
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/02c5ec-7c6f-4ae2-9897-3059c89b72ea/1/TFTszmy8nFSSnqpLIrM3sP2bNr8.mft
File: TFTszmy8nFSSnqpLIrM3sP2bNr8.mft (raw, json)
Hash identifier: qeU7WQ/yQoWfP4egWjKyVkTw917w2BgRddg5wA2tsjE=
Subject key identifier: 6E:9F:43:BC:92:46:C9:48:18:C9:A4:3C:3F:18:8E:AC:14:BB:70:67
Authority key identifier: 4C:54:EC:CE:6C:BC:9C:54:92:9E:AA:4B:22:B3:37:B0:FD:9B:36:BF
Certificate issuer: /CN=4c54ecce6cbc9c54929eaa4b22b337b0fd9b36bf
Certificate serial: 0197B6A0A3CD2D957ECAD6DD4808E0F29673
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TFTszmy8nFSSnqpLIrM3sP2bNr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/02c5ec-7c6f-4ae2-9897-3059c89b72ea/1/TFTszmy8nFSSnqpLIrM3sP2bNr8.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 13:01:10 +0000
Manifest this update: Sat 28 Jun 2025 13:01:10 +0000
Manifest next update: Sun 29 Jun 2025 13:01:10 +0000
Files and hashes: 1: TFTszmy8nFSSnqpLIrM3sP2bNr8.crl (hash: VZplBJVfJQPL2J2bVGp1DSircp6KBu4ODU58DIneA2Y=)
2: eHPqpiMAvfqI-We9VzdWjZPR_bY.roa (hash: 2EtKDvjgQC4QGGaHfks3HUfVQC7NvALc/OB3oROL6rM=)
3: ePZ7Yuu3-_aTMfNEBfmL4fdhXII.roa (hash: ho6FnqARFfeawc2fVl+6U/A9evk5Ck/9UluGTSWRaEw=)
4: jEFUKY2bhw_vuBM1OshauBn8mvg.roa (hash: ZeWPCxGU+ldLXwfBechPAx21XNMieJ0auUVK9LjYs/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/02c5ec-7c6f-4ae2-9897-3059c89b72ea/1/TFTszmy8nFSSnqpLIrM3sP2bNr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/02c5ec-7c6f-4ae2-9897-3059c89b72ea/1/TFTszmy8nFSSnqpLIrM3sP2bNr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/TFTszmy8nFSSnqpLIrM3sP2bNr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:a3:cd:2d:95:7e:ca:d6:dd:48:08:e0:f2:96:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c54ecce6cbc9c54929eaa4b22b337b0fd9b36bf
Validity
Not Before: Jun 28 13:01:10 2025 GMT
Not After : Jun 29 13:01:10 2025 GMT
Subject: CN=6e9f43bc9246c94818c9a43c3f188eac14bb7067
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:75:7e:a7:a4:bd:b0:fe:c0:8b:6b:7b:fa:83:
56:17:a3:b6:2a:0f:f3:77:f1:70:b9:65:3d:fb:c9:
86:95:75:db:9d:0d:47:9a:66:77:71:89:6d:d8:48:
10:9f:4c:d9:e9:1f:65:23:dc:55:29:89:e3:1a:d4:
46:7b:23:5b:10:50:1e:47:e6:51:9e:37:40:7d:bf:
82:9b:3f:44:cf:b0:a1:ce:2e:76:0e:75:3e:f7:48:
11:83:1e:e5:b5:cd:0b:0e:25:77:1c:2c:35:3e:99:
3e:3e:19:2b:5d:27:bf:20:86:f8:61:20:fb:f0:48:
bc:8e:c6:29:1e:81:06:05:c5:20:0b:ac:fd:ef:b5:
51:fb:db:c1:cf:ae:5e:83:30:40:f3:d6:90:43:4f:
a3:2c:be:72:01:6b:41:e2:63:81:92:87:8e:93:7f:
38:50:33:97:c7:32:69:0f:7a:96:ee:85:16:56:98:
8e:a5:db:f5:b0:3d:c7:fa:3c:9a:e5:38:f6:8e:17:
55:9d:21:e4:17:48:f9:69:67:df:37:59:10:99:8b:
a1:02:67:b7:b9:4f:9e:14:42:fd:34:b9:99:76:a0:
f1:b1:1c:5f:6b:8b:f2:4c:93:68:81:ba:9d:4f:fb:
79:f2:74:a0:53:f9:dd:b0:7d:b7:2d:d2:ab:97:f9:
5f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:9F:43:BC:92:46:C9:48:18:C9:A4:3C:3F:18:8E:AC:14:BB:70:67
X509v3 Authority Key Identifier:
keyid:4C:54:EC:CE:6C:BC:9C:54:92:9E:AA:4B:22:B3:37:B0:FD:9B:36:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TFTszmy8nFSSnqpLIrM3sP2bNr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/02c5ec-7c6f-4ae2-9897-3059c89b72ea/1/TFTszmy8nFSSnqpLIrM3sP2bNr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/02c5ec-7c6f-4ae2-9897-3059c89b72ea/1/TFTszmy8nFSSnqpLIrM3sP2bNr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:c5:b0:15:f8:00:29:46:9f:20:a9:a8:38:ae:b3:81:ef:c7:
3f:1e:18:64:c0:4d:e1:0c:01:95:4d:e9:82:c9:89:70:78:47:
ef:2f:be:37:b4:4e:3f:ca:85:d7:05:f5:6c:96:37:f2:99:09:
ac:a8:67:7c:b7:dd:3f:81:ec:9a:c5:f9:60:27:7f:37:39:de:
5b:a5:de:f2:cc:67:9f:de:e6:7d:89:87:40:f0:1c:85:f5:03:
66:04:36:71:7a:46:e4:12:76:5e:13:38:23:89:25:65:30:4b:
3a:b4:29:32:a7:fb:cb:8e:06:87:44:00:99:fd:8d:37:fc:2a:
06:be:07:28:c3:5a:21:3b:43:52:0f:05:01:d4:2f:c6:b2:4e:
a7:60:c6:4f:ce:f5:4c:30:23:a4:8f:f5:50:9d:95:18:6f:29:
21:c4:75:f5:75:c8:db:8c:50:25:e5:3c:59:39:ba:01:f0:c6:
9b:1c:d1:a4:c6:0c:df:5c:b4:b2:f7:fe:9a:e8:8e:66:20:48:
b5:b4:a1:65:a1:84:52:40:63:2c:23:0c:f2:c5:13:73:d8:db:
70:4e:b9:40:f4:17:3d:ca:eb:14:52:b7:f4:73:78:1b:98:dd:
70:0a:7b:11:5c:c4:06:ab:1b:80:50:b0:58:de:30:2d:25:c0:
32:6f:70:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:31:43 2025 by rpki-client