Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/tqFlTa6WxTJXjOHfHruCIdu2gUU.mft
File: tqFlTa6WxTJXjOHfHruCIdu2gUU.mft (raw, json)
Hash identifier: pg7jHecOHCwI583DeOX90B5FYfhYjhkEannsSgml8qU=
Subject key identifier: 3C:F2:B7:B7:BA:65:0F:F5:DD:B1:72:42:1A:68:FE:A6:F6:F1:6F:C2
Authority key identifier: B6:A1:65:4D:AE:96:C5:32:57:8C:E1:DF:1E:BB:82:21:DB:B6:81:45
Certificate issuer: /CN=b6a1654dae96c532578ce1df1ebb8221dbb68145
Certificate serial: 019748556CFE5618B2827F1EFBA85DA472DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tqFlTa6WxTJXjOHfHruCIdu2gUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/tqFlTa6WxTJXjOHfHruCIdu2gUU.mft
Manifest number: 157C
Signing time: Sat 07 Jun 2025 03:00:47 +0000
Manifest this update: Sat 07 Jun 2025 03:00:47 +0000
Manifest next update: Sun 08 Jun 2025 03:00:47 +0000
Files and hashes: 1: n9wbgcYA2gFozQl-awLgvubO0Jw.roa (hash: I7/eXt/2fdY6ma/4TQO3Dibom5bD15oMz/+pqihDXpI=)
2: p6rvh-AV0bmaoiN047zHywpJoqY.roa (hash: tR6pKJ08cGe9+fwUehgymwBvOx1rePcqoTH0w7NDkm8=)
3: tqFlTa6WxTJXjOHfHruCIdu2gUU.crl (hash: bP1uZNUWC9KV40vcCHZStLwSJWPUft62k26PEbfYxpk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/tqFlTa6WxTJXjOHfHruCIdu2gUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/tqFlTa6WxTJXjOHfHruCIdu2gUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tqFlTa6WxTJXjOHfHruCIdu2gUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:55:6c:fe:56:18:b2:82:7f:1e:fb:a8:5d:a4:72:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6a1654dae96c532578ce1df1ebb8221dbb68145
Validity
Not Before: Jun 7 03:00:47 2025 GMT
Not After : Jun 8 03:00:47 2025 GMT
Subject: CN=3cf2b7b7ba650ff5ddb172421a68fea6f6f16fc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:c6:64:5e:8e:6c:22:7f:61:52:d8:ec:4d:52:
f8:98:a2:7c:c9:a3:9e:55:76:9b:50:17:e7:f0:ca:
03:8c:32:5b:3d:e5:e6:e8:28:d0:c6:cf:9c:9b:d4:
c8:f4:cb:43:ad:14:e6:c5:1e:fe:82:44:28:49:5b:
b9:40:9d:67:63:96:44:59:b1:21:25:91:69:af:a8:
74:d5:f1:52:47:cb:71:2b:ab:93:6d:46:6f:e8:07:
83:e4:8c:95:69:11:9c:4c:50:0e:d8:b2:1b:10:30:
c7:2c:28:bf:f4:b6:16:67:12:95:0f:91:84:b2:0a:
a9:21:0e:3c:f0:85:be:8a:41:5f:5a:ae:0f:d4:bf:
ec:a3:22:55:a9:db:f0:e7:04:05:83:bc:d2:09:bd:
f0:9d:95:d5:20:3c:a0:46:cc:fd:fc:49:4d:05:b0:
ac:16:21:05:6a:cb:4d:ce:2f:f5:34:4c:90:12:7b:
05:ab:a0:8c:dd:7e:88:3d:b0:fd:87:9c:7b:66:57:
64:d7:1a:05:e2:2d:45:d8:e4:83:b9:b0:9e:5f:06:
db:31:00:86:79:80:47:b1:f3:28:b9:7a:d7:72:22:
f5:2f:55:4f:7d:f8:db:9f:65:da:f7:85:b3:3a:83:
5d:d4:4b:cc:c3:d7:41:a3:3f:36:b3:a6:55:92:ff:
38:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:F2:B7:B7:BA:65:0F:F5:DD:B1:72:42:1A:68:FE:A6:F6:F1:6F:C2
X509v3 Authority Key Identifier:
keyid:B6:A1:65:4D:AE:96:C5:32:57:8C:E1:DF:1E:BB:82:21:DB:B6:81:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tqFlTa6WxTJXjOHfHruCIdu2gUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/tqFlTa6WxTJXjOHfHruCIdu2gUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/tqFlTa6WxTJXjOHfHruCIdu2gUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:70:79:9a:d2:ef:70:c3:21:18:a0:34:9d:16:e6:0d:b0:52:
ac:fa:ae:96:4e:7a:9f:e5:7c:e2:67:5d:99:f1:b0:24:66:f3:
00:bc:d6:5d:31:53:da:b8:df:f8:31:86:91:c7:00:23:ed:84:
a4:da:fa:cf:ae:7b:c8:b9:54:31:af:fc:c8:82:ce:1c:fb:76:
ee:42:78:33:7e:7f:7d:54:cf:6c:96:86:1d:1c:b0:25:97:42:
bf:c7:e1:d2:e8:33:17:00:64:39:76:c0:a2:36:21:1c:af:2b:
9a:fd:9b:d6:f1:12:7a:39:f5:59:8b:95:50:1a:c3:85:22:8b:
1d:a2:92:e0:9a:18:68:b7:54:dc:af:99:80:af:a8:fa:ef:1e:
61:ec:1e:25:3e:95:cd:53:04:7c:4a:a1:3d:e4:32:73:b1:bb:
09:af:58:53:d8:03:86:05:84:9a:fe:35:6f:ff:06:d3:ca:2d:
e0:6d:89:5c:98:4a:84:1e:ec:68:8d:d9:63:7e:39:aa:0d:e0:
41:5b:b3:3e:d3:b2:32:d4:1a:57:4c:13:0c:14:bc:f3:6c:a4:
43:8b:30:86:07:b5:6c:75:5b:bd:28:f1:7e:2f:66:a1:5e:6b:
f0:83:47:5e:ec:00:3c:ba:a2:d8:bb:30:59:f7:f1:e2:ad:83:
d3:f4:04:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:10:06 2025 by rpki-client