Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/tJvYTaF5l8uyhq-QIqsuBboItEI.mft
File: tJvYTaF5l8uyhq-QIqsuBboItEI.mft (raw, json)
Hash identifier: CBEDPHF29bxWXa3Tn+TcBx8uQP/l2PCgG7EIJ1m1ThQ=
Subject key identifier: A1:3E:9C:DE:90:6C:4E:E3:62:F0:17:9A:00:08:3E:A7:8A:35:EA:FE
Authority key identifier: B4:9B:D8:4D:A1:79:97:CB:B2:86:AF:90:22:AB:2E:05:BA:08:B4:42
Certificate issuer: /CN=b49bd84da17997cbb286af9022ab2e05ba08b442
Certificate serial: 0197B7B37041F98E38E8CEBA3741CE82C9CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tJvYTaF5l8uyhq-QIqsuBboItEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/tJvYTaF5l8uyhq-QIqsuBboItEI.mft
Manifest number: 1115
Signing time: Sat 28 Jun 2025 18:01:19 +0000
Manifest this update: Sat 28 Jun 2025 18:01:19 +0000
Manifest next update: Sun 29 Jun 2025 18:01:19 +0000
Files and hashes: 1: 1-PqW8UmiSaov5LQilBVWMK5ZalY.roa (hash: TOVF5pxyQFktaD7ChGQ0pQzpTOW/D5b1AiH6KqbdxuQ=)
2: ZKaLH1RF9q1E6524_CLGwNAeKPU.roa (hash: NYm5o8T+AXl6BoN5iWRobD4OTRMc9uAM7u/9BRILK/4=)
3: ha1PymC_B_zTg0OwXLf43i7WRKI.roa (hash: z4Cqq5RFMdzMGYB6DSPs12v+LmKU0agJDhruZGZUpmY=)
4: tJvYTaF5l8uyhq-QIqsuBboItEI.crl (hash: sZdGw8f5PYPKRBMAgK9tZAuopWAvAkmg/A6rTJdMWkQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/tJvYTaF5l8uyhq-QIqsuBboItEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/tJvYTaF5l8uyhq-QIqsuBboItEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tJvYTaF5l8uyhq-QIqsuBboItEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:70:41:f9:8e:38:e8:ce:ba:37:41:ce:82:c9:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b49bd84da17997cbb286af9022ab2e05ba08b442
Validity
Not Before: Jun 28 18:01:19 2025 GMT
Not After : Jun 29 18:01:19 2025 GMT
Subject: CN=a13e9cde906c4ee362f0179a00083ea78a35eafe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:4b:a1:f4:eb:17:0c:49:51:87:73:b7:79:7f:
7e:86:94:62:b8:2c:f3:e9:db:35:ff:7a:e4:f2:01:
db:c5:03:cb:ce:98:93:ae:c0:93:03:71:62:00:2a:
c3:33:f7:b7:09:cf:fb:6e:2d:fd:4c:fa:ae:be:ca:
bc:3a:f9:2b:7d:1a:c0:92:18:f9:fc:63:9c:e2:9f:
76:7a:8f:22:c9:27:6a:01:02:f9:d1:b6:15:d0:2c:
0b:be:79:0b:0f:aa:64:f9:9f:8a:fe:80:83:91:fe:
13:8c:14:d5:bd:65:90:f2:08:67:8c:0b:36:b3:72:
ad:4c:67:9b:70:1c:7b:da:a0:f7:2a:b2:bb:ee:93:
be:9d:6c:62:e7:46:0d:40:92:64:f9:f4:37:36:2c:
ae:dc:ff:47:5e:1c:c4:a4:c1:27:93:cb:bd:c3:5e:
51:82:23:5c:b2:75:a5:e5:12:03:64:a0:1f:5a:f8:
ef:5f:ff:d0:6e:6d:c4:f5:32:88:e5:0e:2b:18:59:
8a:95:5a:13:a3:16:8f:fb:f6:b3:3a:57:69:74:48:
10:b4:9a:8d:2b:c7:59:c7:f7:7e:56:d0:f9:a3:e3:
72:f0:44:c9:c4:7c:7f:8c:7f:51:42:48:45:9f:44:
11:fe:51:45:23:4d:9f:98:d0:cb:89:3d:60:12:bb:
32:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:3E:9C:DE:90:6C:4E:E3:62:F0:17:9A:00:08:3E:A7:8A:35:EA:FE
X509v3 Authority Key Identifier:
keyid:B4:9B:D8:4D:A1:79:97:CB:B2:86:AF:90:22:AB:2E:05:BA:08:B4:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tJvYTaF5l8uyhq-QIqsuBboItEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/tJvYTaF5l8uyhq-QIqsuBboItEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/tJvYTaF5l8uyhq-QIqsuBboItEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:c2:f4:90:42:fb:26:3a:30:21:3a:59:b1:e0:14:d7:f5:e3:
74:52:90:d9:a6:28:cf:7f:cf:44:39:e4:ce:4b:87:59:c7:6d:
69:3b:8a:15:b0:32:39:6e:18:d7:2f:68:4e:f1:05:ac:01:14:
ef:10:0e:d6:d8:c8:5f:85:45:15:4b:0a:da:5d:73:90:6b:78:
5a:ff:56:9c:14:12:b6:4d:02:78:0e:34:71:b0:04:6c:ce:bb:
b2:07:a3:d5:3b:2e:61:c5:b1:5a:65:55:10:84:c7:28:40:3b:
9c:20:01:f0:bb:78:9a:d2:15:6b:a9:d0:31:41:ba:a8:51:13:
9e:67:72:b3:1d:19:92:fe:48:e5:6e:f5:fc:31:1c:dc:6d:d9:
4f:dc:b7:38:bb:f8:9a:cd:ba:af:c0:f6:4d:18:2d:fd:25:6b:
65:64:4c:9f:6a:9f:a6:99:00:98:e5:bd:ff:bb:3c:12:59:e1:
99:e4:ee:86:7c:41:55:54:50:1c:b1:e7:90:1f:e7:1a:6f:bd:
2e:8a:52:6f:4d:59:9e:6d:54:6c:eb:54:91:31:ce:59:73:f8:
05:81:db:ae:ca:f5:3c:01:61:25:08:5b:12:ac:83:6f:71:9b:
4e:55:30:8b:05:4d:72:09:6b:bd:db:98:59:5c:08:3f:c5:7e:
48:7d:71:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:25:03 2025 by rpki-client