Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/1d2788-da40-431a-97d0-fbd46d9ca372/1/Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.mft
File: Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.mft (raw, json)
Hash identifier: OEymjAq+ZqFREgUGkaoqRZZ+lE9KgXPfy1TuOR+unKk=
Subject key identifier: 0B:4F:81:BF:C2:5E:04:AD:98:FA:5C:61:EA:68:A3:C1:8B:52:1A:26
Authority key identifier: 4D:BE:31:B6:BE:DC:51:F2:AA:2E:C0:A6:45:3F:2E:43:5E:80:8F:B5
Certificate issuer: /CN=4dbe31b6bedc51f2aa2ec0a6453f2e435e808fb5
Certificate serial: 0197B96B03A587801F500D6BCE4C2EA1DEDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/1d2788-da40-431a-97d0-fbd46d9ca372/1/Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.mft
Manifest number: 0C9C
Signing time: Sun 29 Jun 2025 02:01:27 +0000
Manifest this update: Sun 29 Jun 2025 02:01:27 +0000
Manifest next update: Mon 30 Jun 2025 02:01:27 +0000
Files and hashes: 1: 4f1jI7-qAw-Fm-OtnESqUBoebm0.roa (hash: Yj15262IImuG/zvO4RGd+KynWz9BG4CJpl9H3lrssA0=)
2: Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.crl (hash: lQ0f4okdgF0op1RE8fb9d2z/qmpN76ACb2kWp2YFqNY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/1d2788-da40-431a-97d0-fbd46d9ca372/1/Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/1d2788-da40-431a-97d0-fbd46d9ca372/1/Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:6b:03:a5:87:80:1f:50:0d:6b:ce:4c:2e:a1:de:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dbe31b6bedc51f2aa2ec0a6453f2e435e808fb5
Validity
Not Before: Jun 29 02:01:27 2025 GMT
Not After : Jun 30 02:01:27 2025 GMT
Subject: CN=0b4f81bfc25e04ad98fa5c61ea68a3c18b521a26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2b:65:71:eb:61:26:61:1f:7f:89:f7:e3:26:
da:db:ec:17:94:6c:b4:5e:4d:c4:44:b7:26:e4:82:
83:5c:d3:02:06:83:fb:63:6a:76:71:e7:e6:ae:12:
b2:0d:52:1d:e3:9c:e6:56:a3:34:4f:99:3a:a7:4a:
b0:4c:67:eb:ab:cc:28:12:05:1c:0e:22:57:85:b6:
63:f6:9c:08:bb:6d:30:db:ad:73:1c:a3:93:e7:7c:
9b:b0:79:4a:a4:03:73:63:31:67:c0:05:f7:76:10:
e7:4e:b6:19:0f:42:9c:8a:34:29:2b:8c:c9:8d:db:
92:06:a5:76:a5:98:f6:b7:0f:b1:d3:f6:5c:54:b0:
0c:90:23:20:2d:f2:e6:ab:c3:f7:30:95:00:38:a8:
5b:75:59:ce:48:59:05:03:cf:af:9b:f5:5b:1b:25:
d0:c7:27:ab:05:ec:61:2a:ec:d4:3f:6e:b5:72:a1:
44:72:77:77:37:82:9e:2e:da:35:be:87:e3:c7:32:
b4:6c:46:b4:34:99:e4:af:c3:8d:a0:22:da:30:6e:
a2:b1:15:f7:df:59:66:91:9a:db:83:6b:0f:d5:5d:
6b:eb:c5:67:07:86:cc:93:69:26:e0:dd:e3:9f:e6:
04:18:d6:34:84:5c:46:22:2e:80:b6:ab:47:ec:f1:
22:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:4F:81:BF:C2:5E:04:AD:98:FA:5C:61:EA:68:A3:C1:8B:52:1A:26
X509v3 Authority Key Identifier:
keyid:4D:BE:31:B6:BE:DC:51:F2:AA:2E:C0:A6:45:3F:2E:43:5E:80:8F:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/1d2788-da40-431a-97d0-fbd46d9ca372/1/Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/1d2788-da40-431a-97d0-fbd46d9ca372/1/Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:0e:1f:bb:91:5e:5f:33:30:8e:26:5d:43:b2:26:c7:9c:06:
71:bc:65:99:94:51:4b:ee:3d:97:f5:ed:3a:bb:ee:83:16:30:
f2:fc:f5:92:de:0f:4b:be:75:fd:4e:d1:41:7f:60:2e:78:62:
22:bd:f9:8c:c9:ee:ae:2e:44:4b:0d:ef:53:3f:e7:63:9e:7b:
c4:33:8d:3f:bc:e1:e2:c5:96:56:de:38:05:eb:b7:06:32:01:
41:7a:43:52:a5:54:8a:88:c4:60:37:fc:d0:5a:ab:f1:9f:c5:
7f:ac:de:49:c7:f2:15:8b:68:c1:ac:25:bd:d6:b8:24:7d:86:
e2:cd:1e:73:b3:e3:c3:ef:6f:3e:96:23:b1:b6:c5:09:dc:a1:
72:d9:33:df:d2:f3:b7:a8:04:61:3d:77:68:bc:fe:48:3a:f7:
26:ef:8a:8c:ce:cf:22:22:93:13:c6:1a:43:b3:0b:e5:48:dc:
43:0c:74:90:e6:06:82:3a:64:f0:c0:68:b5:08:3b:d7:84:72:
60:e1:5e:0a:b2:f1:93:1a:ea:30:40:b6:33:68:37:4c:73:c9:
63:10:30:0c:9b:72:9e:6b:b9:ca:5f:a3:62:2e:14:85:c5:b5:
a7:66:6d:83:bc:c1:ea:a0:0e:6d:4f:33:04:ad:0f:1e:50:c5:
82:9c:73:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:55:29 2025 by rpki-client