
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/264934-2a7f-428b-afe5-81d214edf298/1/tN1tZY4UVx6Dn3gT2jHyIXQigY4.mft
File: tN1tZY4UVx6Dn3gT2jHyIXQigY4.mft (raw, json)
Hash identifier: 30o1zNbnzn5mYJeM6KTm8kMeNH94Im6Q3v15VnmTnGg=
Subject key identifier: 50:CC:39:1D:BE:01:50:EE:E8:74:CF:0A:53:A9:A8:06:4B:D6:58:AE
Authority key identifier: B4:DD:6D:65:8E:14:57:1E:83:9F:78:13:DA:31:F2:21:74:22:81:8E
Certificate issuer: /CN=b4dd6d658e14571e839f7813da31f2217422818e
Certificate serial: 0197DC9B815BA25ADB026E59541E4F6F4E11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tN1tZY4UVx6Dn3gT2jHyIXQigY4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/264934-2a7f-428b-afe5-81d214edf298/1/tN1tZY4UVx6Dn3gT2jHyIXQigY4.mft
Manifest number: 15C9
Signing time: Sat 05 Jul 2025 22:01:08 +0000
Manifest this update: Sat 05 Jul 2025 22:01:08 +0000
Manifest next update: Sun 06 Jul 2025 22:01:08 +0000
Files and hashes: 1: i7TTR0PMX6DAq8x2EEX7tvYEy2w.roa (hash: iWmz0ZT2uDCkIA/K5JDubPnWXPlf7zxHizjmswntW2Y=)
2: tN1tZY4UVx6Dn3gT2jHyIXQigY4.crl (hash: GYzeQ/MMZmvymPAS2zbeTl/9GfHFMCOH13PAWVJBQ8o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/264934-2a7f-428b-afe5-81d214edf298/1/tN1tZY4UVx6Dn3gT2jHyIXQigY4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/264934-2a7f-428b-afe5-81d214edf298/1/tN1tZY4UVx6Dn3gT2jHyIXQigY4.mft
rsync://rpki.ripe.net/repository/DEFAULT/tN1tZY4UVx6Dn3gT2jHyIXQigY4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Jul 2025 16:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:dc:9b:81:5b:a2:5a:db:02:6e:59:54:1e:4f:6f:4e:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4dd6d658e14571e839f7813da31f2217422818e
Validity
Not Before: Jul 5 22:01:08 2025 GMT
Not After : Jul 6 22:01:08 2025 GMT
Subject: CN=50cc391dbe0150eee874cf0a53a9a8064bd658ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:37:e9:b3:f5:e3:5f:b4:b8:32:f6:51:ec:51:
81:c3:21:f7:5d:82:a9:7b:3f:bb:d9:b1:f3:bc:4f:
d1:34:4b:61:ca:e6:d6:4d:7f:9b:59:21:4b:f6:a4:
84:c7:6c:52:e1:5b:48:20:d7:90:99:fe:dc:a1:44:
01:c9:8b:6b:33:55:14:1b:9a:92:0a:75:5b:eb:be:
cb:c1:e1:9b:9b:d0:e8:06:35:3d:e1:32:71:2d:29:
d7:21:7f:b8:f2:3f:d5:00:36:f3:cb:0b:b7:70:53:
b2:ff:ef:41:55:b3:fe:60:69:66:c1:ed:df:18:25:
f6:45:3f:86:a2:e9:6a:79:1f:1d:24:63:f5:8d:94:
93:5e:61:23:bb:b9:69:24:06:48:31:e6:c3:56:a5:
47:1c:57:35:35:58:08:a7:86:47:e5:05:2e:d8:da:
18:89:22:61:74:38:89:44:4e:65:3d:85:b0:95:94:
f0:79:2d:66:e8:17:b0:15:fb:cc:5f:37:b4:e7:7f:
4c:09:77:ac:39:4a:0b:fb:c1:61:70:74:a5:78:bd:
7c:b3:df:95:ab:4f:3e:3a:44:79:ec:40:08:86:e3:
dd:4e:94:fe:23:e4:96:39:98:2a:d8:76:26:a1:6b:
5b:86:ee:12:f1:d4:32:57:6c:9e:02:de:b3:24:f0:
b4:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:CC:39:1D:BE:01:50:EE:E8:74:CF:0A:53:A9:A8:06:4B:D6:58:AE
X509v3 Authority Key Identifier:
keyid:B4:DD:6D:65:8E:14:57:1E:83:9F:78:13:DA:31:F2:21:74:22:81:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tN1tZY4UVx6Dn3gT2jHyIXQigY4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/264934-2a7f-428b-afe5-81d214edf298/1/tN1tZY4UVx6Dn3gT2jHyIXQigY4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/264934-2a7f-428b-afe5-81d214edf298/1/tN1tZY4UVx6Dn3gT2jHyIXQigY4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:ba:57:44:28:89:36:84:e9:65:b5:90:9c:17:23:55:e7:01:
0c:79:6a:4a:2b:83:4c:18:f5:63:e8:e0:dd:10:89:b3:f1:68:
f2:5f:c6:eb:67:93:53:3d:ed:68:23:f7:46:31:3a:0a:03:fe:
ba:43:e6:b7:a0:ff:34:c0:ed:27:d5:3c:f3:4a:6d:b2:58:07:
74:1d:f1:1d:ef:1e:fc:5a:41:ab:65:d8:51:8f:ea:ec:4e:f9:
db:c0:98:5e:04:d2:62:46:20:3e:14:2b:01:e1:85:1b:bd:3b:
cf:8c:ab:e8:1b:bc:aa:9d:a5:56:26:e2:e6:91:50:c3:22:88:
2e:9c:f6:c7:31:27:80:ec:d9:69:79:e4:b5:fd:e7:1d:c9:73:
e9:62:74:0a:da:99:16:0c:2b:c5:7a:12:21:b2:9c:a3:22:93:
34:ce:4d:07:9f:f2:34:a9:b6:0f:b1:09:1d:00:c3:ed:9d:6b:
f7:6e:3a:e8:f8:a6:7c:58:23:fb:07:fc:c4:75:fd:35:a5:a8:
79:60:ee:40:61:ae:04:58:03:ca:4f:75:c9:1a:14:46:4f:a9:
f5:1c:87:52:94:ae:44:a0:38:99:7e:17:90:c4:9e:09:65:e7:
fb:ac:74:fc:8f:32:93:d9:be:18:c0:14:1e:82:26:aa:c0:79:
7d:f4:d8:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 6 00:35:06 2025 by rpki-client