Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/259418-5e74-4df0-82a0-f9e75308754f/1/tmlTqin4JZqgLBImpGzgnt1Fzp0.mft
File: tmlTqin4JZqgLBImpGzgnt1Fzp0.mft (raw, json)
Hash identifier: Mh7weEkU9MZHW4+BLinP8COAK5KoA0tAIbHp5Tm4Fdo=
Subject key identifier: 99:29:10:15:DE:7A:48:89:F9:FE:40:9A:0A:18:58:1A:DA:C6:41:7C
Authority key identifier: B6:69:53:AA:29:F8:25:9A:A0:2C:12:26:A4:6C:E0:9E:DD:45:CE:9D
Certificate issuer: /CN=b66953aa29f8259aa02c1226a46ce09edd45ce9d
Certificate serial: 0197635F0639E7C5E927373F3F8057E27897
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tmlTqin4JZqgLBImpGzgnt1Fzp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/259418-5e74-4df0-82a0-f9e75308754f/1/tmlTqin4JZqgLBImpGzgnt1Fzp0.mft
Manifest number: 3F
Signing time: Thu 12 Jun 2025 09:01:01 +0000
Manifest this update: Thu 12 Jun 2025 09:01:01 +0000
Manifest next update: Fri 13 Jun 2025 09:01:01 +0000
Files and hashes: 1: pqvRnrkHquypsw02knASEmaM8CA.roa (hash: iRr4/5L2X3HFedqB9qSGokTGPgu0NihU0rX3BfoQgdM=)
2: tmlTqin4JZqgLBImpGzgnt1Fzp0.crl (hash: 8FhYCRZ+mDqQo41ESFIU7X3NpMu0JzbmZxVtkWnzyGM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/259418-5e74-4df0-82a0-f9e75308754f/1/tmlTqin4JZqgLBImpGzgnt1Fzp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/259418-5e74-4df0-82a0-f9e75308754f/1/tmlTqin4JZqgLBImpGzgnt1Fzp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/tmlTqin4JZqgLBImpGzgnt1Fzp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:63:5f:06:39:e7:c5:e9:27:37:3f:3f:80:57:e2:78:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b66953aa29f8259aa02c1226a46ce09edd45ce9d
Validity
Not Before: Jun 12 09:01:01 2025 GMT
Not After : Jun 13 09:01:01 2025 GMT
Subject: CN=99291015de7a4889f9fe409a0a18581adac6417c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:8d:f4:05:fd:03:bd:1b:27:2f:11:4d:02:1a:
d3:30:ca:3f:7d:5b:bb:01:78:20:a3:dd:b2:1e:3c:
5b:ab:d8:b8:53:22:19:a3:87:c2:53:3e:86:da:8b:
93:d0:56:f3:3d:7e:73:21:00:43:78:ad:60:15:b4:
8d:84:40:45:b1:fa:b2:92:d9:23:bd:22:5f:2a:1d:
b8:8d:d6:fc:c5:be:3b:ae:fe:1f:cd:5e:23:5a:3d:
71:f6:cf:db:f5:b4:88:e7:81:7f:e8:b4:d5:3b:cd:
02:c7:bb:57:4d:ac:31:36:3d:2d:07:e3:79:04:3d:
fd:22:72:29:86:6e:ab:fc:de:1f:69:3e:10:a0:48:
43:c7:2d:94:3b:fd:00:43:a3:91:c2:da:0a:80:1f:
cc:07:97:9a:40:4f:27:c1:a1:f5:4b:74:2b:77:83:
7d:07:0f:10:7b:6a:38:03:b9:55:9b:5b:ab:78:57:
1c:24:3b:cd:37:07:97:21:e0:b8:f7:cd:14:e2:f2:
45:2b:3c:86:37:49:09:a8:40:ea:45:55:44:a8:c8:
e6:d4:0e:7e:19:02:ad:7c:15:80:d1:57:18:bb:74:
4d:2a:a5:5a:ef:e3:09:b5:a2:ac:38:24:86:d3:0c:
94:da:5d:09:8a:ff:5d:43:6f:a6:79:4b:68:b6:f4:
fe:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:29:10:15:DE:7A:48:89:F9:FE:40:9A:0A:18:58:1A:DA:C6:41:7C
X509v3 Authority Key Identifier:
keyid:B6:69:53:AA:29:F8:25:9A:A0:2C:12:26:A4:6C:E0:9E:DD:45:CE:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tmlTqin4JZqgLBImpGzgnt1Fzp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/259418-5e74-4df0-82a0-f9e75308754f/1/tmlTqin4JZqgLBImpGzgnt1Fzp0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/259418-5e74-4df0-82a0-f9e75308754f/1/tmlTqin4JZqgLBImpGzgnt1Fzp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:5e:5b:d5:d0:a0:2e:50:74:cf:eb:ae:be:9a:c8:24:62:be:
32:d0:f1:a6:5c:c0:32:20:df:b6:6e:fc:ef:4f:52:bd:74:f7:
63:0b:21:9f:83:34:b8:d9:36:24:85:8e:57:77:96:94:4d:01:
fc:8f:01:8a:f7:e7:cd:2d:91:49:b3:f7:db:2c:50:59:b2:59:
f0:05:1f:ed:7f:a9:0d:8b:05:8b:f5:e0:a2:67:d6:db:c0:cc:
2e:ba:23:57:32:9a:2c:9e:75:7f:41:43:6c:cc:60:f7:01:46:
60:e9:15:68:7a:3f:43:d1:88:1a:09:39:d3:c2:72:c1:63:38:
4c:e5:3b:5f:22:0f:12:94:47:f7:b3:b1:35:00:7e:aa:77:0a:
a1:c6:2b:ec:87:39:15:24:38:09:22:d0:1d:af:db:4a:67:2e:
99:05:d4:41:44:5a:ad:f8:cf:57:b2:71:98:ee:05:2e:97:56:
0d:fe:6f:45:6f:5e:aa:ce:36:5d:d4:79:bd:30:ce:1d:df:61:
62:48:2a:11:a6:29:5f:f9:06:44:2b:cf:8e:42:09:fe:22:9f:
67:a8:df:1f:4f:31:bd:53:66:32:5c:28:ce:e5:e7:cf:35:71:
1f:6b:95:d4:2a:65:a4:c9:92:4c:2d:b6:6b:4f:46:d4:22:e6:
09:ed:2b:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 11:12:03 2025 by rpki-client