Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/9ff43e-f817-4ebe-a0d9-7a18931d985b/1/tn8bh-Z1L0VDm4UozJaLR3CloPs.mft
File: tn8bh-Z1L0VDm4UozJaLR3CloPs.mft (raw, json)
Hash identifier: ekIknkPPkXSn+o139Usm86vIKM3MFngn7hdfTKnSe20=
Subject key identifier: 09:D7:12:CE:6F:29:62:1F:F2:7B:AC:5F:ED:34:CC:35:C7:A3:B9:04
Authority key identifier: B6:7F:1B:87:E6:75:2F:45:43:9B:85:28:CC:96:8B:47:70:A5:A0:FB
Certificate issuer: /CN=b67f1b87e6752f45439b8528cc968b4770a5a0fb
Certificate serial: 0197B70F4B472B19F06A914AAD5D76690965
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tn8bh-Z1L0VDm4UozJaLR3CloPs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/9ff43e-f817-4ebe-a0d9-7a18931d985b/1/tn8bh-Z1L0VDm4UozJaLR3CloPs.mft
Manifest number: 15B3
Signing time: Sat 28 Jun 2025 15:02:02 +0000
Manifest this update: Sat 28 Jun 2025 15:02:02 +0000
Manifest next update: Sun 29 Jun 2025 15:02:02 +0000
Files and hashes: 1: kYfhtSfEKW3P-62E9GiF_Ua9EUo.roa (hash: p1no5bz1+uk9Sv3KCtgs/QuEn0taiRhnvBxPn7m9ACY=)
2: tn8bh-Z1L0VDm4UozJaLR3CloPs.crl (hash: pGYXYoeLb6WQ+Mjisn8c69bZ7e7ng8Bd5s3sQD4n9Sc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/9ff43e-f817-4ebe-a0d9-7a18931d985b/1/tn8bh-Z1L0VDm4UozJaLR3CloPs.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/9ff43e-f817-4ebe-a0d9-7a18931d985b/1/tn8bh-Z1L0VDm4UozJaLR3CloPs.mft
rsync://rpki.ripe.net/repository/DEFAULT/tn8bh-Z1L0VDm4UozJaLR3CloPs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:4b:47:2b:19:f0:6a:91:4a:ad:5d:76:69:09:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b67f1b87e6752f45439b8528cc968b4770a5a0fb
Validity
Not Before: Jun 28 15:02:02 2025 GMT
Not After : Jun 29 15:02:02 2025 GMT
Subject: CN=09d712ce6f29621ff27bac5fed34cc35c7a3b904
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:c4:8e:ab:fe:da:dc:c6:39:5b:a4:9d:cc:ee:
b7:a2:4e:03:f0:4d:e4:a6:ab:66:3f:b3:94:c1:0f:
47:1b:95:26:4a:f8:e6:4e:7b:75:77:51:77:b8:2b:
47:6d:b7:63:96:4e:fd:2e:dc:01:37:c1:85:31:6f:
d6:86:4f:d9:e8:c1:3d:64:da:8f:0d:4a:82:86:08:
7e:8f:e0:e7:f8:19:04:22:0e:64:ff:1a:88:87:e1:
0c:13:b1:4e:67:d1:3c:2f:fa:a3:a0:1d:b9:85:96:
8f:fa:0c:0a:0a:67:77:52:85:c4:8f:f5:e6:46:dd:
27:c6:ac:d8:62:ca:29:48:d7:8a:81:b7:f0:52:8e:
1c:96:97:f9:5b:4e:2d:37:07:16:2f:f1:8a:6d:a2:
ef:94:58:1b:ca:7a:32:c9:00:a4:3e:cc:2a:34:df:
fa:2d:9b:b6:81:d3:23:62:b9:b7:bc:97:00:ca:ae:
00:43:2b:7a:1a:2c:dd:08:66:b8:71:b5:75:70:a8:
33:3e:a8:eb:5e:8a:ea:97:84:1f:aa:96:d8:79:76:
f9:7c:f7:10:d0:de:eb:59:f9:bc:63:5e:c9:e1:99:
08:4d:e9:80:4c:be:e5:14:ec:bf:d7:72:54:bd:32:
a7:44:42:91:a1:ae:0f:5d:77:8c:3c:6a:43:14:fc:
0a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:D7:12:CE:6F:29:62:1F:F2:7B:AC:5F:ED:34:CC:35:C7:A3:B9:04
X509v3 Authority Key Identifier:
keyid:B6:7F:1B:87:E6:75:2F:45:43:9B:85:28:CC:96:8B:47:70:A5:A0:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tn8bh-Z1L0VDm4UozJaLR3CloPs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9ff43e-f817-4ebe-a0d9-7a18931d985b/1/tn8bh-Z1L0VDm4UozJaLR3CloPs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9ff43e-f817-4ebe-a0d9-7a18931d985b/1/tn8bh-Z1L0VDm4UozJaLR3CloPs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:90:de:c4:a7:9e:81:78:73:5b:44:af:96:91:0c:fc:76:9d:
a0:61:d3:c4:62:7f:2a:13:b2:d0:03:a8:08:aa:1d:7f:66:5c:
cd:e5:74:fc:b4:44:f3:36:7f:81:ee:9a:83:37:f2:11:65:94:
a3:ad:aa:7e:3d:86:0e:78:18:81:7b:cc:f6:d1:f1:c1:a2:d0:
ae:35:5f:3e:3d:42:0e:3d:fe:a6:86:45:7c:2e:34:f2:cc:3d:
2c:4e:3c:fc:92:d7:32:57:4f:1c:cb:6d:d6:b1:14:3d:14:e6:
e8:b7:6b:38:9b:a9:05:f3:8a:e4:b3:44:b6:c0:19:58:51:98:
ee:96:5a:e3:a3:5e:0e:49:d3:27:63:c6:61:ad:89:73:8d:58:
6a:8b:f4:16:ad:09:a2:70:81:0c:44:c5:a1:ac:5c:d1:b9:75:
a0:19:a8:e7:1e:cc:9a:06:ab:1b:94:f1:a6:14:39:4e:80:35:
eb:d6:c4:d2:5c:d3:a6:3e:f3:15:13:04:cc:31:14:12:ee:70:
9e:ea:36:0a:67:69:58:f8:79:18:6a:06:4d:12:87:a3:e9:99:
69:4a:28:44:51:f0:85:46:a4:32:4d:10:7c:7c:a5:43:ca:9b:
66:54:63:f0:7e:c6:3a:12:6a:30:a6:52:50:54:f4:44:2e:bf:
0f:da:19:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:04:29 2025 by rpki-client