Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/097da1-7cc9-4343-8024-b310d71c2cad/1/1TX4-scGL3fyS5jNXDtUqJutSDg.mft
File: 1TX4-scGL3fyS5jNXDtUqJutSDg.mft (raw, json)
Hash identifier: P0d+Bcy7KctHH4MsmylflhERhp/Bi4QahhM83ihTZWg=
Subject key identifier: CF:0D:63:E5:30:05:CD:26:1E:93:CA:CB:29:77:F8:8C:F0:C5:68:FE
Authority key identifier: D5:35:F8:FA:C7:06:2F:77:F2:4B:98:CD:5C:3B:54:A8:9B:AD:48:38
Certificate issuer: /CN=d535f8fac7062f77f24b98cd5c3b54a89bad4838
Certificate serial: 0197488C5EAFD215BD6FD6720374E2085723
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1TX4-scGL3fyS5jNXDtUqJutSDg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/097da1-7cc9-4343-8024-b310d71c2cad/1/1TX4-scGL3fyS5jNXDtUqJutSDg.mft
Manifest number: 150F
Signing time: Sat 07 Jun 2025 04:00:48 +0000
Manifest this update: Sat 07 Jun 2025 04:00:48 +0000
Manifest next update: Sun 08 Jun 2025 04:00:48 +0000
Files and hashes: 1: 1TX4-scGL3fyS5jNXDtUqJutSDg.crl (hash: cIvgiWv0vMbkIk9MxA7DaDjtmpw+obSqQNbkRl+1US8=)
2: N3-917WPyl7E_IHoSS2FMLc18wo.roa (hash: VHNMzSlgwcYRKlzGy0Nb6X63KDdiRRNUd0w6+PH3+3w=)
3: oJEvXpEBpuYbcFfcZPDBTEehGY8.roa (hash: b0SdOLZ2AbPJ+0i7CwF2Gja+/00y5/FVMUIAvNs5h1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/097da1-7cc9-4343-8024-b310d71c2cad/1/1TX4-scGL3fyS5jNXDtUqJutSDg.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/097da1-7cc9-4343-8024-b310d71c2cad/1/1TX4-scGL3fyS5jNXDtUqJutSDg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1TX4-scGL3fyS5jNXDtUqJutSDg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 04:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:5e:af:d2:15:bd:6f:d6:72:03:74:e2:08:57:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d535f8fac7062f77f24b98cd5c3b54a89bad4838
Validity
Not Before: Jun 7 04:00:48 2025 GMT
Not After : Jun 8 04:00:48 2025 GMT
Subject: CN=cf0d63e53005cd261e93cacb2977f88cf0c568fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:2e:51:7a:58:ec:9a:5e:a4:45:c0:cb:07:2f:
39:b6:63:d5:5c:f8:18:a8:72:c4:68:a9:43:4e:5e:
f8:c7:33:d0:7c:e1:bb:50:75:55:63:30:dd:55:9a:
e1:ce:a4:2a:9a:4d:a9:d4:22:4e:60:46:99:c3:52:
f8:be:2d:16:a1:b1:f0:fd:88:a6:12:1d:d4:6f:47:
79:ad:d1:54:5a:b0:71:ef:23:f0:16:c6:38:7b:a0:
b2:90:ee:02:d6:2b:e3:a0:ef:8a:de:e6:41:15:64:
8a:05:cf:fb:7d:e5:62:fb:08:e4:ce:fa:34:4b:04:
41:f4:b5:ec:68:35:a1:72:52:14:08:a4:c4:7d:c2:
ed:1a:a6:35:f4:04:85:4d:30:c6:75:e0:f8:2c:9b:
11:b3:b5:90:b0:f3:96:6a:7e:cd:52:6b:21:8d:54:
75:35:53:8e:a4:0e:df:b6:28:56:db:fe:0d:03:b4:
3e:b3:ed:b3:1d:87:8e:0d:f5:dc:bd:c7:c5:31:44:
4e:18:5d:d6:43:a2:f9:67:df:47:a4:88:b8:87:ec:
f0:03:69:85:f6:7e:1d:af:3a:4f:d2:1a:3d:0a:ff:
94:40:e1:68:b4:f9:72:03:9d:8a:9a:a9:37:95:f6:
f0:d2:2a:9e:65:6a:13:1c:a4:c4:7d:85:48:0c:47:
9e:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:0D:63:E5:30:05:CD:26:1E:93:CA:CB:29:77:F8:8C:F0:C5:68:FE
X509v3 Authority Key Identifier:
keyid:D5:35:F8:FA:C7:06:2F:77:F2:4B:98:CD:5C:3B:54:A8:9B:AD:48:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1TX4-scGL3fyS5jNXDtUqJutSDg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/097da1-7cc9-4343-8024-b310d71c2cad/1/1TX4-scGL3fyS5jNXDtUqJutSDg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/097da1-7cc9-4343-8024-b310d71c2cad/1/1TX4-scGL3fyS5jNXDtUqJutSDg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:23:d5:6e:28:e3:9c:b9:59:09:bf:a9:03:65:b4:10:bb:7c:
22:12:6f:af:f9:fd:26:a0:10:dc:eb:9d:9d:a1:55:56:53:39:
40:82:c9:01:a5:72:6b:0e:41:e6:df:79:a3:4f:ec:cb:6b:0e:
f2:95:dd:3d:ba:d3:6d:43:48:2a:4f:28:30:fc:89:b2:54:0a:
d7:89:a2:b1:35:85:34:78:c9:71:64:c3:02:a4:18:e4:89:81:
fd:bb:2a:47:fd:8e:22:34:7c:c1:46:57:c8:91:f8:16:9e:de:
33:03:c1:4b:42:3a:b3:89:09:73:a8:91:0a:95:8c:f1:4e:6c:
8d:86:22:74:5f:3a:65:d6:9c:5c:85:40:79:66:e0:1f:a0:69:
74:29:fd:50:6a:e6:95:79:59:c9:d5:14:9b:3d:c0:9d:6a:17:
e9:ae:fc:4d:3d:e7:9f:dd:e5:82:2a:f0:7d:b7:3d:c1:15:cb:
3e:62:ab:ce:80:c7:f3:f6:88:8c:e7:52:fd:c8:60:d1:f5:a8:
b0:17:8c:52:41:6d:bb:b1:e6:28:82:56:c3:40:01:34:20:9c:
12:e0:40:28:0f:0c:55:d5:5a:fa:3f:51:0c:bc:6d:66:41:14:
4f:2d:86:62:ab:ce:db:fd:a3:04:47:e9:e6:a4:b1:7d:d2:03:
78:e1:5e:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:42:01 2025 by rpki-client