Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/21dee2-29d7-4dad-beb9-2b226a23406a/1/T4EisJRezMsfL7mRL72GqgSmGYc.mft
File: T4EisJRezMsfL7mRL72GqgSmGYc.mft (raw, json)
Hash identifier: nJ7N35JoSbGLpbvAPcLiK8gKBHyzfkH6AfyG8CJEIGE=
Subject key identifier: 2F:96:3A:B2:85:90:CF:96:86:A5:9C:F7:07:32:03:8F:4C:B7:D0:38
Authority key identifier: 4F:81:22:B0:94:5E:CC:CB:1F:2F:B9:91:2F:BD:86:AA:04:A6:19:87
Certificate issuer: /CN=4f8122b0945ecccb1f2fb9912fbd86aa04a61987
Certificate serial: 0197B9D8840A41105E1CF7DC86474C58AC2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4EisJRezMsfL7mRL72GqgSmGYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/21dee2-29d7-4dad-beb9-2b226a23406a/1/T4EisJRezMsfL7mRL72GqgSmGYc.mft
Manifest number: 15B6
Signing time: Sun 29 Jun 2025 04:01:03 +0000
Manifest this update: Sun 29 Jun 2025 04:01:03 +0000
Manifest next update: Mon 30 Jun 2025 04:01:03 +0000
Files and hashes: 1: T4EisJRezMsfL7mRL72GqgSmGYc.crl (hash: qrZiuf0jbYKYGLQo4HJd7Ps4wXLx9zKuwPs2iceQi7I=)
2: wHg73xFUBpf9J7Sbkd5k-txeIuI.roa (hash: QbehPOAeyODx6wNG06wUci2MxVQ0h49CdhYolCy9bWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/21dee2-29d7-4dad-beb9-2b226a23406a/1/T4EisJRezMsfL7mRL72GqgSmGYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/21dee2-29d7-4dad-beb9-2b226a23406a/1/T4EisJRezMsfL7mRL72GqgSmGYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/T4EisJRezMsfL7mRL72GqgSmGYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:d8:84:0a:41:10:5e:1c:f7:dc:86:47:4c:58:ac:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8122b0945ecccb1f2fb9912fbd86aa04a61987
Validity
Not Before: Jun 29 04:01:03 2025 GMT
Not After : Jun 30 04:01:03 2025 GMT
Subject: CN=2f963ab28590cf9686a59cf70732038f4cb7d038
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:3f:b4:b0:b1:1e:64:8e:77:00:11:c0:ab:c9:
df:4f:df:eb:f0:8a:9b:25:69:88:e7:b7:eb:22:f4:
b2:c2:67:88:a6:a4:80:84:10:61:22:eb:34:c7:ca:
b8:59:aa:d1:c2:85:b2:a4:ea:4d:c0:d2:ed:70:cb:
de:71:da:7d:65:36:4e:8e:c3:4c:52:89:df:15:cb:
4f:a5:b0:f7:28:56:15:02:fa:c0:3b:4d:4e:32:53:
7e:2c:87:e0:e8:d3:07:27:d1:1e:0d:8f:7b:48:c0:
81:f2:e3:b7:8e:e8:57:a0:ef:80:ad:eb:eb:db:84:
7d:52:c3:48:e6:70:2e:b6:0a:21:50:44:34:de:76:
6d:63:99:2f:22:4f:54:c9:8e:0e:76:f8:d3:c3:fa:
4e:fe:88:61:47:89:bb:11:22:9a:0e:21:b7:88:48:
58:4e:7c:3c:41:78:26:f9:84:54:1a:93:75:3d:d0:
1b:36:32:e9:3e:3c:32:03:e3:75:4d:08:6b:8e:80:
a8:0c:a6:e7:2d:29:b8:00:a5:c6:0b:4f:76:f6:a3:
c6:1e:b9:67:54:6b:72:71:54:fa:dc:ec:12:12:73:
3b:74:90:f0:ab:22:ad:d7:33:b4:35:da:06:15:a0:
64:02:15:95:b0:c9:22:cc:ad:7c:d2:99:37:34:cd:
68:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:96:3A:B2:85:90:CF:96:86:A5:9C:F7:07:32:03:8F:4C:B7:D0:38
X509v3 Authority Key Identifier:
keyid:4F:81:22:B0:94:5E:CC:CB:1F:2F:B9:91:2F:BD:86:AA:04:A6:19:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4EisJRezMsfL7mRL72GqgSmGYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/21dee2-29d7-4dad-beb9-2b226a23406a/1/T4EisJRezMsfL7mRL72GqgSmGYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/21dee2-29d7-4dad-beb9-2b226a23406a/1/T4EisJRezMsfL7mRL72GqgSmGYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:e4:d9:4d:7e:16:75:e2:7d:87:8f:67:5e:ed:1d:84:ac:a2:
f2:50:f6:28:fd:62:66:39:86:14:86:07:ab:b5:01:a9:66:4b:
1f:fa:63:71:10:4c:90:8d:b5:06:88:af:48:f7:73:74:a7:8b:
28:73:a7:97:eb:a9:f9:14:63:ef:17:65:a8:1a:53:7e:ce:e6:
5d:a6:1f:20:c7:07:73:f3:8f:b0:04:4e:64:20:e3:fd:ab:39:
06:da:73:25:5b:4e:6b:4c:a8:89:c0:21:95:cb:bd:06:24:c9:
af:86:bf:62:be:d5:f8:d2:56:0a:0e:f8:4e:02:94:2c:f3:67:
02:12:a9:ec:a0:49:24:06:94:03:f3:ac:f0:58:03:ed:af:ef:
57:e1:99:57:ed:8d:d8:5a:da:76:0c:8e:f8:74:4e:c4:00:d3:
54:b8:82:75:80:f5:93:ff:30:07:28:ff:ca:7d:90:ab:f7:53:
02:d5:28:f8:69:a9:e5:5b:f1:54:d3:a4:c8:52:dc:74:cd:8d:
6c:bf:8c:fc:e8:bd:41:1e:59:92:2c:4a:05:81:5c:c9:ac:84:
52:59:6f:dc:0e:4f:fe:f7:76:fa:29:bc:9c:63:bb:e1:af:ee:
a7:57:5a:80:f7:f6:40:3e:c1:d8:60:72:0c:38:dc:0f:df:06:
68:89:db:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:32:04 2025 by rpki-client