Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/35bee9-843f-4d38-9286-7aa49becf467/1/Tt5MZdc1r3knftFOtsTPVATHiNU.mft
File: Tt5MZdc1r3knftFOtsTPVATHiNU.mft (raw, json)
Hash identifier: 46J0YH1bPnM3CD3mYRN6hFihdC+WOTxAgya/kkPz/nU=
Subject key identifier: 51:C9:3E:44:8D:8F:77:72:5F:E4:F9:CF:6D:62:00:70:59:77:03:F7
Authority key identifier: 4E:DE:4C:65:D7:35:AF:79:27:7E:D1:4E:B6:C4:CF:54:04:C7:88:D5
Certificate issuer: /CN=4ede4c65d735af79277ed14eb6c4cf5404c788d5
Certificate serial: 0197B7EAACF7B58A7637D209D6CF5C2FCAAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tt5MZdc1r3knftFOtsTPVATHiNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/35bee9-843f-4d38-9286-7aa49becf467/1/Tt5MZdc1r3knftFOtsTPVATHiNU.mft
Manifest number: 07F6
Signing time: Sat 28 Jun 2025 19:01:39 +0000
Manifest this update: Sat 28 Jun 2025 19:01:39 +0000
Manifest next update: Sun 29 Jun 2025 19:01:39 +0000
Files and hashes: 1: CNpxwuWXiobnr753WTcJ-SvZEQU.roa (hash: +W4soYxTO8aYTDMgF940blaVc3sdpMhU9iF5WZMoCzU=)
2: Tt5MZdc1r3knftFOtsTPVATHiNU.crl (hash: xnaSkYOT3Br8XITVbrhJED5S//P87rJEv6VanJ3tab0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/35bee9-843f-4d38-9286-7aa49becf467/1/Tt5MZdc1r3knftFOtsTPVATHiNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/35bee9-843f-4d38-9286-7aa49becf467/1/Tt5MZdc1r3knftFOtsTPVATHiNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tt5MZdc1r3knftFOtsTPVATHiNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:ac:f7:b5:8a:76:37:d2:09:d6:cf:5c:2f:ca:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ede4c65d735af79277ed14eb6c4cf5404c788d5
Validity
Not Before: Jun 28 19:01:39 2025 GMT
Not After : Jun 29 19:01:39 2025 GMT
Subject: CN=51c93e448d8f77725fe4f9cf6d620070597703f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:59:93:29:d9:e0:d9:b7:98:ea:a4:d3:98:6b:
ae:8d:32:43:e2:06:04:97:b7:04:28:89:e9:72:58:
74:17:70:d6:83:37:60:cf:91:d4:64:04:e6:c6:62:
d4:df:5e:a2:e2:45:12:ce:6b:b9:76:27:16:c1:a4:
e1:1c:cd:fe:5f:d5:9f:af:7e:33:64:ef:64:ed:50:
bc:9c:d3:8a:2c:79:13:87:59:21:03:01:4c:b3:d1:
7e:79:6c:b7:6c:02:f3:57:80:03:02:43:14:60:2a:
12:c1:02:8e:ac:ca:69:4e:73:b7:e1:55:ee:dc:57:
b4:f1:c5:ec:4b:e5:5f:28:ce:09:ed:60:a6:77:6b:
f1:38:36:48:b7:10:5f:4e:25:d4:be:c4:df:51:6b:
55:36:7a:3f:94:08:c5:1f:f0:9a:9b:76:fa:74:71:
32:1a:35:6e:12:33:65:af:05:91:c2:fd:12:ee:7d:
95:d0:fd:8d:56:53:9c:9a:f3:75:f8:44:7e:d8:18:
f9:40:12:98:4a:60:c0:8b:bc:68:d6:ff:d1:c8:15:
50:a4:53:70:29:9b:b1:eb:23:b1:88:2a:dd:15:07:
30:e0:4e:9c:fd:09:da:10:81:47:8c:b8:b2:29:42:
31:ac:7d:c2:ee:12:1b:ae:b7:90:7c:6a:6c:9f:2b:
99:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:C9:3E:44:8D:8F:77:72:5F:E4:F9:CF:6D:62:00:70:59:77:03:F7
X509v3 Authority Key Identifier:
keyid:4E:DE:4C:65:D7:35:AF:79:27:7E:D1:4E:B6:C4:CF:54:04:C7:88:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tt5MZdc1r3knftFOtsTPVATHiNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/35bee9-843f-4d38-9286-7aa49becf467/1/Tt5MZdc1r3knftFOtsTPVATHiNU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/35bee9-843f-4d38-9286-7aa49becf467/1/Tt5MZdc1r3knftFOtsTPVATHiNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:00:27:b9:4e:22:fe:15:11:17:fe:ee:83:09:6a:51:ba:2e:
df:92:93:69:a9:60:65:1f:12:6c:22:f1:49:2e:8b:94:67:6f:
3f:88:fe:d6:05:1d:33:fa:cb:b6:7a:7f:a9:5b:ed:3c:fb:80:
8b:81:8f:f4:9a:ff:31:c4:86:0a:27:a8:16:3f:f9:cc:28:90:
d4:d6:d4:65:a5:9f:31:22:ac:ad:56:4a:8d:d0:2b:b5:71:d9:
52:4d:4e:af:c3:f5:ef:93:a3:aa:79:a6:94:9d:1b:45:1e:fb:
3e:b1:36:ba:48:c1:9a:65:08:e0:02:01:30:6c:7d:bf:d0:e5:
c4:df:dd:1f:e0:e3:ea:f7:5a:7b:2e:1a:24:dc:d1:7a:a9:63:
f6:85:3e:f3:67:6e:5d:f5:2f:52:be:a8:6a:70:2b:f2:d1:c2:
9f:4d:89:0b:86:54:e1:5c:e2:86:73:6b:d6:02:62:49:fe:5d:
b3:28:52:98:72:0e:8a:cb:96:d7:cb:fc:1e:7a:38:d4:52:9a:
4d:b6:63:b3:df:a6:4c:8b:9a:f4:2b:c8:a3:13:2a:2e:26:e4:
5d:17:eb:a3:7e:8d:69:2e:00:cc:4f:de:87:54:aa:a3:7b:cf:
9e:bc:50:6b:c7:a0:25:27:bd:c7:6e:93:f2:52:6d:6a:7e:a1:
77:9d:6c:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:29:37 2025 by rpki-client