Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/343892-780c-432a-882f-1e0d7c42da76/1/TLkyvGDp_RGG-Ppr1xPCBymuc-4.mft
File: TLkyvGDp_RGG-Ppr1xPCBymuc-4.mft (raw, json)
Hash identifier: ZQEI/2m10RUfA/qxLdxysp9QunNiQw2Js+SH5lvYwgE=
Subject key identifier: 36:8A:66:D9:14:BC:A3:80:8C:93:2A:CE:FE:63:52:63:B7:7A:EB:4E
Authority key identifier: 4C:B9:32:BC:60:E9:FD:11:86:F8:FA:6B:D7:13:C2:07:29:AE:73:EE
Certificate issuer: /CN=4cb932bc60e9fd1186f8fa6bd713c20729ae73ee
Certificate serial: 01974B56ADB1168212A6C1F7FAA81ECAD90E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TLkyvGDp_RGG-Ppr1xPCBymuc-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/343892-780c-432a-882f-1e0d7c42da76/1/TLkyvGDp_RGG-Ppr1xPCBymuc-4.mft
Manifest number: 1132
Signing time: Sat 07 Jun 2025 17:01:01 +0000
Manifest this update: Sat 07 Jun 2025 17:01:01 +0000
Manifest next update: Sun 08 Jun 2025 17:01:01 +0000
Files and hashes: 1: TLkyvGDp_RGG-Ppr1xPCBymuc-4.crl (hash: vJo9lu/acOPGu1EWQBGsa6XCDBOl6TtUyZ8xOdXPV68=)
2: j-betU5F3fuYYNREFl5I-_t74ng.roa (hash: ThVTYZ7pBXxFoxAK1y8K2Bay/CDdSEmxPkT01D83Maw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/343892-780c-432a-882f-1e0d7c42da76/1/TLkyvGDp_RGG-Ppr1xPCBymuc-4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/343892-780c-432a-882f-1e0d7c42da76/1/TLkyvGDp_RGG-Ppr1xPCBymuc-4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TLkyvGDp_RGG-Ppr1xPCBymuc-4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 17:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:56:ad:b1:16:82:12:a6:c1:f7:fa:a8:1e:ca:d9:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cb932bc60e9fd1186f8fa6bd713c20729ae73ee
Validity
Not Before: Jun 7 17:01:01 2025 GMT
Not After : Jun 8 17:01:01 2025 GMT
Subject: CN=368a66d914bca3808c932acefe635263b77aeb4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:84:f7:25:37:01:58:20:58:d2:94:b6:a9:d1:
06:e6:f3:eb:6b:28:e5:e1:2c:85:5f:72:32:53:7c:
a5:eb:9b:8c:68:67:5d:50:c1:cd:55:83:6a:f7:4c:
77:6a:7f:66:1c:6c:ca:0f:a4:4f:57:2c:76:30:0a:
32:f6:4c:38:04:c1:39:33:8b:01:e8:aa:58:2f:5c:
ee:f8:c2:11:42:9f:91:72:63:cc:11:c6:45:63:d2:
f3:37:e0:a1:86:2c:8a:5e:69:45:37:95:a4:e7:ec:
89:de:f5:ad:fb:96:ec:1e:5b:7d:11:f4:dd:d7:a4:
09:89:48:20:c5:98:7f:c9:c4:b2:39:4d:3e:d3:97:
27:1b:41:48:10:bc:3f:28:51:25:7b:b0:0e:7b:1c:
5d:47:3e:51:32:12:bf:f7:2e:ec:64:2d:6b:78:1c:
b9:43:20:79:7a:09:ac:cc:0a:27:0e:ec:c9:03:da:
3a:49:91:fa:22:05:1d:a8:d3:05:83:6a:2c:3e:fe:
65:b8:2b:fb:8a:4c:6d:10:b1:70:ae:1f:60:ff:a9:
30:6b:41:a1:9f:2f:78:b3:04:2c:83:0e:08:00:87:
e3:c7:ac:97:47:7b:58:1f:52:00:42:58:f8:43:d5:
0d:8a:80:f1:75:c6:a8:5c:42:de:ff:63:9d:19:a7:
2e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:8A:66:D9:14:BC:A3:80:8C:93:2A:CE:FE:63:52:63:B7:7A:EB:4E
X509v3 Authority Key Identifier:
keyid:4C:B9:32:BC:60:E9:FD:11:86:F8:FA:6B:D7:13:C2:07:29:AE:73:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TLkyvGDp_RGG-Ppr1xPCBymuc-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/343892-780c-432a-882f-1e0d7c42da76/1/TLkyvGDp_RGG-Ppr1xPCBymuc-4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/343892-780c-432a-882f-1e0d7c42da76/1/TLkyvGDp_RGG-Ppr1xPCBymuc-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:0e:92:d5:e8:d0:44:23:6c:b7:c3:8f:ac:45:5a:d7:ee:83:
d9:d4:c5:88:45:9b:89:7c:d7:15:43:63:33:97:a9:62:8d:1a:
f9:93:30:64:18:62:1a:15:97:b5:f9:13:d8:c9:cb:7b:d3:09:
cd:8d:d8:e0:53:e7:1c:79:6d:d2:55:a4:16:60:5b:3f:81:00:
39:8c:9c:64:19:8f:3b:6c:5e:3d:92:d3:75:6b:69:70:b9:08:
00:8e:1d:1d:c2:ea:c9:22:6e:10:fa:f1:6a:ee:cc:5f:46:a3:
58:a3:ba:b0:49:95:c4:bc:16:d8:16:69:de:2b:a1:19:e0:0f:
bf:75:c4:ac:0f:1c:04:e2:b8:bd:f1:62:70:4a:0d:c8:66:2f:
29:2c:dc:71:b7:9e:8f:e0:f6:41:50:4a:97:10:c0:de:89:04:
74:ad:ff:c5:97:1d:92:62:28:f0:09:40:00:16:ca:47:14:bd:
fc:36:f4:c4:1d:af:7d:46:be:8f:80:01:f4:9f:b5:0f:84:70:
16:24:d8:d8:93:3a:9a:f0:98:73:16:97:ae:40:b6:b4:7d:32:
7b:7b:09:ed:b3:0a:51:4f:98:af:7f:3a:d2:a5:44:a2:85:0c:
45:ba:e4:7b:d2:6f:71:c7:ea:23:b3:c8:a7:fc:1d:ca:46:17:
81:3a:ef:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:50:45 2025 by rpki-client