Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/220b38-77ca-4de4-8b86-9f845c546470/1/TjbM4hQsoYtQWJcVjSblg50rQX8.mft
File: TjbM4hQsoYtQWJcVjSblg50rQX8.mft (raw, json)
Hash identifier: iXxVNdcBCKLWzQzLkxu6f0SMX6E2P8V+C23Y+bZDya0=
Subject key identifier: ED:13:41:9E:F1:10:A2:C5:4B:08:D3:E3:4B:EA:B0:39:54:C3:8D:E6
Authority key identifier: 4E:36:CC:E2:14:2C:A1:8B:50:58:97:15:8D:26:E5:83:9D:2B:41:7F
Certificate issuer: /CN=4e36cce2142ca18b505897158d26e5839d2b417f
Certificate serial: 0197B88EE357DFDE81D024D8916D2530564E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TjbM4hQsoYtQWJcVjSblg50rQX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/220b38-77ca-4de4-8b86-9f845c546470/1/TjbM4hQsoYtQWJcVjSblg50rQX8.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 22:01:01 +0000
Manifest this update: Sat 28 Jun 2025 22:01:01 +0000
Manifest next update: Sun 29 Jun 2025 22:01:01 +0000
Files and hashes: 1: TjbM4hQsoYtQWJcVjSblg50rQX8.crl (hash: 2qp61Di3Ds5xK4LCYfULh6wZel0NtmmpqZMPe6TzW8E=)
2: XbP44H3vmNpq_6C_0jvpv9umOf0.roa (hash: DcrY51YDFwazT333yz0LqnUGv8gSeHfRdQ2uMNMEV+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/220b38-77ca-4de4-8b86-9f845c546470/1/TjbM4hQsoYtQWJcVjSblg50rQX8.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/220b38-77ca-4de4-8b86-9f845c546470/1/TjbM4hQsoYtQWJcVjSblg50rQX8.mft
rsync://rpki.ripe.net/repository/DEFAULT/TjbM4hQsoYtQWJcVjSblg50rQX8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8e:e3:57:df:de:81:d0:24:d8:91:6d:25:30:56:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e36cce2142ca18b505897158d26e5839d2b417f
Validity
Not Before: Jun 28 22:01:01 2025 GMT
Not After : Jun 29 22:01:01 2025 GMT
Subject: CN=ed13419ef110a2c54b08d3e34beab03954c38de6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:43:89:bc:d5:5c:3f:a8:c0:c7:3b:ab:75:70:
a7:06:99:64:8e:d1:52:17:b2:ba:68:83:6c:32:46:
e4:1f:45:05:5c:fd:57:e3:c7:59:ae:13:84:a2:ef:
00:3f:52:c3:39:5a:7a:ae:1e:bd:d2:ea:78:b3:37:
d0:4f:91:96:66:16:85:cc:1c:4e:83:95:0c:88:80:
32:9e:99:f8:eb:4a:57:4a:2d:b5:b4:44:3a:3c:f3:
cb:68:16:2b:c5:55:5d:b4:09:67:f8:8b:b1:11:6a:
1e:d4:c2:6d:a5:75:b0:21:80:75:03:64:cd:77:5d:
f9:62:ad:16:f7:bf:99:ad:25:23:90:f4:de:a3:7b:
88:0e:72:80:58:11:e1:91:af:68:96:48:c9:9d:dd:
d4:62:34:84:9d:3f:fe:3e:12:ff:8a:49:4f:63:86:
c7:f6:dc:6d:e0:68:d7:10:a9:02:7d:07:b5:5a:70:
45:f7:b6:43:bf:4d:17:1f:01:c6:58:b8:7c:bc:a9:
92:a3:1b:1d:a8:f1:45:b7:a5:c3:d9:10:d1:f8:a6:
7c:ee:9e:dd:77:23:c4:09:90:4c:0e:27:76:84:d4:
d9:fd:4c:f6:71:84:aa:e7:c4:f4:8d:de:be:7d:43:
f1:59:2f:2d:bc:19:0b:6e:9f:26:97:a9:6d:52:98:
36:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:13:41:9E:F1:10:A2:C5:4B:08:D3:E3:4B:EA:B0:39:54:C3:8D:E6
X509v3 Authority Key Identifier:
keyid:4E:36:CC:E2:14:2C:A1:8B:50:58:97:15:8D:26:E5:83:9D:2B:41:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TjbM4hQsoYtQWJcVjSblg50rQX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/220b38-77ca-4de4-8b86-9f845c546470/1/TjbM4hQsoYtQWJcVjSblg50rQX8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/220b38-77ca-4de4-8b86-9f845c546470/1/TjbM4hQsoYtQWJcVjSblg50rQX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:15:a9:aa:10:61:94:92:b0:3c:b3:cb:c4:55:2a:c0:ee:4f:
3e:4f:a6:16:e4:f3:7a:31:bf:7e:ec:8d:ba:c1:78:e8:e3:ae:
a5:7a:e7:23:a3:96:bd:2d:15:30:1e:b5:c9:81:98:eb:6a:ec:
14:be:71:9f:a3:11:29:4f:60:58:97:be:44:e5:68:ac:89:12:
69:86:d7:00:83:2a:16:00:38:f6:11:f4:e9:0d:f1:21:37:4e:
a6:5a:5d:8b:e4:a3:39:aa:9c:36:b1:4b:5e:0c:33:cf:50:ca:
52:ca:b5:4a:d6:b8:19:83:22:38:3e:4d:db:00:09:bd:e7:cf:
2b:de:1a:40:db:75:88:a9:e0:57:ae:45:2b:ed:2e:77:92:55:
dc:84:eb:f4:8c:f3:02:b9:f4:64:dc:9a:66:1e:88:97:4b:d2:
98:00:f3:e1:de:97:7b:bc:cb:3e:f2:aa:a2:c3:3d:e8:74:7f:
30:f9:5a:93:f8:2d:9c:75:1e:fb:0a:bf:40:c8:97:14:9b:e0:
a1:aa:1b:10:a2:a3:4a:46:b4:db:aa:50:7a:da:6e:a2:e4:4f:
fb:b7:44:05:21:e9:69:0a:3e:8e:dc:cd:bb:42:d2:98:ab:f7:
34:1f:a7:60:60:16:e1:0b:34:e8:37:78:df:1a:bc:bd:bb:ea:
a1:14:40:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:36:01 2025 by rpki-client