Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/4acb83-f940-4766-bca9-608e7d779bc7/1/tGMgGICYUgw2Ynf3SaT3eh1ERDk.mft
File: tGMgGICYUgw2Ynf3SaT3eh1ERDk.mft (raw, json)
Hash identifier: nleF/g+Usc48Kn2Fq2VQQCKmMprIeK8Aw4yqKutRjkQ=
Subject key identifier: 4D:B5:F5:6F:16:A5:6E:22:32:CB:09:FD:85:32:30:C2:AF:D7:3B:9C
Authority key identifier: B4:63:20:18:80:98:52:0C:36:62:77:F7:49:A4:F7:7A:1D:44:44:39
Certificate issuer: /CN=b46320188098520c366277f749a4f77a1d444439
Certificate serial: 0197B88F5AF1088F38DAB7854310430F77EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tGMgGICYUgw2Ynf3SaT3eh1ERDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/4acb83-f940-4766-bca9-608e7d779bc7/1/tGMgGICYUgw2Ynf3SaT3eh1ERDk.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 22:01:32 +0000
Manifest this update: Sat 28 Jun 2025 22:01:32 +0000
Manifest next update: Sun 29 Jun 2025 22:01:32 +0000
Files and hashes: 1: 1c-Abo0LxBVDDE4sBrG9JS_ePzI.roa (hash: rxDs0I1CVbIWmreeYb6ePZfwtg9Spev7LU71wCrsp/4=)
2: tGMgGICYUgw2Ynf3SaT3eh1ERDk.crl (hash: Ml2tvfykSSymFMH/TE/z6seSEknzCUSk9x7yjpaiJ5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/4acb83-f940-4766-bca9-608e7d779bc7/1/tGMgGICYUgw2Ynf3SaT3eh1ERDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/4acb83-f940-4766-bca9-608e7d779bc7/1/tGMgGICYUgw2Ynf3SaT3eh1ERDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/tGMgGICYUgw2Ynf3SaT3eh1ERDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 22:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:5a:f1:08:8f:38:da:b7:85:43:10:43:0f:77:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b46320188098520c366277f749a4f77a1d444439
Validity
Not Before: Jun 28 22:01:32 2025 GMT
Not After : Jun 29 22:01:32 2025 GMT
Subject: CN=4db5f56f16a56e2232cb09fd853230c2afd73b9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d5:d1:c3:fa:60:4c:7f:af:2a:b6:42:e6:0a:
32:19:b3:b1:3e:cb:c5:b6:11:c9:9f:41:47:18:c2:
78:53:17:30:ef:69:04:1d:43:2c:25:bd:49:7b:2f:
57:fb:43:c1:22:ce:1c:6c:30:b8:1e:81:10:32:2c:
7d:dc:12:90:b4:9b:aa:ea:8f:0d:c9:2a:ab:39:44:
55:21:ce:ed:b5:0d:70:e1:19:2f:a9:8b:c0:2b:93:
c5:26:3b:2d:92:65:4f:2c:2f:90:be:a4:8b:c9:c9:
78:e1:f3:6c:a5:e8:94:a8:60:4a:da:5d:8d:56:ee:
8a:07:aa:dd:df:64:16:0b:9f:29:9d:75:de:7e:bf:
90:39:c2:91:2a:ca:b0:68:ca:e9:84:e6:41:d0:95:
ef:6f:31:95:c6:d1:c6:a1:bf:10:25:d2:a1:62:52:
8e:5e:83:d4:78:33:af:26:6f:f9:2d:3c:57:7c:52:
d7:cc:ca:25:96:1b:0d:fc:dd:80:45:ed:41:6d:27:
06:c9:d4:1b:fd:82:40:b9:44:20:66:6a:09:f9:61:
8b:d8:34:ac:09:86:a0:4a:9d:4c:ef:13:64:f3:91:
d9:1c:48:a5:5c:96:d3:99:5f:aa:65:fe:e1:14:a9:
55:82:2a:2f:d9:58:58:02:d6:53:7f:65:09:41:b1:
ca:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:B5:F5:6F:16:A5:6E:22:32:CB:09:FD:85:32:30:C2:AF:D7:3B:9C
X509v3 Authority Key Identifier:
keyid:B4:63:20:18:80:98:52:0C:36:62:77:F7:49:A4:F7:7A:1D:44:44:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tGMgGICYUgw2Ynf3SaT3eh1ERDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/4acb83-f940-4766-bca9-608e7d779bc7/1/tGMgGICYUgw2Ynf3SaT3eh1ERDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/4acb83-f940-4766-bca9-608e7d779bc7/1/tGMgGICYUgw2Ynf3SaT3eh1ERDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:f8:8c:e2:60:58:58:aa:35:94:e6:7d:90:19:2a:51:84:f0:
e1:3c:9a:60:99:35:aa:11:9f:40:b8:2c:28:eb:79:d8:e1:6f:
a7:37:f1:71:51:1f:2c:1f:72:8c:f0:d8:75:0e:3b:ef:f3:6f:
03:2d:06:b2:10:ca:13:88:21:e5:b2:81:c5:8a:a9:4d:f9:09:
64:80:4e:b5:31:00:b5:eb:e1:5b:29:70:2d:e7:76:42:5d:47:
9a:06:1b:8f:f4:66:0c:13:f4:f7:7a:d9:1e:e9:41:dd:e9:bc:
a4:93:4a:5e:c7:70:52:54:e8:a3:66:df:b6:e4:83:27:58:2c:
74:3b:46:ac:d1:67:33:95:13:05:4f:ab:82:3d:6e:cc:39:31:
fa:dc:a6:05:f5:32:fa:0a:11:b8:71:78:b3:8a:61:90:40:d1:
a1:0c:8e:bc:9d:8b:4d:fe:e7:7a:16:de:10:7a:b8:16:5a:44:
15:52:ec:f6:c8:dd:38:89:83:14:f7:2b:fa:89:f7:ac:f8:c7:
30:52:6a:a9:26:75:68:5f:f2:be:ae:47:e0:d8:10:e6:c7:6f:
ba:d1:99:8a:5b:83:a9:ae:c1:77:2b:e5:92:36:6a:40:16:4f:
a2:5e:53:bf:a8:36:11:0a:47:f6:a7:fe:85:3a:5e:0b:66:f2:
a8:b6:77:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:14:53 2025 by rpki-client