Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/e4d20f-6dc8-497d-a8d6-9dddd6802088/1/tjowlEOcrA9VVwEobNVDc7zmy1A.mft
File: tjowlEOcrA9VVwEobNVDc7zmy1A.mft (raw, json)
Hash identifier: vhiHJ2hb3lTAQzjsNf8ZeCika12KFTD+YYpUWytYyjE=
Subject key identifier: EC:50:A9:1F:3E:F8:52:78:E3:FF:52:C2:8C:DE:E4:D2:17:66:1D:E6
Authority key identifier: B6:3A:30:94:43:9C:AC:0F:55:57:01:28:6C:D5:43:73:BC:E6:CB:50
Certificate issuer: /CN=b63a3094439cac0f555701286cd54373bce6cb50
Certificate serial: 01974D7C11A4D212E1258F8B873A885FEE2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tjowlEOcrA9VVwEobNVDc7zmy1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/e4d20f-6dc8-497d-a8d6-9dddd6802088/1/tjowlEOcrA9VVwEobNVDc7zmy1A.mft
Manifest number: 0320
Signing time: Sun 08 Jun 2025 03:01:05 +0000
Manifest this update: Sun 08 Jun 2025 03:01:05 +0000
Manifest next update: Mon 09 Jun 2025 03:01:05 +0000
Files and hashes: 1: lCtCcNNufTLwFJhkrWabEjjBy0k.roa (hash: mf7pg/6iwjdXTSMTSKNkIUvc6nvXHprTVxoK02WKi+Y=)
2: tjowlEOcrA9VVwEobNVDc7zmy1A.crl (hash: V7axnldfoGRXe+T5CmJRU0iOZ9MZn0DKUlDsQcvNNPA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/e4d20f-6dc8-497d-a8d6-9dddd6802088/1/tjowlEOcrA9VVwEobNVDc7zmy1A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/e4d20f-6dc8-497d-a8d6-9dddd6802088/1/tjowlEOcrA9VVwEobNVDc7zmy1A.mft
rsync://rpki.ripe.net/repository/DEFAULT/tjowlEOcrA9VVwEobNVDc7zmy1A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:7c:11:a4:d2:12:e1:25:8f:8b:87:3a:88:5f:ee:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b63a3094439cac0f555701286cd54373bce6cb50
Validity
Not Before: Jun 8 03:01:05 2025 GMT
Not After : Jun 9 03:01:05 2025 GMT
Subject: CN=ec50a91f3ef85278e3ff52c28cdee4d217661de6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:7c:82:88:58:66:62:ca:10:dc:25:b8:62:94:
46:a6:06:4e:2a:c2:6f:69:7b:e4:ad:b0:22:d9:b1:
40:2e:0c:dc:76:68:b3:94:dc:b6:70:a3:0f:5e:a4:
e7:79:6e:ff:9e:cf:08:ac:d7:7b:9f:36:48:4d:40:
fe:93:5f:9a:82:b7:9c:ed:42:fa:5d:9c:ce:32:78:
78:e5:af:c9:a5:3d:0d:79:00:d7:ef:fa:53:d2:b1:
de:83:5f:2a:28:42:17:1b:88:91:dd:16:d4:ae:48:
f2:88:14:03:2e:1c:04:2b:50:b3:5f:4b:b6:32:0c:
c3:40:eb:06:52:73:67:98:84:31:5b:e0:62:bf:5c:
e8:9f:3b:6e:d5:4b:ff:dc:58:37:2f:e2:f1:88:e8:
b0:3e:85:2d:22:53:60:9f:60:4e:b3:88:92:d1:08:
b0:b2:08:e3:ea:0a:de:23:4e:87:2b:56:32:85:d8:
f2:8b:98:63:08:98:3c:cd:e7:63:16:df:b3:09:79:
1f:eb:47:88:1b:77:c0:0b:b2:78:ce:3c:80:ae:0a:
ea:62:f0:5e:5c:2d:05:8f:e5:3b:e9:3a:e8:22:dc:
fa:c8:b1:13:ad:2b:ac:85:5a:8c:00:9f:68:69:77:
43:17:6f:b7:87:32:8f:5e:1e:5f:39:28:27:c5:1f:
f6:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:50:A9:1F:3E:F8:52:78:E3:FF:52:C2:8C:DE:E4:D2:17:66:1D:E6
X509v3 Authority Key Identifier:
keyid:B6:3A:30:94:43:9C:AC:0F:55:57:01:28:6C:D5:43:73:BC:E6:CB:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tjowlEOcrA9VVwEobNVDc7zmy1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/e4d20f-6dc8-497d-a8d6-9dddd6802088/1/tjowlEOcrA9VVwEobNVDc7zmy1A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/e4d20f-6dc8-497d-a8d6-9dddd6802088/1/tjowlEOcrA9VVwEobNVDc7zmy1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:3c:2c:d6:4d:7d:e9:68:8d:99:c0:23:bc:1a:f7:8b:a5:46:
f5:da:12:84:46:06:ae:64:1e:73:a3:e3:52:ef:ea:33:e2:d8:
cd:02:c7:d4:c0:a6:4b:33:67:e7:c8:3c:30:73:21:47:b5:cc:
80:57:42:8a:72:02:37:9e:93:db:b4:a7:13:98:37:55:ca:5d:
49:d0:7f:80:7d:cd:71:3f:81:ff:a1:92:0b:b1:c9:45:75:bc:
72:4b:e0:bf:9f:36:30:e7:d5:cd:24:38:c6:17:9a:5d:de:a1:
3c:d4:63:70:31:4a:04:eb:a3:99:be:48:85:65:f7:3a:b9:46:
ad:69:9b:fa:36:35:15:23:9a:c2:de:9f:b0:76:b4:4f:c4:97:
77:64:10:a6:fe:45:54:20:28:3d:3a:3b:bc:58:df:f6:7c:f3:
39:13:e6:3b:2a:73:13:63:b0:25:67:d2:38:d4:ca:7a:75:c2:
07:fc:60:6e:f6:00:a0:74:74:19:0e:2d:4e:33:ac:fb:a6:b7:
79:02:09:42:89:ad:48:04:3e:c6:23:d0:fe:64:57:69:d5:1b:
1a:cc:f0:a2:f9:94:d1:d4:3b:c1:78:ed:02:c7:e9:38:92:dc:
93:e1:a3:06:7d:60:11:a5:76:8c:21:91:46:a6:01:98:e9:2f:
43:c0:41:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:35:08 2025 by rpki-client