Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.mft
File: TsoQXOSvbCHNQp6ZLQbqfQbYpW0.mft (raw, json)
Hash identifier: dIS1H0berYjLOWNE3tNPvhjS+36ol8Lqbjd337R/GPU=
Subject key identifier: 6B:AA:76:3B:19:13:D1:DF:F5:A7:94:59:C3:BB:24:21:0D:31:9A:83
Authority key identifier: 4E:CA:10:5C:E4:AF:6C:21:CD:42:9E:99:2D:06:EA:7D:06:D8:A5:6D
Certificate issuer: /CN=4eca105ce4af6c21cd429e992d06ea7d06d8a56d
Certificate serial: 0197B6A04AE82E3E0184DC8C4E22DD243DE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.mft
Manifest number: 15B8
Signing time: Sat 28 Jun 2025 13:00:47 +0000
Manifest this update: Sat 28 Jun 2025 13:00:47 +0000
Manifest next update: Sun 29 Jun 2025 13:00:47 +0000
Files and hashes: 1: AuQnPlvYaXKRlM4K_qYnSQH8XhU.roa (hash: qvJ/L4CGhxXYThfrwcSRz9uge4t0blzZ120bzRELDv8=)
2: F7DtnHMe2aPaEVwgJdRXETJ3B3E.roa (hash: MXWzMDDGEU1JVdMLECcVtcWDfSvCJBYg9H2NNF7s8es=)
3: NT96ZXytZXeLYG8nYXbccb_AzMM.roa (hash: jF7i9U0X2AT56VYqylel02ci97XBnH5+7EoAI42ntOM=)
4: TsoQXOSvbCHNQp6ZLQbqfQbYpW0.crl (hash: OYHx7OTTa1pwZ9gmgppIxujOhu9y1GTKu62F9M69kIU=)
5: dZ8FONS7KKnXtPOWC1aUQDIHQr4.roa (hash: eYi/BgNAuN/BBQLuz4zrndBhjJKwJ84q4OAoqSVG8XI=)
6: kw0uZTx7n5NT55NNgp7YJmoV9Go.roa (hash: 8XlRvDMZFDhRr5qjjN+VGMeejBbNLMwpbYD6/C4LFwY=)
7: mLDvK3-bwZrItlCvgdik3bR3f2M.roa (hash: YyM0oKefpsy5Jzp3sMVhcN2qGFNdHn75iID1HMnlHcs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:4a:e8:2e:3e:01:84:dc:8c:4e:22:dd:24:3d:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4eca105ce4af6c21cd429e992d06ea7d06d8a56d
Validity
Not Before: Jun 28 13:00:47 2025 GMT
Not After : Jun 29 13:00:47 2025 GMT
Subject: CN=6baa763b1913d1dff5a79459c3bb24210d319a83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:a3:fe:e5:8e:70:b0:11:9d:b2:68:81:27:5c:
01:35:69:1d:f3:0b:35:07:19:10:01:15:7c:2f:2c:
01:88:03:c0:f3:2c:0a:ae:23:ba:9c:d4:27:a7:34:
68:4c:97:28:aa:5f:03:a5:bb:c4:ff:6b:3d:a1:b3:
80:a3:84:c0:79:6b:52:0d:79:67:50:75:ee:9b:eb:
b1:c1:ea:92:ec:0f:ac:a2:d8:d5:ce:9c:2e:ad:16:
31:1a:69:0b:78:10:32:0d:71:5b:67:00:1e:82:f3:
f8:91:5c:11:92:b7:71:f4:6d:f9:0d:63:b9:7e:f3:
e6:5b:5d:b8:19:f6:a4:ae:e5:70:e6:40:e8:5d:39:
5b:46:dc:1e:c5:b3:b8:c2:d2:58:44:97:ad:8f:34:
2a:f3:89:72:f4:5c:e5:9f:8d:ed:c5:76:47:a2:0a:
e6:db:7f:99:bd:49:d5:54:db:61:23:1a:f9:ef:68:
12:4e:e9:4c:30:4e:38:4a:b0:3f:aa:fd:1e:75:05:
ad:a5:52:19:64:7f:e7:ed:9e:fb:01:99:93:e5:39:
a8:76:57:49:85:53:57:d4:ce:5d:17:a7:fd:c1:82:
ef:a5:a7:32:d6:24:01:23:88:22:af:c4:b1:f2:ef:
6c:e3:23:81:64:f2:90:f6:e9:de:a3:d3:6a:1c:a8:
c4:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:AA:76:3B:19:13:D1:DF:F5:A7:94:59:C3:BB:24:21:0D:31:9A:83
X509v3 Authority Key Identifier:
keyid:4E:CA:10:5C:E4:AF:6C:21:CD:42:9E:99:2D:06:EA:7D:06:D8:A5:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:1d:21:16:35:ee:37:59:6c:75:ba:64:5e:67:b9:06:60:fe:
f3:62:ea:6f:88:b7:31:bb:8a:26:e0:0c:00:f2:e6:b1:dd:fa:
62:f4:4a:eb:c0:13:f8:47:3a:29:82:23:dc:1a:07:7d:5d:75:
7d:30:c0:19:94:b5:66:87:61:52:15:f6:67:20:f7:be:e7:c0:
10:1a:a9:11:46:66:09:38:ae:80:2d:07:37:c7:f6:97:c4:52:
a2:0f:1d:94:bf:ed:a9:16:00:5a:74:fa:c2:47:45:cd:c1:79:
99:7f:e4:87:a0:1e:b2:82:10:52:53:2a:a4:4f:f9:59:24:a1:
bb:a3:34:8a:25:e2:ec:37:1a:44:f3:3e:a3:07:7d:0d:fb:f4:
8e:4d:f9:5d:c7:94:d8:b1:c8:e7:f6:cd:50:b1:3f:a7:fa:58:
e6:ce:19:1a:70:2f:d7:61:91:d9:c2:59:e5:56:94:ce:82:70:
ef:28:b9:61:0a:ff:d3:96:00:dd:bc:f8:88:07:57:b3:0a:38:
20:b8:3b:40:54:26:fd:5b:30:93:4b:b6:6f:bb:cb:2c:69:54:
9a:b3:1e:e3:0d:94:90:27:66:f4:3a:09:72:0f:af:a9:a6:a5:
04:3b:c7:aa:5a:80:60:32:18:c2:d2:e0:9f:45:aa:28:aa:d8:
7e:db:ba:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:23:49 2025 by rpki-client