Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/dc3491-c699-42b5-90a7-cc7e9ab09fb8/1/tcKI6WPg6fgtHGp_2E7FqjQKuo8.mft
File: tcKI6WPg6fgtHGp_2E7FqjQKuo8.mft (raw, json)
Hash identifier: 7aYwbiqlZC5BE7dtAC7u3p3Z0ygk4vVvdqUGN+R5w7Q=
Subject key identifier: 7A:74:25:2C:D7:0F:1C:A6:81:92:A5:FA:E1:AE:A4:27:89:68:40:E5
Authority key identifier: B5:C2:88:E9:63:E0:E9:F8:2D:1C:6A:7F:D8:4E:C5:AA:34:0A:BA:8F
Certificate issuer: /CN=b5c288e963e0e9f82d1c6a7fd84ec5aa340aba8f
Certificate serial: 01974AE899A793490C6C68FDD15899B9DE26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tcKI6WPg6fgtHGp_2E7FqjQKuo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/dc3491-c699-42b5-90a7-cc7e9ab09fb8/1/tcKI6WPg6fgtHGp_2E7FqjQKuo8.mft
Manifest number: 021B
Signing time: Sat 07 Jun 2025 15:00:47 +0000
Manifest this update: Sat 07 Jun 2025 15:00:47 +0000
Manifest next update: Sun 08 Jun 2025 15:00:47 +0000
Files and hashes: 1: ZmF3lPkl3dsARIFpHN7vz5QHbFs.roa (hash: ukfiioKav9S2J4a6qVoPDRL9RQGgYfvHu1FXDGi1Nzg=)
2: tcKI6WPg6fgtHGp_2E7FqjQKuo8.crl (hash: UfO9UQhU3uuWrcjqwIr9dfTWtXNCi1NGZD+ZRtheMhw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/dc3491-c699-42b5-90a7-cc7e9ab09fb8/1/tcKI6WPg6fgtHGp_2E7FqjQKuo8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/dc3491-c699-42b5-90a7-cc7e9ab09fb8/1/tcKI6WPg6fgtHGp_2E7FqjQKuo8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tcKI6WPg6fgtHGp_2E7FqjQKuo8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:e8:99:a7:93:49:0c:6c:68:fd:d1:58:99:b9:de:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5c288e963e0e9f82d1c6a7fd84ec5aa340aba8f
Validity
Not Before: Jun 7 15:00:47 2025 GMT
Not After : Jun 8 15:00:47 2025 GMT
Subject: CN=7a74252cd70f1ca68192a5fae1aea427896840e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:10:1c:09:11:47:b3:3f:02:2c:fe:12:e2:73:
db:0c:05:98:fe:bf:f2:f1:51:81:f1:c0:8d:3f:46:
25:0c:e6:4c:72:b4:27:e4:9b:9e:f3:aa:77:bb:2e:
ec:b5:81:6d:95:2d:ca:f5:04:1b:0e:34:9e:fe:23:
88:13:95:59:81:33:46:3c:dd:ae:0b:99:99:7c:c2:
d3:0e:89:af:06:f2:59:d7:cb:db:d4:3b:4f:b1:3a:
fa:98:82:72:8c:28:7a:3e:98:eb:8a:3c:c2:d3:d7:
85:93:5a:38:08:fc:17:7c:ad:87:0a:e8:67:d3:38:
3c:b2:2f:f3:1c:b1:53:d3:f8:ba:e5:2f:3b:2b:7d:
f2:c7:ea:f8:31:e4:59:07:27:94:fb:52:d0:a7:14:
9a:0b:63:18:4d:e3:b9:f7:df:7a:73:98:fd:6c:28:
20:30:47:06:2d:f4:fa:66:4e:24:a9:4a:bb:e7:d3:
f8:f1:77:20:36:40:6b:56:4a:ee:43:0c:cd:5b:c2:
70:7e:34:63:d5:fa:f4:4c:2a:71:39:e8:41:63:71:
c1:4f:46:ee:73:0a:7e:07:18:0a:8e:85:e7:e0:c8:
50:eb:ee:6f:84:3f:4f:5b:57:b9:82:92:6c:fa:3c:
c3:05:5a:3f:e0:5a:d9:e7:7a:b4:5c:63:99:2b:71:
ca:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:74:25:2C:D7:0F:1C:A6:81:92:A5:FA:E1:AE:A4:27:89:68:40:E5
X509v3 Authority Key Identifier:
keyid:B5:C2:88:E9:63:E0:E9:F8:2D:1C:6A:7F:D8:4E:C5:AA:34:0A:BA:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tcKI6WPg6fgtHGp_2E7FqjQKuo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/dc3491-c699-42b5-90a7-cc7e9ab09fb8/1/tcKI6WPg6fgtHGp_2E7FqjQKuo8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/dc3491-c699-42b5-90a7-cc7e9ab09fb8/1/tcKI6WPg6fgtHGp_2E7FqjQKuo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:a7:9f:79:ee:49:6d:1b:e5:1f:66:e6:b8:74:03:ef:b2:49:
f4:b8:64:42:0b:e4:4b:51:59:6d:4b:7b:ce:be:93:aa:39:c6:
3e:04:03:d7:bf:52:76:a2:a6:64:f7:39:06:8d:65:1f:d1:95:
2d:3e:b2:84:83:69:94:a9:fa:ba:50:b5:2b:d4:8b:2b:a7:05:
6e:ae:3e:84:b5:98:7a:9e:76:66:83:17:30:78:ed:69:23:76:
1c:50:55:32:4c:81:b1:df:5f:e3:35:32:76:d8:d8:ab:5a:88:
86:6f:9d:fe:75:a1:cd:f0:cc:06:c2:9b:35:01:11:e6:ed:2b:
db:04:ff:d3:cf:9b:07:85:6f:83:f4:63:cb:61:2f:ea:da:9a:
3f:d5:5f:04:df:61:b7:ff:f9:5a:8a:ee:26:53:40:5e:ad:6c:
3b:c2:b6:2b:45:04:c7:ed:8a:45:95:ec:8e:0e:3c:fe:6e:d2:
eb:ca:2f:c8:fb:9b:db:99:c7:1b:3c:91:e6:14:a7:da:e4:fa:
31:ee:e2:71:47:2d:b3:73:8f:46:6d:6b:80:d6:68:02:39:d8:
dc:ee:83:4e:8e:3f:01:e0:c0:61:41:7a:49:f6:7b:4e:7e:91:
99:22:85:bb:17:5e:8e:b6:49:b6:f9:b3:72:25:2e:fd:29:5a:
2f:15:28:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 18:31:53 2025 by rpki-client