Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/9e9122-bbff-48d9-98c6-0a4286f3cfbe/1/tfV-SevwmLxT6Ns4iIHJI2nZv4w.mft
File: tfV-SevwmLxT6Ns4iIHJI2nZv4w.mft (raw, json)
Hash identifier: Ya65p/flJvmpGNBpA2TkvAGqfnFG+qkvudeyqZzozOA=
Subject key identifier: 7A:8E:49:63:4A:A7:22:9E:2E:7F:73:38:F9:2E:FC:51:18:39:CB:2F
Authority key identifier: B5:F5:7E:49:EB:F0:98:BC:53:E8:DB:38:88:81:C9:23:69:D9:BF:8C
Certificate issuer: /CN=b5f57e49ebf098bc53e8db388881c92369d9bf8c
Certificate serial: 0197B74530335A5B38CABEE12E0E07C00C1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tfV-SevwmLxT6Ns4iIHJI2nZv4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/9e9122-bbff-48d9-98c6-0a4286f3cfbe/1/tfV-SevwmLxT6Ns4iIHJI2nZv4w.mft
Manifest number: 1338
Signing time: Sat 28 Jun 2025 16:00:54 +0000
Manifest this update: Sat 28 Jun 2025 16:00:54 +0000
Manifest next update: Sun 29 Jun 2025 16:00:54 +0000
Files and hashes: 1: HqctvWxlrIEslD4ELNpmV-XhZkU.roa (hash: CGfhQ4fck7gcAxsslFd0Q8T9jYmDIbHyBLNxPR9Qais=)
2: bKSpPE5-kXmlbnT7r_1atj4jQSY.roa (hash: L3QXcpXiam9j36oZrcZebMrghkDu87SD2DJXHj63ivw=)
3: tfV-SevwmLxT6Ns4iIHJI2nZv4w.crl (hash: jXAOkOMvMas9cN/xZPbporr/Plg9QKxcVf7Tq5QqyMs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/9e9122-bbff-48d9-98c6-0a4286f3cfbe/1/tfV-SevwmLxT6Ns4iIHJI2nZv4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/9e9122-bbff-48d9-98c6-0a4286f3cfbe/1/tfV-SevwmLxT6Ns4iIHJI2nZv4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/tfV-SevwmLxT6Ns4iIHJI2nZv4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:30:33:5a:5b:38:ca:be:e1:2e:0e:07:c0:0c:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5f57e49ebf098bc53e8db388881c92369d9bf8c
Validity
Not Before: Jun 28 16:00:54 2025 GMT
Not After : Jun 29 16:00:54 2025 GMT
Subject: CN=7a8e49634aa7229e2e7f7338f92efc511839cb2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:1d:8a:1c:52:9c:99:75:6a:58:1b:51:b9:b8:
f9:5c:5d:32:4b:bc:f7:10:d0:f5:1b:47:73:41:60:
61:8b:ef:23:8a:e8:e8:d8:a8:9d:bc:83:39:c1:38:
e9:46:8d:6f:be:69:39:08:b3:34:ad:38:91:35:4d:
48:65:49:76:ad:59:5d:41:53:f1:b9:de:6a:73:78:
2b:41:16:2f:87:ff:d4:d9:4f:e8:0d:e1:a8:09:36:
25:6d:ef:19:93:bb:ca:0c:e1:60:cc:f4:8b:cd:6d:
8a:f9:65:97:89:02:ee:7d:90:e0:2d:33:e5:8c:38:
31:3b:b5:ed:fb:e4:8f:59:b4:56:65:df:c1:f5:77:
79:74:49:b8:cc:0b:f2:1a:c1:9e:e0:b1:9d:2c:5a:
5a:a2:f9:93:fe:84:43:22:af:88:6a:a8:14:d6:32:
cd:fb:7f:e6:c4:41:55:02:ae:ee:a2:4d:b6:15:73:
28:5d:42:60:60:1a:bc:ed:b6:66:0a:c3:c5:db:36:
72:14:df:7d:f4:c6:22:38:07:72:4f:35:6a:de:7a:
a8:36:4f:a2:6f:4c:0e:0d:f8:e3:e9:b9:2a:d2:a9:
fe:52:88:7a:5c:26:72:95:4b:02:b7:e1:80:bf:e2:
d3:16:dc:3e:4c:22:c5:6b:12:98:7e:6f:63:49:6e:
c6:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:8E:49:63:4A:A7:22:9E:2E:7F:73:38:F9:2E:FC:51:18:39:CB:2F
X509v3 Authority Key Identifier:
keyid:B5:F5:7E:49:EB:F0:98:BC:53:E8:DB:38:88:81:C9:23:69:D9:BF:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tfV-SevwmLxT6Ns4iIHJI2nZv4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/9e9122-bbff-48d9-98c6-0a4286f3cfbe/1/tfV-SevwmLxT6Ns4iIHJI2nZv4w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/9e9122-bbff-48d9-98c6-0a4286f3cfbe/1/tfV-SevwmLxT6Ns4iIHJI2nZv4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:fa:92:26:ff:08:e0:e7:c2:1a:bc:de:d5:8a:c1:85:10:e6:
53:14:6a:4c:19:e3:62:5c:bc:fa:47:da:b0:61:8f:3c:30:ae:
16:6e:28:e1:55:20:34:be:3f:81:05:31:62:14:09:0a:d7:a9:
7e:6f:c9:f2:3b:96:c8:4b:11:10:46:a9:94:8a:2e:57:25:eb:
30:5c:3d:f1:1f:af:9b:14:92:ff:ef:79:5c:7f:95:45:7b:71:
3a:4c:25:3c:5f:09:7a:3d:ef:87:94:65:12:25:98:9b:f3:1a:
7f:a0:ed:23:ab:7c:50:ab:38:bc:ad:32:ff:93:39:18:38:dd:
c7:15:6a:25:5f:e9:73:41:d5:7d:13:34:c4:d8:c4:d9:5a:7b:
c6:c4:6e:9f:c4:4d:67:b1:6d:a5:25:47:c7:49:f1:ae:f9:47:
3a:e9:aa:1d:73:21:e8:8a:af:d6:e1:1a:f1:bc:e6:f5:3f:9e:
da:78:45:db:94:f5:33:06:bc:21:29:1f:63:37:a7:83:20:ce:
7d:ed:b5:73:f8:71:87:ae:2b:96:01:8f:ad:5f:5b:ea:ea:eb:
a6:eb:0a:87:84:ec:b3:00:d3:8c:59:e5:73:fa:dd:ef:6d:05:
a0:f1:63:13:5e:6c:32:03:81:84:cb:f9:c1:24:be:ed:33:d0:
e8:39:8a:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:42:21 2025 by rpki-client