Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/Tg854squjizxS8xBsj88huGnIPg.mft
File: Tg854squjizxS8xBsj88huGnIPg.mft (raw, json)
Hash identifier: HcZPkQJ4hlez4gpHdvizk48wv/TyB2PST9aS//mvYOE=
Subject key identifier: CF:1F:A4:21:87:60:43:7C:C7:F1:CA:60:BA:88:B3:B2:B5:F2:D6:27
Authority key identifier: 4E:0F:39:E2:CA:AE:8E:2C:F1:4B:CC:41:B2:3F:3C:86:E1:A7:20:F8
Certificate issuer: /CN=4e0f39e2caae8e2cf14bcc41b23f3c86e1a720f8
Certificate serial: 01974742997B4B993380CE6BDCEE75D339B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tg854squjizxS8xBsj88huGnIPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/Tg854squjizxS8xBsj88huGnIPg.mft
Manifest number: 157E
Signing time: Fri 06 Jun 2025 22:00:36 +0000
Manifest this update: Fri 06 Jun 2025 22:00:36 +0000
Manifest next update: Sat 07 Jun 2025 22:00:36 +0000
Files and hashes: 1: 3NL0_43JO4ViZMUt6FOGd4wRJes.roa (hash: iMUE0vTHXLYCmLZqj0qdPBpz5FgK9qmOUf7yFoe48OI=)
2: 4pgipsDtjzVZOnA4qzWqk83-xSA.roa (hash: nd8vlth0pBWJ/Is/avNVqT3xb/Gc3yDSmhppSZMRqxM=)
3: Tg854squjizxS8xBsj88huGnIPg.crl (hash: RJto9lkvZBYpk5CUQI28YN4LzE9gANRrJP3l7ujTG0A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/Tg854squjizxS8xBsj88huGnIPg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/Tg854squjizxS8xBsj88huGnIPg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tg854squjizxS8xBsj88huGnIPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:42:99:7b:4b:99:33:80:ce:6b:dc:ee:75:d3:39:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e0f39e2caae8e2cf14bcc41b23f3c86e1a720f8
Validity
Not Before: Jun 6 22:00:36 2025 GMT
Not After : Jun 7 22:00:36 2025 GMT
Subject: CN=cf1fa4218760437cc7f1ca60ba88b3b2b5f2d627
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:36:03:f6:dd:56:db:8c:e8:7d:b1:d8:35:cc:
4c:bd:5a:c1:09:66:77:fe:6a:15:76:b0:9e:8b:5b:
b3:b5:28:2f:7b:25:f6:d9:43:4a:83:3e:9d:bf:71:
f7:1a:52:ba:10:71:2c:62:68:7b:d2:b8:a2:bc:99:
b7:3c:0a:6a:d9:0b:90:50:21:cf:87:d2:c6:d8:4f:
99:79:e7:dc:12:fc:7b:1e:d3:f0:ef:c0:1e:c6:f3:
a5:f5:2d:e4:e5:16:b4:d0:fc:94:79:4e:fb:7a:51:
7d:2a:f1:6c:31:de:7a:25:30:1a:12:11:7d:74:52:
4c:0f:e7:ed:d2:85:98:5f:c9:af:08:7d:a2:fd:1b:
e2:0b:ab:91:30:52:5a:e1:25:ae:bd:94:42:a5:31:
31:76:cb:30:c7:04:0c:8f:45:11:d6:04:62:c1:bc:
41:88:6a:33:3a:43:07:ae:7a:4a:ff:a3:e4:6a:6f:
7c:e1:10:ce:04:26:26:5d:ef:a1:62:ab:c3:00:e8:
58:8e:f7:80:2e:fb:7d:2b:94:22:64:9a:69:f4:6f:
e9:a8:d7:d4:02:45:88:b0:9a:74:9b:37:b9:89:5f:
69:58:7d:00:57:ec:5a:ad:b4:c9:8b:70:24:f1:1c:
31:76:0c:46:5d:07:b2:6e:35:e4:2f:fb:17:de:8f:
50:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:1F:A4:21:87:60:43:7C:C7:F1:CA:60:BA:88:B3:B2:B5:F2:D6:27
X509v3 Authority Key Identifier:
keyid:4E:0F:39:E2:CA:AE:8E:2C:F1:4B:CC:41:B2:3F:3C:86:E1:A7:20:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tg854squjizxS8xBsj88huGnIPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/Tg854squjizxS8xBsj88huGnIPg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/Tg854squjizxS8xBsj88huGnIPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:71:a2:1c:25:de:02:1a:04:58:91:91:4f:63:27:61:3e:68:
c4:7f:9a:d4:51:8b:df:c4:22:22:35:24:a5:70:95:73:ea:d6:
c0:56:c5:c5:27:40:c9:b1:5a:c2:33:b0:b7:7c:5c:ca:82:dc:
81:59:be:7e:08:fd:71:ed:57:ca:9d:3e:84:6f:07:80:67:68:
c0:b3:29:77:9e:18:de:41:de:c9:b2:9f:ec:6f:a5:0c:67:e9:
d6:12:7f:2e:15:29:89:45:f1:fa:bf:29:77:85:20:d0:75:50:
ba:22:8f:b1:13:dd:58:bb:4e:86:b5:03:fb:b3:ec:d6:c4:d4:
4c:5c:02:ca:c2:c2:32:6e:03:a7:41:aa:ec:94:6c:cb:f8:6c:
ad:b3:82:45:94:51:9f:f4:d2:c0:20:ec:fa:f0:6a:1a:ff:61:
c7:ed:37:b5:b3:5a:4c:47:ea:88:7c:fa:04:6d:82:53:c5:df:
c2:d9:dd:2c:dc:96:5d:b7:61:37:a6:d4:ca:33:25:b8:89:e3:
fa:8e:4b:4a:88:50:d4:76:27:52:0a:0a:ef:44:11:82:95:aa:
5c:4c:58:63:17:7a:18:cb:3c:00:98:15:da:77:10:ca:86:d9:
58:3a:b9:3f:6e:00:e0:6c:59:4b:66:11:f1:6f:83:fd:68:d6:
d1:c9:83:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 02:36:43 2025 by rpki-client