Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/da4e46-2a93-44a4-b8e3-c2133dd81b56/1/TS-f1cihTNyfMcRYXNYNtXz_tMI.mft
File: TS-f1cihTNyfMcRYXNYNtXz_tMI.mft (raw, json)
Hash identifier: V8tmYX0XRM9zVdtFtzOsUlbGS7lQFeBzo6uA1NgIk3o=
Subject key identifier: A7:90:7E:BB:DE:64:41:A8:B5:68:B4:4D:49:E1:9A:85:F1:D4:77:70
Authority key identifier: 4D:2F:9F:D5:C8:A1:4C:DC:9F:31:C4:58:5C:D6:0D:B5:7C:FF:B4:C2
Certificate issuer: /CN=4d2f9fd5c8a14cdc9f31c4585cd60db57cffb4c2
Certificate serial: 0197469D8EC5F6F10B578FDC2F25716BBE58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TS-f1cihTNyfMcRYXNYNtXz_tMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/da4e46-2a93-44a4-b8e3-c2133dd81b56/1/TS-f1cihTNyfMcRYXNYNtXz_tMI.mft
Manifest number: 0C3E
Signing time: Fri 06 Jun 2025 19:00:20 +0000
Manifest this update: Fri 06 Jun 2025 19:00:20 +0000
Manifest next update: Sat 07 Jun 2025 19:00:20 +0000
Files and hashes: 1: 1-QMPtoomm6W5CX-SS0fyQ5AS734.roa (hash: hcd0LKLxrMub9hVDF7pi719s+IDTrzb/8hX4yl7gw2w=)
2: 8-JB4jMg3_rMGJjuIMVCBLnxwQ8.roa (hash: buBER4odhou/4TCkZQ3UeIhbfaoQJUXmTZ3cmJ4K9k8=)
3: TS-f1cihTNyfMcRYXNYNtXz_tMI.crl (hash: MRyS7YTANnu+zXez3hD2vCq4wKJ6zGcrFYrBs7tcrko=)
4: pSmbhIOz_v9DcZ6BjkBTv88tPZ4.roa (hash: 1vOAxGM5C9HFgFv3tm1lOiYWc4bRDbFQtmaO7PV8kkc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/da4e46-2a93-44a4-b8e3-c2133dd81b56/1/TS-f1cihTNyfMcRYXNYNtXz_tMI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/da4e46-2a93-44a4-b8e3-c2133dd81b56/1/TS-f1cihTNyfMcRYXNYNtXz_tMI.mft
rsync://rpki.ripe.net/repository/DEFAULT/TS-f1cihTNyfMcRYXNYNtXz_tMI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:9d:8e:c5:f6:f1:0b:57:8f:dc:2f:25:71:6b:be:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d2f9fd5c8a14cdc9f31c4585cd60db57cffb4c2
Validity
Not Before: Jun 6 19:00:20 2025 GMT
Not After : Jun 7 19:00:20 2025 GMT
Subject: CN=a7907ebbde6441a8b568b44d49e19a85f1d47770
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6c:bb:cc:39:8f:e9:75:62:5f:14:cf:87:68:
47:37:22:b7:1a:c5:70:2d:17:e0:f0:e1:d2:c5:d0:
b3:d1:53:d1:e1:dc:c9:88:12:54:61:5b:2d:b4:3a:
c6:37:48:4b:17:8b:fb:71:73:82:47:b1:ca:e5:ed:
49:24:3f:b2:55:9d:2c:a4:d1:77:0d:de:10:99:66:
ef:3e:d9:98:13:9d:2f:5f:ab:eb:5d:eb:78:6f:8a:
6b:25:34:a5:91:db:8b:b2:4a:91:e2:09:84:ec:2a:
95:e1:44:04:d4:78:ae:68:43:d9:c5:39:73:67:7a:
35:8c:af:92:a9:26:37:41:44:50:92:22:76:5d:01:
1a:f2:c2:b5:c5:3c:b6:9d:a8:d4:19:03:c8:ed:86:
de:df:f9:00:da:f9:57:c6:29:f8:0d:29:f7:de:92:
e6:11:64:ac:26:f1:70:f7:7a:63:2e:7d:92:69:6c:
e6:60:8b:2b:5f:7a:ae:ff:7f:c8:21:16:3d:92:32:
91:80:df:e0:1f:b8:d8:56:72:6b:d8:19:4e:c8:ca:
7c:2e:e6:ab:a9:01:12:b9:97:bd:69:77:b0:5d:da:
48:27:2b:b6:a3:d9:0d:5a:64:68:64:28:2b:80:5f:
de:d5:87:e5:fa:92:34:c7:a5:ee:a2:7a:0c:22:04:
1f:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:90:7E:BB:DE:64:41:A8:B5:68:B4:4D:49:E1:9A:85:F1:D4:77:70
X509v3 Authority Key Identifier:
keyid:4D:2F:9F:D5:C8:A1:4C:DC:9F:31:C4:58:5C:D6:0D:B5:7C:FF:B4:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TS-f1cihTNyfMcRYXNYNtXz_tMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/da4e46-2a93-44a4-b8e3-c2133dd81b56/1/TS-f1cihTNyfMcRYXNYNtXz_tMI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/da4e46-2a93-44a4-b8e3-c2133dd81b56/1/TS-f1cihTNyfMcRYXNYNtXz_tMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:a0:b6:20:4f:e4:db:51:83:e0:07:bd:e9:f0:a0:dd:4b:19:
5a:cb:ac:59:bf:38:2c:7b:9f:45:c9:ff:5c:1f:ac:44:25:54:
2d:f3:2c:8a:d9:69:d4:80:f6:10:8f:ce:2e:59:76:02:a3:85:
33:fd:52:90:a0:0c:0d:6b:b6:4c:c8:57:bc:9d:ed:c1:68:4b:
60:6d:da:58:a1:c1:82:43:51:4e:64:65:a2:f8:2b:80:72:ad:
68:a6:f9:25:68:97:d3:ab:78:15:84:dd:39:7d:07:8f:b4:8e:
d9:92:25:8c:6b:00:39:ce:0c:18:64:14:3f:30:d7:25:cf:5c:
b9:6a:c8:5e:f1:60:8e:ea:15:0d:f9:8b:aa:53:8c:5e:85:3b:
2a:66:aa:ea:31:ec:00:69:9a:07:e1:f9:9b:c0:39:30:e0:68:
b4:d4:ab:7c:2b:a5:c3:94:a8:41:4a:37:0b:a1:40:4c:2b:76:
2a:1c:3b:48:2c:99:90:f5:4a:44:9d:45:59:ac:9a:85:fe:ea:
e6:d6:5e:b2:ad:cc:6c:d5:a7:0e:66:0d:7a:a3:56:01:33:1b:
34:19:44:5a:b1:55:09:13:e7:9c:a0:5f:99:17:82:10:fc:44:
e9:ae:82:2a:e7:cb:f5:2a:4e:6d:ce:c9:27:5a:79:b2:e1:04:
4a:9b:80:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:19:08 2025 by rpki-client