Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/tKkPaJZnhEKvruG6qqayot7KzTs.mft
File: tKkPaJZnhEKvruG6qqayot7KzTs.mft (raw, json)
Hash identifier: dEDfaDWaybt1wygrfWXHoAipU2CRCgVz4sXB44vPq8M=
Subject key identifier: 67:80:78:DF:1B:9A:8C:12:25:B6:03:6F:96:55:6A:5A:25:A4:78:8E
Authority key identifier: B4:A9:0F:68:96:67:84:42:AF:AE:E1:BA:AA:A6:B2:A2:DE:CA:CD:3B
Certificate issuer: /CN=b4a90f6896678442afaee1baaaa6b2a2decacd3b
Certificate serial: 01975FEF77DF9C17773957A0F8C3708F3A04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tKkPaJZnhEKvruG6qqayot7KzTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/tKkPaJZnhEKvruG6qqayot7KzTs.mft
Manifest number: 158D
Signing time: Wed 11 Jun 2025 17:00:18 +0000
Manifest this update: Wed 11 Jun 2025 17:00:18 +0000
Manifest next update: Thu 12 Jun 2025 17:00:18 +0000
Files and hashes: 1: 39ZjK9ko_rOoFQIzT57AAjvsCVs.roa (hash: BIzWpSHIVnRCyLi48qy1GipHxFT8YyuZOYnCzfTHwBQ=)
2: OazFtN4IiCarucNk5wRvdseM_QM.roa (hash: EMG8IwLgN/B9dcK6/rw77xxT/QPgwRqBDKE5biLAPVI=)
3: tKkPaJZnhEKvruG6qqayot7KzTs.crl (hash: HjP52YMmxEKY9cu0k7IT8iFSu893/n2zAYyze4ET35g=)
4: v1Ryzz_N409NzbmRAuen4MQjOWo.roa (hash: nCjeo/lqPblEWttxGqrN/iF+J58uOtYvtP5cDeaC0E8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/tKkPaJZnhEKvruG6qqayot7KzTs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/tKkPaJZnhEKvruG6qqayot7KzTs.mft
rsync://rpki.ripe.net/repository/DEFAULT/tKkPaJZnhEKvruG6qqayot7KzTs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 15:40:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5f:ef:77:df:9c:17:77:39:57:a0:f8:c3:70:8f:3a:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4a90f6896678442afaee1baaaa6b2a2decacd3b
Validity
Not Before: Jun 11 17:00:18 2025 GMT
Not After : Jun 12 17:00:18 2025 GMT
Subject: CN=678078df1b9a8c1225b6036f96556a5a25a4788e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b9:b6:b9:4c:19:a5:ba:91:ba:03:b2:34:a5:
9e:5b:e4:b1:4a:19:e7:b9:85:aa:80:11:73:41:c7:
2b:d3:b5:71:b2:c4:72:88:fa:81:d5:1f:15:a3:f3:
8f:67:94:43:83:3f:8c:6c:1a:a2:0d:bc:1d:8c:f1:
d6:18:e9:57:4d:30:ed:4b:f7:6e:a8:8d:a4:2f:87:
35:9b:79:e1:c1:15:b6:92:40:dc:13:a2:02:ab:9a:
d2:d1:f2:bf:14:cd:24:9c:a2:0b:de:77:1e:b8:13:
3f:34:32:7d:b3:43:ee:d3:a0:77:24:9e:8f:60:24:
c3:3d:05:de:39:e2:e0:4d:d2:c9:fc:b8:73:f5:57:
52:b9:87:d9:93:d3:b4:13:bb:20:ef:a9:3b:17:99:
b4:01:0a:88:0a:da:d4:99:de:57:62:3f:82:21:9d:
0d:0e:80:25:03:13:b2:2e:e2:1d:aa:d3:46:fb:25:
91:da:33:18:5c:60:37:18:7b:d7:ba:17:94:5f:08:
ef:8f:c4:34:b5:70:fa:b5:13:57:9d:1b:a6:99:f4:
5e:5d:6a:8b:f3:f9:4b:96:6a:02:43:be:c7:37:79:
a1:1d:9c:db:b1:43:24:a0:2d:0a:03:5e:fe:d9:a3:
bf:a7:ec:60:78:d7:a9:fc:0a:7f:c1:fa:3d:6d:9d:
6e:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:80:78:DF:1B:9A:8C:12:25:B6:03:6F:96:55:6A:5A:25:A4:78:8E
X509v3 Authority Key Identifier:
keyid:B4:A9:0F:68:96:67:84:42:AF:AE:E1:BA:AA:A6:B2:A2:DE:CA:CD:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tKkPaJZnhEKvruG6qqayot7KzTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/tKkPaJZnhEKvruG6qqayot7KzTs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/tKkPaJZnhEKvruG6qqayot7KzTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:2a:44:25:69:b3:68:73:3f:46:c5:d5:ce:6e:4d:71:87:e2:
95:01:1d:84:a9:fb:31:0f:e3:f4:2b:7e:d1:8a:a5:dc:55:f2:
8b:5e:fe:b2:f3:da:24:31:ad:af:5a:d6:97:0a:ca:f0:2e:20:
fe:a9:e0:b0:cd:36:3c:2e:9e:98:a8:b5:03:85:be:f3:f9:2d:
87:ee:4f:3f:3d:65:53:e9:d5:3a:0b:d7:57:e6:12:d2:1d:88:
f6:e6:4e:11:b6:2d:fe:f0:be:69:40:44:bb:16:b9:bc:e1:12:
32:b1:8f:47:66:82:0b:f2:2f:e7:e8:e6:10:68:85:72:bb:a0:
95:8f:64:6d:5a:5a:0f:38:9e:10:0b:e2:80:07:11:05:3a:c8:
4f:da:40:a2:f5:6e:30:8c:0a:b0:72:31:a4:2e:11:8d:d7:2c:
64:71:35:d5:89:b4:68:4c:17:7d:86:e7:5b:60:8d:ce:b5:a8:
64:2b:76:50:75:95:18:3e:fd:83:04:46:65:19:fc:56:06:58:
8e:b0:5f:d2:a7:91:92:be:6d:60:bb:29:f0:99:a2:66:ae:01:
95:90:85:1f:d3:be:e8:b9:d5:c0:f4:de:17:fa:50:2f:af:12:
62:35:f2:d9:2d:c4:7c:61:c0:4c:b7:6a:96:66:a3:b3:7c:8e:
20:54:37:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 23:08:47 2025 by rpki-client