Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.mft
File: tMgU_8pTEIYqIiTwr9kMqpasC1Q.mft (raw, json)
Hash identifier: kExWZUd0fPorDD6eQnyJk17TB+LzH5H8IfBUTDuTEwQ=
Subject key identifier: F6:A4:4A:E3:26:42:F3:00:8A:82:B9:C7:C9:FD:F8:B8:2B:E1:FC:D0
Authority key identifier: B4:C8:14:FF:CA:53:10:86:2A:22:24:F0:AF:D9:0C:AA:96:AC:0B:54
Certificate issuer: /CN=b4c814ffca5310862a2224f0afd90caa96ac0b54
Certificate serial: 0197B77C5FB978AFA3DA34C070D4E5B4D09B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tMgU_8pTEIYqIiTwr9kMqpasC1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.mft
Manifest number: 04FF
Signing time: Sat 28 Jun 2025 17:01:10 +0000
Manifest this update: Sat 28 Jun 2025 17:01:10 +0000
Manifest next update: Sun 29 Jun 2025 17:01:10 +0000
Files and hashes: 1: JboF5duYkSjIw0cFCDow2D7hhYA.roa (hash: 5ee85IvEdLLZLBu0IK/0DK9QgLyt71g8oPTMmxnM7ss=)
2: bPHOfPhRt9UxNoPYUZyx6NkEcPE.roa (hash: l5CD77LRDYrviJN2I+kUm6dy7C8YOi2kiqH568j84ZE=)
3: tMgU_8pTEIYqIiTwr9kMqpasC1Q.crl (hash: aLW3Z73AIxaNFTWBttAOf36pmZr8DLxkL0xLUnH2sLQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/tMgU_8pTEIYqIiTwr9kMqpasC1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:5f:b9:78:af:a3:da:34:c0:70:d4:e5:b4:d0:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4c814ffca5310862a2224f0afd90caa96ac0b54
Validity
Not Before: Jun 28 17:01:10 2025 GMT
Not After : Jun 29 17:01:10 2025 GMT
Subject: CN=f6a44ae32642f3008a82b9c7c9fdf8b82be1fcd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:a3:3f:f7:bd:4a:99:b2:37:b2:ba:6a:02:af:
9c:43:86:13:2b:e3:85:74:b7:08:64:c9:b4:6a:81:
84:2f:02:e9:01:f3:21:da:86:d8:fa:6e:2c:2d:ea:
be:2f:77:b7:8f:8d:0b:1a:8b:c8:40:10:df:06:7b:
4f:6a:4b:9b:9f:d3:5c:96:ab:8d:e1:39:e1:f9:8a:
ae:b4:83:db:08:82:af:f6:a7:23:b0:1f:bc:ea:4e:
63:50:00:02:5a:25:f4:74:32:4d:78:6a:9c:eb:ee:
55:03:f2:19:01:2c:ba:d1:04:16:1b:9e:e4:f7:1b:
b4:42:b8:6f:32:5d:55:16:93:1b:d8:b6:2c:86:3b:
32:d5:43:10:0e:0a:14:60:2f:3d:ed:ec:c9:de:5c:
7d:02:cd:ea:94:1e:15:b5:a4:3d:da:00:34:90:86:
79:c0:58:dc:5a:ff:5f:db:b5:c9:6d:96:5c:a2:0a:
8f:07:b7:0e:fd:13:e1:09:9e:18:12:fa:8f:c7:ce:
ab:3d:ea:30:f3:0c:37:7b:d9:8e:52:bf:76:54:42:
a6:16:76:c6:33:b7:9e:13:37:fc:c4:05:9b:c3:05:
d8:65:2e:fd:20:78:e8:aa:7b:b9:d1:8b:a5:66:51:
7f:e9:05:04:c1:03:92:1a:fa:6e:41:15:10:22:17:
21:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:A4:4A:E3:26:42:F3:00:8A:82:B9:C7:C9:FD:F8:B8:2B:E1:FC:D0
X509v3 Authority Key Identifier:
keyid:B4:C8:14:FF:CA:53:10:86:2A:22:24:F0:AF:D9:0C:AA:96:AC:0B:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tMgU_8pTEIYqIiTwr9kMqpasC1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:1c:d4:e1:b0:49:84:02:7e:2b:fd:87:39:13:60:a4:37:ab:
80:92:5c:71:38:0c:48:08:9f:c7:d3:99:bf:ad:e5:94:ea:bf:
73:f2:fd:f0:cb:ce:6d:6a:c7:59:41:b3:da:8c:81:90:88:63:
84:ba:4e:8c:a7:64:1f:13:6f:c9:df:88:56:88:17:04:86:bc:
cb:62:12:13:33:04:96:f0:57:2a:14:ab:9c:d6:c1:b9:33:e6:
65:24:6b:e1:d7:cc:97:05:da:e5:ff:28:b2:5e:4d:71:50:ec:
27:ef:76:5b:50:c8:5b:26:d2:2f:64:8e:45:5e:8a:4b:a2:8b:
e1:08:f3:de:a0:e0:f5:51:3b:2c:b8:9b:01:67:86:26:77:91:
9c:47:06:e9:d6:b2:61:9a:73:6a:d9:77:81:16:ef:d1:f4:fa:
59:c9:d8:cc:15:d7:c4:6b:b3:e6:c4:4e:3f:b4:da:d5:2c:65:
18:14:a8:c2:15:5e:3b:9c:e2:36:d1:85:96:9c:19:a4:27:b5:
53:35:ea:2e:59:52:bd:8c:c7:94:07:e9:57:58:5e:a3:13:8a:
37:45:4b:02:20:2a:84:6b:c6:d9:96:3c:b4:1c:cf:30:34:55:
e4:90:f2:f4:d5:a4:24:4a:0d:c7:eb:7c:a2:56:ed:7c:4f:36:
e7:a5:d1:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:59:26 2025 by rpki-client