1:6F
Authority key identifier: 4C:93:02:9C:5B:26:39:CD:29:B9:F9:DD:52:94:CC:94:EF:52:D6:AF
Certificate issuer: /CN=4c93029c5b2639cd29b9f9dd5294cc94ef52d6af
Certificate serial: 0197512151E76B23EAEE65DF43F0CECFB2A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TJMCnFsmOc0pufndUpTMlO9S1q8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/7bd729-98e5-43ff-afe6-187b1f77c1a5/1/TJMCnFsmOc0pufndUpTMlO9S1q8.mft
Manifest number: 0BB1
Signing time: Sun 08 Jun 2025 20:00:27 +0000
Manifest this update: Sun 08 Jun 2025 20:00:27 +0000
Manifest next update: Mon 09 Jun 2025 20:00:27 +0000
Files and hashes: 1: TJMCnFsmOc0pufndUpTMlO9S1q8.crl (hash: w3n1EGWwtRexjbebmUcaIFDk0kcKBz/Nc9LcumsNm+Q=)
2: gm0FjeCIRrnMhU3d57SvCilXQ6Y.roa (hash: uUS5qc0jED6lwxU3POQRNrHoJ8s1cSrD4ysUmIZNtjw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/7bd729-98e5-43ff-afe6-187b1f77c1a5/1/TJMCnFsmOc0pufndUpTMlO9S1q8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/7bd729-98e5-43ff-afe6-187b1f77c1a5/1/TJMCnFsmOc0pufndUpTMlO9S1q8.mft
rsync://rpki.ripe.net/repository/DEFAULT/TJMCnFsmOc0pufndUpTMlO9S1q8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 17:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:51:21:51:e7:6b:23:ea:ee:65:df:43:f0:ce:cf:b2:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c93029c5b2639cd29b9f9dd5294cc94ef52d6af
Validity
Not Before: Jun 8 20:00:27 2025 GMT
Not After : Jun 9 20:00:27 2025 GMT
Subject: CN=3b406d52e94f35633c7897a485958276e578c16f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:05:f7:d0:18:0f:0c:e5:dc:ab:b8:39:33:85:
b4:e7:e3:d4:ea:f5:ba:a9:32:d1:03:c4:a8:06:85:
1b:96:b0:1a:77:c4:0a:8e:79:2c:4b:44:f3:fa:34:
08:1d:5b:94:d0:bd:8b:57:02:5a:23:e6:a5:15:6e:
a1:ea:b0:de:c1:73:48:f6:b1:5c:46:8d:c9:cf:c1:
bc:03:1f:6a:29:eb:27:86:e1:ca:46:46:a5:95:68:
98:02:00:9e:3c:53:1e:80:de:a6:cc:a7:a2:14:00:
77:f6:c2:1f:58:d5:4a:93:0e:a9:e2:b3:77:4d:74:
c1:92:51:67:88:41:a2:3c:b6:36:60:1a:17:07:9a:
38:65:fd:1b:99:4c:01:7b:dd:b0:42:a1:29:fe:3b:
b6:ad:9b:79:c8:f1:02:af:44:25:65:1a:34:4e:07:
fc:f3:92:e8:00:d6:9c:02:90:fe:e6:69:b3:29:a6:
94:b9:1d:0e:fc:06:9e:b2:72:90:74:c5:68:f6:17:
dc:3c:d4:1c:e7:cd:03:bb:b0:6a:e2:e5:f4:80:b9:
90:8b:25:88:8b:2a:30:8a:c4:5b:e5:5a:ec:cd:49:
40:fe:e2:ed:4b:dd:57:b2:ab:15:c9:4e:3c:66:e4:
7a:6c:48:15:67:e5:ed:aa:5a:40:bf:90:04:83:38:
ef:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:40:6D:52:E9:4F:35:63:3C:78:97:A4:85:95:82:76:E5:78:C1:6F
X509v3 Authority Key Identifier:
keyid:4C:93:02:9C:5B:26:39:CD:29:B9:F9:DD:52:94:CC:94:EF:52:D6:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TJMCnFsmOc0pufndUpTMlO9S1q8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/7bd729-98e5-43ff-afe6-187b1f77c1a5/1/TJMCnFsmOc0pufndUpTMlO9S1q8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/7bd729-98e5-43ff-afe6-187b1f77c1a5/1/TJMCnFsmOc0pufndUpTMlO9S1q8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:be:b6:64:b0:f3:61:78:2f:66:be:b3:9f:0b:37:25:3d:b1:
00:65:1a:53:31:74:8f:89:67:0f:8e:08:71:5c:f5:c5:b8:b7:
1a:1a:a3:31:94:45:63:53:28:56:f4:c6:c1:98:d4:c0:09:c0:
c1:40:dc:3b:d9:a4:6e:fa:74:e1:a3:e2:ff:84:09:2c:2c:1e:
65:ac:46:f3:b4:a2:42:07:53:86:16:9d:9f:83:12:11:5f:08:
54:3b:19:22:3d:f4:e6:3f:86:dd:45:91:e1:4b:1b:e2:4b:b6:
1d:c2:2e:cc:7f:6a:a5:a8:75:a5:3d:28:12:77:6a:8f:fd:a1:
5c:75:81:0b:6d:55:4d:6d:90:1e:c8:d8:8e:e0:d0:0b:9b:2c:
19:f3:1c:d0:75:cf:3a:b5:3e:72:ee:6f:53:78:ae:81:7b:4f:
6a:e6:c8:37:cf:9d:c2:4f:cd:c4:ab:02:44:a2:f0:e2:3c:75:
49:01:0a:6c:d0:7e:af:c0:2d:05:17:22:e6:67:1f:7b:07:2d:
bb:3e:b7:63:66:41:e6:24:d2:d2:8d:96:97:89:7c:35:ad:d6:
3d:a6:ec:9f:95:4c:83:4f:d4:fc:81:b5:9f:29:d1:9a:01:90:
9c:e7:e9:22:72:4c:a6:4d:d8:35:d1:b1:e1:9f:c6:a7:2a:59:
e5:fb:39:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:24:31 2025 by rpki-client