Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TIEnPcsDw0V7eSUL4Qnhml508P0.mft
File: TIEnPcsDw0V7eSUL4Qnhml508P0.mft (raw, json)
Hash identifier: 6BHjsroYzAZyi+uE+nnIIYa/+9/sE75kwLZr3JZAi6k=
Subject key identifier: 19:23:EF:93:51:E2:C8:7A:6B:CA:7E:16:D3:70:25:EF:BF:1D:51:90
Authority key identifier: 4C:81:27:3D:CB:03:C3:45:7B:79:25:0B:E1:09:E1:9A:5E:74:F0:FD
Certificate issuer: /CN=4c81273dcb03c3457b79250be109e19a5e74f0fd
Certificate serial: 0197B70EAA0E771374EED346F8B64CD812C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TIEnPcsDw0V7eSUL4Qnhml508P0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TIEnPcsDw0V7eSUL4Qnhml508P0.mft
Manifest number: 07AF
Signing time: Sat 28 Jun 2025 15:01:20 +0000
Manifest this update: Sat 28 Jun 2025 15:01:20 +0000
Manifest next update: Sun 29 Jun 2025 15:01:20 +0000
Files and hashes: 1: 09h3HegSzHCmBBBWGcTWBjEqm-k.roa (hash: e2MlTegDWzHw8Qc0vpcn4p75pDoA+fAb45rhwd6sZ2c=)
2: 2H-bW8UZI3iJgi7-SD7ICzn-6yE.roa (hash: 6BFAD/kuUp8ggYQ5Z6VEt8Ffgu906xvZpM65LYf/A40=)
3: Nrmj7OZr3VRqV-mPGEt59p2belk.roa (hash: qKP+VMvb5X+LyJaWae51YmN4HE54Q3kw6hy8LaIxSiU=)
4: TIEnPcsDw0V7eSUL4Qnhml508P0.crl (hash: 8CGKtCC9R5Ggk/c/uy1PvGCfoi891ac4kfEvpNXfsLc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TIEnPcsDw0V7eSUL4Qnhml508P0.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TIEnPcsDw0V7eSUL4Qnhml508P0.mft
rsync://rpki.ripe.net/repository/DEFAULT/TIEnPcsDw0V7eSUL4Qnhml508P0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:aa:0e:77:13:74:ee:d3:46:f8:b6:4c:d8:12:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c81273dcb03c3457b79250be109e19a5e74f0fd
Validity
Not Before: Jun 28 15:01:20 2025 GMT
Not After : Jun 29 15:01:20 2025 GMT
Subject: CN=1923ef9351e2c87a6bca7e16d37025efbf1d5190
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:40:e3:56:08:a6:40:f3:1d:56:0f:11:3f:7b:
fa:6e:49:de:22:f9:af:84:e0:bd:11:3a:27:c4:db:
67:3d:10:cb:da:dd:30:5d:31:a7:27:81:74:76:60:
c8:0c:5e:59:4d:b1:fd:dd:1d:75:5a:d9:a6:78:7d:
16:1b:ff:26:91:23:01:47:4d:ea:57:61:ef:86:c0:
6d:06:ef:a9:d2:ed:0b:20:e7:90:34:f1:e5:b4:90:
f3:4d:7a:2a:cb:b9:66:23:7b:c5:9b:da:6a:f5:a3:
18:2c:fc:c6:15:23:bd:61:8b:f7:21:0a:21:f8:e6:
9b:65:bf:4a:2d:e0:76:fb:c3:eb:1e:21:73:1e:14:
6f:85:6d:61:de:a5:63:45:3c:fc:f8:f4:d1:bc:03:
be:0c:07:52:39:29:d8:e5:32:0b:80:61:35:4f:3d:
82:91:d9:c6:8f:8c:15:71:d6:42:e3:10:5b:b5:d5:
13:c8:a3:26:e1:e2:25:b7:8c:2c:c7:01:9d:66:ec:
4c:ee:3e:eb:0f:de:b9:52:27:76:fb:a4:1d:f4:d8:
cc:d3:5b:0d:5c:36:96:9f:95:0b:65:c0:88:84:a8:
02:c3:af:73:00:26:ef:5f:8f:b7:b1:5d:23:24:64:
45:62:4c:ea:0d:cb:fe:d8:01:52:8c:e3:c7:7a:8e:
67:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:23:EF:93:51:E2:C8:7A:6B:CA:7E:16:D3:70:25:EF:BF:1D:51:90
X509v3 Authority Key Identifier:
keyid:4C:81:27:3D:CB:03:C3:45:7B:79:25:0B:E1:09:E1:9A:5E:74:F0:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TIEnPcsDw0V7eSUL4Qnhml508P0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TIEnPcsDw0V7eSUL4Qnhml508P0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TIEnPcsDw0V7eSUL4Qnhml508P0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:b5:9e:b7:c6:a3:ca:b0:52:ca:78:5d:0e:04:00:ef:f7:2e:
89:5a:a7:87:af:63:a8:85:86:cd:2e:e7:9a:22:a7:a5:1a:41:
ce:c7:1b:07:37:84:5d:9a:92:8d:6e:6e:8c:a0:ea:4a:66:96:
05:02:3c:55:cc:1b:c0:70:40:2a:91:ac:de:c9:39:16:83:c4:
4c:67:86:d2:7b:27:bb:00:87:2a:af:d0:1d:77:20:45:25:99:
ea:d1:63:80:ce:04:e4:22:ee:fa:85:8a:53:a2:a5:30:55:51:
6b:e5:fb:eb:81:41:58:20:ed:58:2c:9e:57:50:a0:c3:0e:dd:
6f:17:2f:c2:4f:7c:2f:49:fd:15:49:5e:c7:55:1b:f7:b3:bb:
3f:66:d0:76:32:7e:00:28:30:49:de:a2:10:33:88:5e:5c:51:
2c:06:79:e2:70:12:f4:4f:46:ea:6a:31:4d:b1:9d:c7:5c:56:
f0:1a:9b:44:3f:89:ca:1c:05:6f:dc:4e:5e:0b:08:17:33:d1:
1d:b7:3f:33:4d:13:07:06:9f:4a:df:67:0f:87:e2:30:d4:b2:
41:66:1b:72:bd:1d:26:ab:31:48:20:72:82:cb:2e:b0:c5:e8:
7f:ab:e8:03:b8:3b:10:52:22:8f:cb:87:f0:78:c5:36:cd:85:
fe:93:de:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:17:11 2025 by rpki-client