Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/a35f7f-2194-46d3-91bd-cc0f50bda159/1/TN1pc0k84MOEm4uRm3UCul-gE9c.mft
File: TN1pc0k84MOEm4uRm3UCul-gE9c.mft (raw, json)
Hash identifier: ura1Ty7gV6QBHOJFYd9aAwRCnq+CMPjvPdSwBeJUR2c=
Subject key identifier: CB:14:4F:86:5C:4A:61:17:4D:28:9B:2B:BD:49:47:17:C8:A0:AC:2F
Authority key identifier: 4C:DD:69:73:49:3C:E0:C3:84:9B:8B:91:9B:75:02:BA:5F:A0:13:D7
Certificate issuer: /CN=4cdd6973493ce0c3849b8b919b7502ba5fa013d7
Certificate serial: 01974630260456741726136395C7E3F16790
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TN1pc0k84MOEm4uRm3UCul-gE9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/a35f7f-2194-46d3-91bd-cc0f50bda159/1/TN1pc0k84MOEm4uRm3UCul-gE9c.mft
Manifest number: 0203
Signing time: Fri 06 Jun 2025 17:00:49 +0000
Manifest this update: Fri 06 Jun 2025 17:00:49 +0000
Manifest next update: Sat 07 Jun 2025 17:00:49 +0000
Files and hashes: 1: TN1pc0k84MOEm4uRm3UCul-gE9c.crl (hash: tAJVZxthFqB21BsflhQd2/DjuFILsg2Hef9M+gTlJl0=)
2: iTC7AIloz6nQaL3mT_rFGYZ-wig.roa (hash: fesaTZGLmhO2WzwSQegYz6bFqw2Ey8O4XUX49y7XEFA=)
3: uAJKiTWW3Ub4f2F2pRQzTM4uTxQ.roa (hash: QYC9wZJDQP4jalSd59izpnWdNPoZL5WfK7FyvYaliJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/a35f7f-2194-46d3-91bd-cc0f50bda159/1/TN1pc0k84MOEm4uRm3UCul-gE9c.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/a35f7f-2194-46d3-91bd-cc0f50bda159/1/TN1pc0k84MOEm4uRm3UCul-gE9c.mft
rsync://rpki.ripe.net/repository/DEFAULT/TN1pc0k84MOEm4uRm3UCul-gE9c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:30:26:04:56:74:17:26:13:63:95:c7:e3:f1:67:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cdd6973493ce0c3849b8b919b7502ba5fa013d7
Validity
Not Before: Jun 6 17:00:49 2025 GMT
Not After : Jun 7 17:00:49 2025 GMT
Subject: CN=cb144f865c4a61174d289b2bbd494717c8a0ac2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:0b:38:c2:54:40:a5:3e:d2:fb:eb:7c:4f:b5:
1e:30:b1:5b:f5:c7:16:f9:2d:92:ea:59:11:8f:5b:
71:2d:50:31:ce:a3:95:40:14:ac:85:4f:3a:b7:0b:
59:03:44:0c:bb:96:d3:60:81:2a:ca:33:39:ef:9c:
3a:3e:3b:5c:1b:bf:46:e3:d7:ad:ab:4c:e1:b5:cd:
db:f7:59:ac:b8:b1:b0:0b:c3:96:63:21:95:0b:0d:
57:a0:0b:77:ce:db:a2:47:00:0b:0a:16:0b:33:65:
17:f9:84:cc:4e:8d:cf:e1:5e:66:8c:72:ad:50:3e:
7a:48:8d:e3:72:fe:67:23:da:11:89:4d:94:f3:69:
f5:4b:24:64:4f:21:ba:83:ef:ec:b5:c5:7c:a5:90:
0c:8e:ec:5e:dd:da:66:6e:8a:ff:e7:ab:8e:74:de:
44:8c:44:74:6f:91:98:07:2c:62:ad:9b:ff:b1:37:
9f:38:46:86:ef:37:68:86:e0:aa:66:06:f2:60:47:
fb:c2:ce:88:af:69:37:6e:d4:27:9c:e0:cb:3b:67:
a5:8f:68:f6:ea:5c:69:f8:13:e0:3a:86:33:84:5c:
3d:0d:04:7e:a6:09:fd:04:5c:db:7a:86:92:e1:4f:
48:d8:cb:2d:11:7a:8f:98:c2:af:41:0a:cf:a2:76:
e2:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:14:4F:86:5C:4A:61:17:4D:28:9B:2B:BD:49:47:17:C8:A0:AC:2F
X509v3 Authority Key Identifier:
keyid:4C:DD:69:73:49:3C:E0:C3:84:9B:8B:91:9B:75:02:BA:5F:A0:13:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TN1pc0k84MOEm4uRm3UCul-gE9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a35f7f-2194-46d3-91bd-cc0f50bda159/1/TN1pc0k84MOEm4uRm3UCul-gE9c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a35f7f-2194-46d3-91bd-cc0f50bda159/1/TN1pc0k84MOEm4uRm3UCul-gE9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:6e:35:a0:b4:cd:f5:d4:33:8e:18:47:28:f4:21:66:1b:2a:
c3:15:9b:8d:2c:32:a9:14:be:8d:7c:4b:83:76:ef:e0:d1:31:
9e:ab:9b:e9:1e:64:45:9b:74:40:f7:31:85:e0:83:71:43:96:
dc:99:3f:31:e7:72:2f:1d:16:84:b9:76:b9:20:01:f9:6c:78:
6c:ef:6f:de:7e:68:bd:55:47:31:b5:d2:77:d6:e2:0b:0d:c6:
dd:3d:73:44:ec:d9:c6:70:ac:dc:e5:79:7d:a1:11:05:d9:4e:
55:87:05:9f:a6:a8:a4:62:76:76:c7:39:2f:ca:5f:33:41:4c:
5b:a7:d4:ea:e5:23:b8:e3:c9:91:56:f6:0f:f8:40:23:f5:77:
71:6c:03:9e:61:c5:3f:97:28:05:66:32:6d:52:a0:f2:06:e2:
1d:a7:99:ab:31:0b:fe:c1:3a:c1:12:44:76:35:9e:3c:75:f9:
16:44:72:0d:7d:2d:08:0c:b8:3e:86:47:65:8f:ad:39:70:a4:
83:2c:65:52:b4:48:47:42:f3:32:b0:bd:b3:f8:ae:2b:70:19:
09:45:44:20:b5:71:75:bc:a4:01:c8:8d:28:c6:9c:f0:d6:12:
9c:0e:5f:f4:f6:99:8e:1b:62:e2:e2:d8:f0:ee:d5:92:2d:0b:
2b:36:cd:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:20:29 2025 by rpki-client