Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/5b788e-f847-4df9-9334-964cca722f73/1/TK0YVBTBauXSKaiqK_oV_vxxoiI.mft
File: TK0YVBTBauXSKaiqK_oV_vxxoiI.mft (raw, json)
Hash identifier: 4mIqbdTlbEPwQR2HMOMSYT7icQoCsjMt9CZJKXrbDYs=
Subject key identifier: 29:01:C8:BF:AD:13:5C:73:87:3D:DD:4F:65:11:CA:77:D0:16:52:1F
Authority key identifier: 4C:AD:18:54:14:C1:6A:E5:D2:29:A8:AA:2B:FA:15:FE:FC:71:A2:22
Certificate issuer: /CN=4cad185414c16ae5d229a8aa2bfa15fefc71a222
Certificate serial: 01974D7BF3FDAAE01C22130D72E2C9AEB4CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TK0YVBTBauXSKaiqK_oV_vxxoiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/5b788e-f847-4df9-9334-964cca722f73/1/TK0YVBTBauXSKaiqK_oV_vxxoiI.mft
Manifest number: 1512
Signing time: Sun 08 Jun 2025 03:00:58 +0000
Manifest this update: Sun 08 Jun 2025 03:00:58 +0000
Manifest next update: Mon 09 Jun 2025 03:00:58 +0000
Files and hashes: 1: TK0YVBTBauXSKaiqK_oV_vxxoiI.crl (hash: T5cTzeSE+E5rXwXL7ebABHsvtNBNdHC5FY4VBxTZ4lI=)
2: dxfaqcbOBYRpYzoiD3a-nfzNgyI.roa (hash: 9S4UtPoorxm2Y5jeo5Ht7EgjOkb+pCS05uOlyENLKPI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/5b788e-f847-4df9-9334-964cca722f73/1/TK0YVBTBauXSKaiqK_oV_vxxoiI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/5b788e-f847-4df9-9334-964cca722f73/1/TK0YVBTBauXSKaiqK_oV_vxxoiI.mft
rsync://rpki.ripe.net/repository/DEFAULT/TK0YVBTBauXSKaiqK_oV_vxxoiI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:7b:f3:fd:aa:e0:1c:22:13:0d:72:e2:c9:ae:b4:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cad185414c16ae5d229a8aa2bfa15fefc71a222
Validity
Not Before: Jun 8 03:00:58 2025 GMT
Not After : Jun 9 03:00:58 2025 GMT
Subject: CN=2901c8bfad135c73873ddd4f6511ca77d016521f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:9f:51:39:63:4c:83:2e:f0:80:c7:83:8e:c0:
0c:b8:6b:bc:bf:da:ab:ca:24:d9:af:93:2d:b9:7d:
ab:36:65:a1:e5:33:09:57:5c:da:b7:38:85:4b:c3:
af:f7:4a:10:ea:60:c9:24:51:80:da:8b:82:08:7d:
be:fb:b5:13:e7:dc:13:3d:14:50:28:38:e3:64:3d:
54:b9:1f:11:7e:90:a1:ad:4b:7b:4d:c8:44:d1:90:
28:81:75:ec:a6:88:90:95:4c:c6:4f:0e:fb:20:69:
0b:6c:6f:ff:63:d3:64:15:70:90:a9:ab:4e:c5:2c:
5f:69:08:28:93:ca:a1:ba:b2:59:f4:ce:7f:0f:c8:
7a:5d:7d:f7:ce:c9:40:04:89:29:13:c6:bc:24:4c:
cb:15:f2:08:36:bd:2c:f1:5f:8f:41:32:12:83:85:
72:b1:8f:fd:61:1c:0a:15:da:21:9d:7a:fb:17:69:
c2:2d:07:d3:08:33:f6:ff:74:80:a4:2b:96:4b:fa:
15:0c:a0:a3:cf:2a:61:c2:74:ab:c3:d4:2f:7a:8d:
fe:b4:86:59:53:f3:e7:b0:3d:fc:d8:c0:c0:ac:3d:
3f:a4:b4:e9:bf:2d:2b:50:e5:9d:9a:ab:4b:f5:54:
00:ee:ff:e7:d9:68:99:be:76:9b:6e:25:0f:30:72:
d8:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:01:C8:BF:AD:13:5C:73:87:3D:DD:4F:65:11:CA:77:D0:16:52:1F
X509v3 Authority Key Identifier:
keyid:4C:AD:18:54:14:C1:6A:E5:D2:29:A8:AA:2B:FA:15:FE:FC:71:A2:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TK0YVBTBauXSKaiqK_oV_vxxoiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5b788e-f847-4df9-9334-964cca722f73/1/TK0YVBTBauXSKaiqK_oV_vxxoiI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5b788e-f847-4df9-9334-964cca722f73/1/TK0YVBTBauXSKaiqK_oV_vxxoiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:36:05:a3:97:07:70:86:e4:fe:05:53:07:10:a2:69:9b:72:
22:e0:48:09:12:05:7c:88:b2:dd:5f:f0:85:77:0e:ad:f0:c4:
37:f6:56:b9:ca:5b:f8:00:61:5e:c0:b3:41:d7:23:b1:54:0f:
f2:d3:4c:ed:36:5a:d1:80:7f:cf:ad:32:92:45:c2:17:b6:be:
0e:3f:fe:4f:2c:7f:ca:da:25:dd:68:da:31:5f:6c:ca:3d:59:
f8:08:49:36:d5:e2:4c:2d:c6:7f:04:d5:ad:0a:8f:61:fe:de:
a5:f5:5b:fb:38:e2:fc:0b:91:6b:63:d9:eb:40:80:9d:0d:d3:
bb:5a:ee:d1:fd:7c:ed:cd:90:d8:94:10:b2:80:73:5f:84:10:
01:0e:23:12:b5:b2:cd:74:05:6f:1f:a4:41:b8:5f:01:88:4b:
74:9f:c6:fc:31:5d:11:13:69:89:43:20:6c:a3:60:17:97:51:
f8:d1:9e:ae:0a:91:b2:d4:49:c1:8b:97:38:1c:d7:ec:8b:27:
a5:11:13:6f:05:13:b2:ce:45:f2:48:5b:23:6d:78:e7:84:c0:
94:fb:62:f7:29:a7:3f:09:00:24:8d:f5:2c:ee:7b:56:fa:c2:
8e:c3:28:41:39:fb:1f:87:85:10:1f:00:b3:35:95:90:b9:c2:
69:31:0d:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:25:33 2025 by rpki-client