Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/309d36-c420-4321-9540-f3df673ea58c/1/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.mft
File: TRUn0YOb-DA2DXFZATQ1Tm2QRpc.mft (raw, json)
Hash identifier: aVbNdiPzhYOOceD2NwCVykajteS+iaRWnIKodXGg1us=
Subject key identifier: E1:85:04:48:0D:F4:63:7A:F2:EB:FC:08:F3:07:2F:FD:6B:14:43:3D
Authority key identifier: 4D:15:27:D1:83:9B:F8:30:36:0D:71:59:01:34:35:4E:6D:90:46:97
Certificate issuer: /CN=4d1527d1839bf830360d71590134354e6d904697
Certificate serial: 019746302D44B4E7C38D32F90F9046D6B1CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/309d36-c420-4321-9540-f3df673ea58c/1/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.mft
Manifest number: 157C
Signing time: Fri 06 Jun 2025 17:00:51 +0000
Manifest this update: Fri 06 Jun 2025 17:00:51 +0000
Manifest next update: Sat 07 Jun 2025 17:00:51 +0000
Files and hashes: 1: TRUn0YOb-DA2DXFZATQ1Tm2QRpc.crl (hash: Y6SbEgboLAU1gHWvtHlgKkzn6ukOuIdgxepWiJvzaYg=)
2: a6Whh1qMHaCLz9si7bMkIx4xg1Y.roa (hash: R/Syehgq2eEOSio/8bhqr2YXvz+4Ke3qpd0G80XikQo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/309d36-c420-4321-9540-f3df673ea58c/1/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/309d36-c420-4321-9540-f3df673ea58c/1/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.mft
rsync://rpki.ripe.net/repository/DEFAULT/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:30:2d:44:b4:e7:c3:8d:32:f9:0f:90:46:d6:b1:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d1527d1839bf830360d71590134354e6d904697
Validity
Not Before: Jun 6 17:00:51 2025 GMT
Not After : Jun 7 17:00:51 2025 GMT
Subject: CN=e18504480df4637af2ebfc08f3072ffd6b14433d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:03:d6:5b:1c:63:6d:78:e2:44:1e:94:cb:ae:
d4:eb:8e:ec:12:b5:eb:53:75:c5:9b:19:9d:29:22:
65:55:72:c7:e8:8e:f6:6d:c9:fa:59:60:4a:1b:47:
7e:4d:8c:31:e2:86:43:a5:7c:32:61:41:9a:4e:98:
78:3b:b9:cb:84:58:43:cc:e4:8a:ea:01:09:b3:4e:
a2:d4:e3:e4:b5:a9:07:81:54:de:fd:8e:27:94:60:
84:83:5f:21:c8:d3:b2:0e:50:dd:41:da:7d:c0:7c:
8a:f6:78:69:80:30:45:1c:df:1e:d1:d7:16:d3:03:
0c:c7:f9:bc:98:71:51:25:4f:8f:26:55:dd:d6:94:
aa:2d:e9:8a:7c:0a:18:eb:c4:14:7c:46:15:89:74:
53:b9:88:8c:5c:63:5e:0d:4e:d1:26:1c:f0:54:4e:
e9:4b:de:00:5b:67:bc:ba:14:d5:99:ac:9f:99:ba:
04:f3:61:55:1a:74:44:1f:9a:c2:ec:b8:39:17:79:
f5:6f:b2:57:83:ea:e7:3d:b4:5c:cc:60:76:91:b8:
34:8b:d5:77:eb:87:3c:0a:6b:df:28:33:29:92:80:
5b:3e:72:ce:e2:e1:78:08:58:4d:9c:a0:dd:58:5c:
f4:35:23:dc:fe:28:8f:27:c4:e6:35:6a:ee:75:2f:
22:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:85:04:48:0D:F4:63:7A:F2:EB:FC:08:F3:07:2F:FD:6B:14:43:3D
X509v3 Authority Key Identifier:
keyid:4D:15:27:D1:83:9B:F8:30:36:0D:71:59:01:34:35:4E:6D:90:46:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/309d36-c420-4321-9540-f3df673ea58c/1/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/309d36-c420-4321-9540-f3df673ea58c/1/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:74:9d:79:61:e4:eb:60:e7:f2:80:17:3d:5d:8d:05:f6:23:
b8:61:42:02:1e:40:4c:d8:29:3b:35:36:f8:f6:9e:85:f6:22:
cd:f1:21:e3:f2:eb:35:d8:26:e6:ca:da:f5:40:34:f5:62:e5:
b4:05:95:2a:65:5d:eb:40:ff:e8:12:74:2b:2f:66:fe:b7:fb:
49:32:b8:8f:f2:ac:85:3c:32:a0:58:52:01:15:59:52:69:97:
33:b5:37:8b:b9:c3:7e:75:4f:a9:c9:06:7b:62:a5:37:45:49:
31:6d:2f:d2:4e:20:30:c1:80:94:fe:9d:f3:c5:f5:9c:cb:59:
90:0e:88:5b:89:0f:1e:ac:ef:fa:be:9e:eb:38:ec:19:de:70:
b7:bb:2d:6b:6d:4e:ce:de:dd:95:5b:f7:f6:a4:77:bc:d5:06:
5b:11:1a:11:c4:ae:a3:28:a6:20:ac:10:ec:d5:15:3c:67:ec:
3b:df:c4:9c:65:6f:35:0f:82:3d:c7:5d:10:9f:6d:d7:d0:91:
2d:4d:6f:76:5c:d9:0d:33:8d:e0:aa:c8:c8:ba:ed:a6:c5:58:
bc:fb:d5:78:d6:79:2e:2b:2f:0c:f7:ea:c4:33:4d:ca:0b:43:
2d:30:d3:49:e6:ab:c5:28:32:21:36:4c:d6:a4:0f:47:e2:e6:
fd:ab:bf:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:03:37 2025 by rpki-client