Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.mft
File: Ty0wsBXsTvGw08ZDR8jRtZgpP4E.mft (raw, json)
Hash identifier: cqWgU0iZr0EXNQDQSA41MVWKrya9pEHKdkOI6lRs8vU=
Subject key identifier: 9F:41:78:E3:9B:BF:68:1D:98:A4:EB:CC:AD:27:B9:6B:90:6E:46:ED
Authority key identifier: 4F:2D:30:B0:15:EC:4E:F1:B0:D3:C6:43:47:C8:D1:B5:98:29:3F:81
Certificate issuer: /CN=4f2d30b015ec4ef1b0d3c64347c8d1b598293f81
Certificate serial: 0197B6D7771DDA5D0D7B9E7988935C317847
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.mft
Manifest number: 081C
Signing time: Sat 28 Jun 2025 14:01:03 +0000
Manifest this update: Sat 28 Jun 2025 14:01:03 +0000
Manifest next update: Sun 29 Jun 2025 14:01:03 +0000
Files and hashes: 1: 1QmmbYJZZWZoqiWNQVq4wZmhLNg.roa (hash: gVkThpG7tc6UKYu6nfIrbCxYB1OnM75XNE9Zf3BxXSE=)
2: Gm9NfecPR-RUq_slL2NKmzGqQ1c.roa (hash: tkU2/2KHzDAlfUyxsnryBif6WpEicFze6N39RJoBTkM=)
3: IdcqQLaLPNCQJzdTXpACnqYscnI.roa (hash: H+1S4n+OyXlFrQgh9A84gwVt0xMSOKKs5oiKIXtOgjU=)
4: OVQ5uPkYukiV8dv56D7X8vrwp8E.roa (hash: OWeiLtMHum8JXxqxvdWPi5crevEaVFFy1EtOqegV6tI=)
5: P8VDh_9fdYN8xXLvtJMOKaqZaBs.roa (hash: nMTrg+lyYaQ59OMP8FwWXirKWOtKtrNaOkuqtu/tSjc=)
6: Pq__l0a6HrBOcCXhEDnn7AV0g54.roa (hash: A1mBB7bcRpMOwkOKXDY7TtCFDZr1ayBKUG0wvvr/Zlw=)
7: Ty0wsBXsTvGw08ZDR8jRtZgpP4E.crl (hash: pcL4X1PAYoDwguJFhtQgWfTmbgjIIhnWxDLu+U7vS+o=)
8: qqV4lt6FTPnmuHdRaoUeaEC2b8U.roa (hash: HtCD/Cd4hhljqddcvUw+6pkmRGrV8qPj/FjkfpsV+Jw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:77:1d:da:5d:0d:7b:9e:79:88:93:5c:31:78:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f2d30b015ec4ef1b0d3c64347c8d1b598293f81
Validity
Not Before: Jun 28 14:01:03 2025 GMT
Not After : Jun 29 14:01:03 2025 GMT
Subject: CN=9f4178e39bbf681d98a4ebccad27b96b906e46ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:f1:ae:3e:6f:3a:ed:56:26:b7:be:e9:25:c0:
b7:2f:b1:4f:d3:b3:94:01:9f:a1:0a:f3:28:bf:3a:
f7:df:fc:9d:67:31:8b:64:9c:b1:8e:9d:9b:92:d0:
40:a5:2d:35:f7:55:a2:ff:69:c6:f2:42:68:1b:3e:
2f:5e:dd:65:54:fd:71:96:04:47:ee:61:98:07:ee:
7a:8f:7c:7a:0e:c7:00:73:03:0d:b1:d4:98:2e:b8:
65:8c:8f:ea:07:d6:8d:0d:d7:b9:e7:3a:3c:4e:09:
f7:c7:ae:ef:3f:21:4d:43:a2:ba:6d:69:c8:b8:8d:
3c:fb:65:66:91:4d:cd:41:60:61:b9:9e:d3:9e:27:
25:37:2b:33:32:4f:be:dd:c1:21:e2:9e:9d:0b:bd:
39:a3:39:ef:5e:ff:6a:7f:e4:f4:58:a9:d5:61:59:
9a:1b:b1:36:42:ce:8e:91:af:4b:4e:a0:a3:f8:41:
00:8e:8d:29:93:ab:a5:ab:ea:51:0b:9c:8e:3b:b0:
5c:22:ce:6e:9b:6c:55:0e:80:ed:6a:49:b1:04:b7:
e5:0f:13:b6:de:3d:68:53:f6:a6:54:48:b0:0c:e1:
ff:33:b8:dd:8a:b8:01:37:b1:d9:b8:98:d3:38:42:
26:11:23:4d:13:8b:3d:d4:fa:6b:87:a2:1b:48:e6:
ba:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:41:78:E3:9B:BF:68:1D:98:A4:EB:CC:AD:27:B9:6B:90:6E:46:ED
X509v3 Authority Key Identifier:
keyid:4F:2D:30:B0:15:EC:4E:F1:B0:D3:C6:43:47:C8:D1:B5:98:29:3F:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:22:e7:62:fb:9f:0e:c4:d1:63:a4:49:92:8c:39:97:2d:88:
82:4d:6e:99:09:f4:3a:96:a7:c7:8c:4c:57:2f:0f:69:b7:8f:
07:b7:45:15:22:96:07:20:2f:8f:46:53:21:53:fa:34:03:0b:
3f:e3:67:e6:41:61:27:34:95:a7:a4:6a:fc:10:ee:c4:19:54:
af:68:d9:07:7e:4f:52:a0:9e:29:15:34:d2:39:df:1c:e6:41:
08:51:5c:b9:ba:a8:d0:52:cd:aa:44:e0:79:26:6a:3b:01:42:
af:f4:b4:d5:90:4d:f0:d6:be:78:d2:9f:b0:ca:d5:92:be:9a:
54:0c:a9:c5:8c:51:16:f6:b5:c8:9d:c6:67:79:ea:56:bf:5c:
f4:be:07:2c:02:7d:f4:f2:2e:c1:82:48:01:26:60:97:a0:70:
b7:8f:bc:a3:c5:04:93:60:c1:8a:1e:47:e9:94:19:6e:24:0c:
0a:1c:5a:2e:13:54:58:b1:2f:85:b3:dc:f0:e4:11:d4:58:ba:
48:7f:12:19:e4:16:67:ad:d0:2b:ce:d8:db:d8:cf:57:6e:49:
e6:f8:ea:43:a8:67:0f:06:6a:08:7a:87:81:b9:c3:85:f2:7d:
e7:69:b8:22:87:25:ce:cf:a8:7a:53:dd:31:64:dd:db:21:42:
50:e5:01:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:33:04 2025 by rpki-client