Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/69322d-ad71-4877-a470-9ad9099de1d3/1/Tu8gTX6G_4FiSmGBKG521DOHa8c.mft
File: Tu8gTX6G_4FiSmGBKG521DOHa8c.mft (raw, json)
Hash identifier: 3afaqRROxSXI72jBnPd6vaf5sY8tA8EfwMs9T/pSfAE=
Subject key identifier: C5:20:B1:CF:C1:53:84:E5:A9:04:43:4A:7E:E6:74:F9:47:CC:C6:21
Authority key identifier: 4E:EF:20:4D:7E:86:FF:81:62:4A:61:81:28:6E:76:D4:33:87:6B:C7
Certificate issuer: /CN=4eef204d7e86ff81624a6181286e76d433876bc7
Certificate serial: 0197488CE3D2FDC5A6D79BEB9FC20E8357C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tu8gTX6G_4FiSmGBKG521DOHa8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/69322d-ad71-4877-a470-9ad9099de1d3/1/Tu8gTX6G_4FiSmGBKG521DOHa8c.mft
Manifest number: 147C
Signing time: Sat 07 Jun 2025 04:01:22 +0000
Manifest this update: Sat 07 Jun 2025 04:01:22 +0000
Manifest next update: Sun 08 Jun 2025 04:01:22 +0000
Files and hashes: 1: Tu8gTX6G_4FiSmGBKG521DOHa8c.crl (hash: JqVzsNNtV760AaBBsgaSQST2SEtRKkbckDrpSzX78DY=)
2: shBm13sVD-3FD9e1R6_cr96dhfU.roa (hash: n/xarPDtIVC1p+Buc2MZvYZnuxYBvdgfF2U0DRag658=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/69322d-ad71-4877-a470-9ad9099de1d3/1/Tu8gTX6G_4FiSmGBKG521DOHa8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/69322d-ad71-4877-a470-9ad9099de1d3/1/Tu8gTX6G_4FiSmGBKG521DOHa8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tu8gTX6G_4FiSmGBKG521DOHa8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:e3:d2:fd:c5:a6:d7:9b:eb:9f:c2:0e:83:57:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4eef204d7e86ff81624a6181286e76d433876bc7
Validity
Not Before: Jun 7 04:01:22 2025 GMT
Not After : Jun 8 04:01:22 2025 GMT
Subject: CN=c520b1cfc15384e5a904434a7ee674f947ccc621
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:56:3c:38:6d:c6:97:5f:eb:a1:02:6b:6e:b4:
6e:d6:ee:b5:03:57:55:fb:fb:76:24:18:d8:67:c8:
4f:21:62:10:d9:6b:92:da:b4:f9:02:99:24:fe:03:
ed:cd:a0:fb:92:e5:90:ca:b9:09:ab:84:5b:2b:d7:
81:b0:9c:03:07:20:41:31:be:a2:41:6f:c3:7d:35:
61:e0:c3:37:ed:21:d4:2e:06:2e:d8:03:38:41:e1:
8a:e1:b3:80:13:f8:17:5e:99:7a:91:cb:8a:f4:7f:
49:9b:b2:63:2e:10:9f:84:d3:fe:4b:e0:7c:30:6e:
d4:c4:5c:6d:31:c6:ce:8e:07:aa:81:40:d7:70:33:
d0:49:68:89:07:a5:35:32:c5:af:74:6a:d8:03:6b:
52:e8:65:05:3b:86:82:5e:66:22:cf:c4:b6:a8:49:
5b:6e:06:33:57:c5:4e:f9:14:24:4f:d7:f0:8e:ee:
f6:1f:61:ae:d9:16:94:ef:ee:3b:03:8c:6f:0b:9f:
8a:d0:7f:46:0e:3f:30:dc:87:05:28:ad:78:e9:5c:
a1:92:2e:f3:8f:45:db:0c:35:8d:8c:43:70:d9:17:
ff:87:5b:fa:da:cb:a6:9e:42:bc:81:06:49:72:81:
95:29:d7:a9:3b:de:47:5d:84:ff:23:73:eb:1a:ee:
c8:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:20:B1:CF:C1:53:84:E5:A9:04:43:4A:7E:E6:74:F9:47:CC:C6:21
X509v3 Authority Key Identifier:
keyid:4E:EF:20:4D:7E:86:FF:81:62:4A:61:81:28:6E:76:D4:33:87:6B:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tu8gTX6G_4FiSmGBKG521DOHa8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/69322d-ad71-4877-a470-9ad9099de1d3/1/Tu8gTX6G_4FiSmGBKG521DOHa8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/69322d-ad71-4877-a470-9ad9099de1d3/1/Tu8gTX6G_4FiSmGBKG521DOHa8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:49:78:17:96:cc:0c:db:ed:88:88:41:bc:65:95:5e:cb:2b:
03:da:eb:b9:27:35:5d:d6:e3:7a:c4:a8:b8:12:90:a3:7c:1a:
17:13:2f:73:ca:a8:39:98:d6:76:87:a3:9a:eb:81:90:85:5f:
f6:01:af:7c:d1:36:df:4e:48:81:93:f7:00:8e:e2:b0:ff:3e:
50:4d:19:50:c2:a3:e3:4e:32:c5:97:da:5b:12:6a:99:2c:4d:
56:f5:66:9f:e4:ca:1d:59:c5:40:0d:0a:44:20:a5:f7:4f:f6:
0f:49:57:5b:04:c5:e8:29:a9:27:75:3f:4e:69:fd:a0:19:d3:
33:c1:1c:4d:c4:09:57:28:28:a7:33:26:ad:5b:81:b0:be:36:
94:99:4c:79:91:a7:7a:8d:2f:a5:51:20:06:90:b7:16:bd:30:
9b:6b:e3:70:93:00:69:eb:00:65:5b:1d:00:1f:17:04:64:1b:
29:e6:c5:46:9e:50:a5:af:fe:cd:b3:c0:77:4d:09:af:37:cf:
5f:cb:06:ae:a8:aa:73:5c:b8:60:d4:f8:92:59:be:11:dc:82:
8b:6c:1c:ae:7d:21:a6:63:2f:44:5a:89:c9:39:cb:96:2d:84:
b0:5d:ee:31:9b:81:e0:fd:38:ce:f7:86:b2:5b:54:8d:7c:00:
30:4f:df:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:17:43 2025 by rpki-client