Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/4e897f-e435-4715-a3c5-85be425d3199/1/ts9OV8vBXOTs70T1DluFkvvu7qA.mft
File: ts9OV8vBXOTs70T1DluFkvvu7qA.mft (raw, json)
Hash identifier: duA+E3HXUptLdi9pZNv7Eo+AYapFmKOuL44tttPRCxA=
Subject key identifier: 72:0C:5B:92:FF:74:A2:D9:80:20:8A:7B:0B:5E:00:3E:6E:53:31:89
Authority key identifier: B6:CF:4E:57:CB:C1:5C:E4:EC:EF:44:F5:0E:5B:85:92:FB:EE:EE:A0
Certificate issuer: /CN=b6cf4e57cbc15ce4ecef44f50e5b8592fbeeeea0
Certificate serial: 0197BE90C2BEDDC1ADB13E6C73E78CCADF65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ts9OV8vBXOTs70T1DluFkvvu7qA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/4e897f-e435-4715-a3c5-85be425d3199/1/ts9OV8vBXOTs70T1DluFkvvu7qA.mft
Manifest number: 0D72
Signing time: Mon 30 Jun 2025 02:00:47 +0000
Manifest this update: Mon 30 Jun 2025 02:00:47 +0000
Manifest next update: Tue 01 Jul 2025 02:00:47 +0000
Files and hashes: 1: 2bbjZnItd_WfSUsxeSim-v-qB-g.roa (hash: U3T6Blvywe2N+XOmN4d0Sfw2WTnfp19mqzXdb2WW/M8=)
2: hs7awmW5u-N7i3rafiPiNllc2Bo.roa (hash: zx9QQVE6GtEBw9ZKQW610wAAxlFBO5GbObUYOTrSVsA=)
3: ts9OV8vBXOTs70T1DluFkvvu7qA.crl (hash: LiAgIRhGvr6hO5VB9n0s3kgehlgXBVXnSrRrS96RY84=)
4: ucQNwDwE2vdn8aT5NeBfcaMP4xI.roa (hash: uOUVs3Rq9AKXwjmauSrDsTRXthAY0OABda9jaa1tn6Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/4e897f-e435-4715-a3c5-85be425d3199/1/ts9OV8vBXOTs70T1DluFkvvu7qA.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/4e897f-e435-4715-a3c5-85be425d3199/1/ts9OV8vBXOTs70T1DluFkvvu7qA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ts9OV8vBXOTs70T1DluFkvvu7qA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 02:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:be:90:c2:be:dd:c1:ad:b1:3e:6c:73:e7:8c:ca:df:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6cf4e57cbc15ce4ecef44f50e5b8592fbeeeea0
Validity
Not Before: Jun 30 02:00:47 2025 GMT
Not After : Jul 1 02:00:47 2025 GMT
Subject: CN=720c5b92ff74a2d980208a7b0b5e003e6e533189
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:03:d0:88:68:80:ca:97:13:58:b6:e7:df:27:
b3:9d:42:4e:ea:b5:5a:3b:48:3b:1d:4f:38:09:62:
e5:7e:c7:e7:de:b8:a3:0e:ac:c3:f1:8f:b4:5d:b5:
77:fd:e8:18:51:42:55:7b:32:60:47:e6:5b:a6:b4:
c2:16:8c:a7:84:90:de:48:ad:27:1b:bb:ae:e4:b6:
b3:e9:3b:00:51:39:92:dc:92:3a:71:0b:71:24:3a:
e8:ad:df:d4:09:e1:1d:fd:e2:14:76:c4:c4:6a:3b:
d1:58:19:3d:41:5c:4e:ef:06:a6:6d:c0:50:f6:23:
06:1d:02:98:99:e8:e0:1b:1c:49:5e:f1:d0:8c:ef:
15:1f:a8:7c:aa:8d:d5:43:fb:20:58:19:fa:f8:4f:
c8:8f:57:bc:63:ee:40:e2:75:2e:82:cd:89:63:c4:
ee:20:84:b9:26:c5:9c:ac:0c:39:eb:d9:1d:09:57:
f3:5e:2f:1c:22:76:c5:a6:2d:59:0b:e6:83:da:fa:
4d:59:c2:50:b2:95:ef:b5:cc:f7:bf:22:df:c5:b8:
6b:72:b6:b5:8d:39:b3:be:33:23:e5:c4:28:99:ef:
b9:dc:92:8f:c2:3a:da:3a:a5:5f:19:06:f6:6a:2c:
cd:ff:c4:49:61:a8:ea:33:3c:9c:bb:a6:08:fd:a8:
9b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:0C:5B:92:FF:74:A2:D9:80:20:8A:7B:0B:5E:00:3E:6E:53:31:89
X509v3 Authority Key Identifier:
keyid:B6:CF:4E:57:CB:C1:5C:E4:EC:EF:44:F5:0E:5B:85:92:FB:EE:EE:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ts9OV8vBXOTs70T1DluFkvvu7qA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/4e897f-e435-4715-a3c5-85be425d3199/1/ts9OV8vBXOTs70T1DluFkvvu7qA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/4e897f-e435-4715-a3c5-85be425d3199/1/ts9OV8vBXOTs70T1DluFkvvu7qA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:ca:3b:c7:e4:c2:68:fe:ea:70:3f:0f:32:ae:c9:d0:b5:bd:
e9:9d:33:49:ec:1c:c7:37:8c:95:a8:b9:38:00:c5:46:49:7d:
40:47:b6:9b:82:5c:2a:5b:28:11:b6:d8:11:8e:11:e2:c0:af:
8a:b0:90:d2:e8:a7:81:84:4f:81:ca:37:2b:d1:34:ca:2b:fe:
90:af:15:25:55:22:bf:ec:3e:d5:f7:e0:08:90:69:5a:50:06:
d9:16:33:30:69:31:1b:34:8f:c0:3c:ee:97:82:11:e0:7f:ca:
83:7d:e8:7f:4c:64:5a:de:b2:4b:91:84:35:e8:14:62:90:c2:
e8:4b:e3:06:85:3b:2e:b6:10:89:9e:f3:fc:e9:83:fd:9c:b6:
0f:8e:c6:f5:95:05:7c:0f:66:bb:99:04:89:24:43:12:86:b9:
30:de:0d:23:ca:47:f6:40:2a:28:f3:ea:c3:09:7e:e8:20:ca:
9f:33:00:3f:df:7a:60:89:79:11:b2:a9:11:01:49:92:30:8b:
de:31:91:de:25:d8:ad:17:e5:d8:02:f3:e2:58:69:99:5c:44:
84:33:77:47:7d:99:34:5b:48:a3:6b:9c:40:d7:f6:6d:c1:49:
f4:28:c0:3e:36:13:4e:45:dd:c4:a8:09:42:26:4f:07:b6:b5:
d4:96:02:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 09:58:02 2025 by rpki-client