Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/c62d13-7f03-4d19-8b46-fc91433d367d/1/TKE73qVPdrioVxKv22FRhrM4OME.mft
File: TKE73qVPdrioVxKv22FRhrM4OME.mft (raw, json)
Hash identifier: rByKHE+oIFQn/7sQWsqjULAyfuzGRyrMWiVACDbi2XM=
Subject key identifier: 90:83:3E:2E:E4:1E:A6:61:F5:FA:6E:7F:32:DA:E5:2C:9C:A7:89:8D
Authority key identifier: 4C:A1:3B:DE:A5:4F:76:B8:A8:57:12:AF:DB:61:51:86:B3:38:38:C1
Certificate issuer: /CN=4ca13bdea54f76b8a85712afdb615186b33838c1
Certificate serial: 0197B5FC40D87D44203EE615D6C1468AFC11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TKE73qVPdrioVxKv22FRhrM4OME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/c62d13-7f03-4d19-8b46-fc91433d367d/1/TKE73qVPdrioVxKv22FRhrM4OME.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 10:01:36 +0000
Manifest this update: Sat 28 Jun 2025 10:01:36 +0000
Manifest next update: Sun 29 Jun 2025 10:01:36 +0000
Files and hashes: 1: 8axKv1QeNdYLl5PRbdXwvujzyH4.roa (hash: P16odh3n69wKkHb8t7qySEeaYC3/LuUW9W8sAY8jUTo=)
2: TKE73qVPdrioVxKv22FRhrM4OME.crl (hash: /aUlS9/UEjMJmf2BqQNKaKIGJyNCzJRrsdeQDRQP4EE=)
3: WNroR83uzcjISqXHww42f1zYgLY.roa (hash: ZAQula8xqSNg9/XEOBi+pmskOiJ5Nh7rkmicK30wwYU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/c62d13-7f03-4d19-8b46-fc91433d367d/1/TKE73qVPdrioVxKv22FRhrM4OME.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/c62d13-7f03-4d19-8b46-fc91433d367d/1/TKE73qVPdrioVxKv22FRhrM4OME.mft
rsync://rpki.ripe.net/repository/DEFAULT/TKE73qVPdrioVxKv22FRhrM4OME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fc:40:d8:7d:44:20:3e:e6:15:d6:c1:46:8a:fc:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ca13bdea54f76b8a85712afdb615186b33838c1
Validity
Not Before: Jun 28 10:01:36 2025 GMT
Not After : Jun 29 10:01:36 2025 GMT
Subject: CN=90833e2ee41ea661f5fa6e7f32dae52c9ca7898d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ce:4b:99:63:2f:26:56:d0:4b:85:95:01:84:
97:93:14:25:9c:b0:65:0d:00:89:02:10:4b:12:b0:
65:3f:b1:e2:c8:57:16:e2:83:e5:06:b1:dc:53:ec:
ee:4e:11:91:a3:dd:4f:6f:dc:a6:0f:83:87:88:4f:
77:c8:67:72:f7:d5:17:9c:e5:22:b1:05:46:fd:c5:
90:82:23:46:f8:31:39:19:29:22:77:a2:ab:ef:42:
9f:6c:43:a3:58:c2:ff:8f:24:fe:cc:6b:1e:93:a7:
73:71:a4:5c:78:a0:4a:21:69:03:cc:6b:af:fc:54:
0f:38:55:4f:0a:24:97:31:3c:3b:5b:64:08:3d:55:
40:63:74:ff:4b:08:f9:33:f4:75:3a:3d:c2:9b:a5:
22:b3:2f:2b:c8:2d:bf:33:17:5a:dc:59:3a:0b:c8:
8f:6f:7d:98:87:5c:6f:d2:bd:c1:c7:f7:ca:4c:21:
a2:22:c1:c0:e3:9f:83:76:86:74:9b:39:84:a4:5a:
bb:b2:a3:c9:40:7b:5e:5e:eb:90:30:ee:2d:15:51:
dc:96:0b:74:32:54:b8:ed:31:f1:1c:df:b8:25:2e:
cd:56:40:2e:df:03:e5:bc:c1:1e:31:2e:a4:a4:12:
b9:cb:0e:99:5a:ea:ab:58:b3:a8:ea:15:b8:64:a5:
55:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:83:3E:2E:E4:1E:A6:61:F5:FA:6E:7F:32:DA:E5:2C:9C:A7:89:8D
X509v3 Authority Key Identifier:
keyid:4C:A1:3B:DE:A5:4F:76:B8:A8:57:12:AF:DB:61:51:86:B3:38:38:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TKE73qVPdrioVxKv22FRhrM4OME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c62d13-7f03-4d19-8b46-fc91433d367d/1/TKE73qVPdrioVxKv22FRhrM4OME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c62d13-7f03-4d19-8b46-fc91433d367d/1/TKE73qVPdrioVxKv22FRhrM4OME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:e7:ef:f2:e1:5b:97:52:8a:10:d0:0c:0b:9a:f8:5e:48:f6:
f3:fd:49:8b:6e:db:2a:b6:31:ea:b4:d2:27:84:79:f3:a9:93:
9b:c8:c6:8c:27:07:47:a9:01:df:57:01:c5:34:21:bd:15:b3:
63:d9:5a:66:2f:4a:8d:47:a2:9e:a1:44:cb:a9:70:0f:38:30:
59:53:57:99:5b:68:c8:03:fb:01:bf:b3:34:c0:57:7a:eb:a6:
4a:43:3c:94:42:e3:39:4e:5c:f0:f1:a2:fe:c5:f0:a1:a9:93:
ed:a6:ca:c0:6c:a1:1e:b6:b5:05:1d:7b:40:f9:d4:3d:96:b7:
d2:dd:6e:80:b1:1e:4c:5b:07:62:91:eb:b8:22:5e:56:1f:d1:
94:4e:41:b2:dd:46:a0:e0:ba:11:80:7f:cb:50:19:6d:96:54:
23:06:35:8d:61:94:28:66:c5:76:d3:23:ac:6f:65:2c:68:46:
02:dd:0f:5a:bb:2d:5c:b1:7e:04:43:f2:6e:0e:ff:8e:d0:4b:
11:b0:ed:ad:4f:bc:b1:55:59:be:d4:a1:8b:95:c6:74:8b:a5:
b0:f9:f1:20:e1:8d:b4:fd:24:e2:ff:88:39:fb:ae:5b:2d:82:
b9:a7:fb:c7:a4:e3:e7:20:0e:b6:64:9c:72:77:97:62:7d:18:
0f:f6:52:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:24:48 2025 by rpki-client