Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/3e3d08-e4c5-4f3d-be01-450ad55d325a/1/tpHQC9tiauVzB9XNTord2UdWgLM.mft
File: tpHQC9tiauVzB9XNTord2UdWgLM.mft (raw, json)
Hash identifier: Vd1P9iPfsqpmCcGUkntPHXFzKnwEyM5n1RXxUJiG2Zw=
Subject key identifier: 19:CB:74:4B:44:1B:5D:69:0B:3E:70:FB:8C:B0:0E:53:AB:19:BA:76
Authority key identifier: B6:91:D0:0B:DB:62:6A:E5:73:07:D5:CD:4E:8A:DD:D9:47:56:80:B3
Certificate issuer: /CN=b691d00bdb626ae57307d5cd4e8addd9475680b3
Certificate serial: 0197B96B45AC86879C504C4686094239E0DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tpHQC9tiauVzB9XNTord2UdWgLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/3e3d08-e4c5-4f3d-be01-450ad55d325a/1/tpHQC9tiauVzB9XNTord2UdWgLM.mft
Manifest number: 0E8A
Signing time: Sun 29 Jun 2025 02:01:44 +0000
Manifest this update: Sun 29 Jun 2025 02:01:44 +0000
Manifest next update: Mon 30 Jun 2025 02:01:44 +0000
Files and hashes: 1: AQvnwjdpCCJVGghqg0nwe9L0mVk.roa (hash: lmMkrxQHgFH9/tCkdiNxxBNSfZZ+AeKUjyZG6YnOW/4=)
2: tpHQC9tiauVzB9XNTord2UdWgLM.crl (hash: hnaY+6DdnA43tpq5Tlkkszobjr8ShZTwULpGr1PztDU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/3e3d08-e4c5-4f3d-be01-450ad55d325a/1/tpHQC9tiauVzB9XNTord2UdWgLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/3e3d08-e4c5-4f3d-be01-450ad55d325a/1/tpHQC9tiauVzB9XNTord2UdWgLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/tpHQC9tiauVzB9XNTord2UdWgLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:6b:45:ac:86:87:9c:50:4c:46:86:09:42:39:e0:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b691d00bdb626ae57307d5cd4e8addd9475680b3
Validity
Not Before: Jun 29 02:01:44 2025 GMT
Not After : Jun 30 02:01:44 2025 GMT
Subject: CN=19cb744b441b5d690b3e70fb8cb00e53ab19ba76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:40:f1:2c:7d:23:b7:05:82:2e:6f:89:8d:c4:
e1:e7:d3:bc:63:8c:77:28:9d:b1:f8:d4:e9:b1:10:
75:56:0f:40:1a:17:f7:3e:5d:d0:5f:37:6b:88:da:
96:53:a8:26:21:fb:8a:d3:44:93:5f:59:65:bf:3a:
79:da:8e:b0:97:7e:60:d8:d2:19:05:8c:b6:ff:3f:
e7:4e:a3:6f:4d:e4:68:22:b4:3f:d8:92:76:58:b8:
4f:98:4d:dc:70:dc:c6:50:fe:70:85:3c:7b:29:b6:
93:bb:2e:4d:70:4c:11:ca:e5:44:27:7c:9e:c2:c4:
2f:1d:a7:e7:98:a4:f9:4a:8a:eb:b9:93:08:c0:e5:
03:c1:3f:75:75:7b:8f:fb:25:b2:1c:8e:6f:b2:08:
6b:62:92:b8:09:a4:a5:60:a0:3c:8b:e6:58:5b:69:
91:52:3c:3d:7c:60:51:80:d5:84:35:a4:85:40:83:
ac:3a:88:1d:35:f8:bf:db:9d:71:75:9f:58:ff:f8:
05:2c:ba:91:a5:6a:61:e6:19:55:d7:ec:0d:c6:49:
08:5a:db:26:d2:32:7a:a9:f5:11:c3:78:6e:40:2b:
95:b0:22:9f:9e:79:18:87:dd:8f:52:84:bf:8f:a4:
88:bd:13:01:72:6d:e7:1f:52:fb:b2:57:6e:14:30:
63:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:CB:74:4B:44:1B:5D:69:0B:3E:70:FB:8C:B0:0E:53:AB:19:BA:76
X509v3 Authority Key Identifier:
keyid:B6:91:D0:0B:DB:62:6A:E5:73:07:D5:CD:4E:8A:DD:D9:47:56:80:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tpHQC9tiauVzB9XNTord2UdWgLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3e3d08-e4c5-4f3d-be01-450ad55d325a/1/tpHQC9tiauVzB9XNTord2UdWgLM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3e3d08-e4c5-4f3d-be01-450ad55d325a/1/tpHQC9tiauVzB9XNTord2UdWgLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:68:33:f0:7e:33:45:fc:47:ff:c1:0f:d0:ad:9d:7d:61:e1:
d7:eb:aa:bb:92:8f:91:7f:19:e1:51:44:ca:a9:5d:11:e7:3d:
11:3d:62:20:db:f7:be:7a:4e:87:05:3a:c2:6d:1d:9d:2e:52:
33:2a:e3:84:7e:1b:4e:9e:ca:87:fb:06:4f:e5:7a:f6:e3:d1:
a9:45:ad:11:46:bf:65:ba:59:ca:6b:a0:7f:de:a4:05:76:c7:
36:54:c7:eb:75:b2:7d:9b:58:a9:b4:70:50:a8:2e:c5:b8:3d:
95:be:ee:9e:c2:1d:4f:54:e6:69:54:fe:54:18:a5:ec:f1:15:
21:31:e0:2c:eb:dd:2a:74:74:08:78:c6:82:3b:2b:03:d1:15:
14:0f:12:b1:a8:95:0f:dd:41:53:3a:b7:9a:24:ea:c1:23:2b:
0e:c2:f9:b3:a3:0a:5e:67:73:46:46:0c:50:46:60:4d:c1:aa:
e6:91:bd:f5:6b:46:55:1e:46:a4:be:bc:d0:78:14:f1:fc:c2:
0b:e1:2a:a9:e8:9b:b9:0d:d8:39:e9:19:b9:0b:d1:f6:c2:77:
68:7d:6d:e8:ba:13:07:6e:2a:76:fa:b3:33:1b:e5:42:d1:94:
1c:d8:34:36:35:0b:d2:b2:e3:4d:47:e1:9c:e3:74:f1:e0:45:
18:b2:05:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:20:21 2025 by rpki-client