Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.mft
File: tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.mft (raw, json)
Hash identifier: KcKWIKEMW8KxXaaR3rMojfomgOc0oTcZeXCsPe5l7nI=
Subject key identifier: 63:D5:54:93:74:C0:7B:28:33:C4:8B:D8:87:2D:4E:10:00:1F:4A:83
Authority key identifier: B4:09:16:8F:DB:52:E9:B7:D1:A7:A5:E8:F5:18:ED:FB:C2:C3:F9:AF
Certificate issuer: /CN=b409168fdb52e9b7d1a7a5e8f518edfbc2c3f9af
Certificate serial: 0197C3134F06F626F60EEF4F83386D1EF58E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.mft
Manifest number: 0C85
Signing time: Mon 30 Jun 2025 23:01:51 +0000
Manifest this update: Mon 30 Jun 2025 23:01:51 +0000
Manifest next update: Tue 01 Jul 2025 23:01:51 +0000
Files and hashes: 1: 3R1qEXucRzxQh626HSW1D35Fl4s.roa (hash: LtQHe1lS81VaVTgB7dK3iqoJ6l+gsJCEbPPIKSQ56qA=)
2: shBZifpLlKUixrRLPCki_9Cdo5k.roa (hash: vUCEHBiQ5vk3QwGcMpMB9RyrWPTOpvKerhzJgaIKpHk=)
3: tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.crl (hash: wa7NTHsfv2rwvRMTQSIgNAEPpvSjGT8S5PYvZFQODLo=)
4: xPMhM3gDhaqkEeW-0RAQthU0wZQ.roa (hash: +K0EshtD5Pam9WJWgjYOHCV5ZtA/67vGEzp1bYJI+K0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 15:11:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c3:13:4f:06:f6:26:f6:0e:ef:4f:83:38:6d:1e:f5:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b409168fdb52e9b7d1a7a5e8f518edfbc2c3f9af
Validity
Not Before: Jun 30 23:01:51 2025 GMT
Not After : Jul 1 23:01:51 2025 GMT
Subject: CN=63d5549374c07b2833c48bd8872d4e10001f4a83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b7:41:3e:3f:98:25:c0:a6:f9:ff:f0:89:af:
69:d6:7c:63:bb:48:9c:96:dd:2d:0d:de:92:af:24:
73:21:c7:70:28:d7:8e:01:b4:f4:2b:99:4d:31:67:
17:d1:59:5f:15:80:c7:b7:08:5f:8c:dd:72:66:24:
1e:d7:ce:d5:f0:48:ff:b9:d5:ad:c6:be:82:7d:72:
6c:4f:f1:bd:cb:a0:fb:58:68:f5:30:5d:65:5e:6d:
cf:f4:02:b1:cb:c8:8f:de:1b:56:83:94:53:ba:f4:
64:65:b0:fd:e9:ce:03:65:b2:f5:c5:4a:12:14:07:
79:1d:0d:0f:97:25:5c:7c:1c:51:b2:9c:7a:35:d3:
a3:ae:db:a4:e6:4b:1d:04:6f:d9:7b:03:d3:da:74:
cb:05:ef:01:8d:2e:75:aa:ce:44:87:4b:63:69:6a:
87:59:07:59:fb:20:98:bf:2e:1d:25:9c:c4:34:5c:
21:55:28:3a:3b:4c:29:cd:87:7e:e9:15:83:35:d8:
c6:ef:ea:cf:29:e7:aa:dc:eb:ed:fd:33:df:92:4d:
7a:1f:4b:9f:11:5b:33:f5:33:9e:e3:3e:ca:85:f2:
03:4b:c8:73:6d:5e:b0:4b:43:80:51:d3:8a:7b:20:
ec:1b:7e:c0:f7:93:ff:b6:dc:95:35:89:32:46:62:
c8:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:D5:54:93:74:C0:7B:28:33:C4:8B:D8:87:2D:4E:10:00:1F:4A:83
X509v3 Authority Key Identifier:
keyid:B4:09:16:8F:DB:52:E9:B7:D1:A7:A5:E8:F5:18:ED:FB:C2:C3:F9:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:76:d4:55:1c:3d:54:02:b0:81:1a:dd:64:42:c2:75:ee:83:
59:bf:96:de:df:62:8e:31:45:7e:1f:6f:0f:61:b1:bd:65:9a:
1c:93:ce:32:2c:f3:69:14:c6:c3:27:fe:55:2b:4a:0f:71:7e:
e9:de:0a:b0:cb:96:3a:2b:dc:ea:d9:2d:12:1d:fe:1a:fb:62:
f0:ce:9f:3c:ec:57:5f:54:5e:9f:7c:a9:29:89:11:45:8a:e3:
70:4e:18:1a:4e:c2:5e:5f:ac:ab:98:35:07:e1:21:f7:a8:e6:
95:ee:95:71:ec:10:1b:f2:c1:ed:7b:e3:8f:8a:d5:9f:16:ab:
d5:5e:90:32:01:54:9b:9a:cc:29:5a:57:26:8f:6d:34:50:43:
1f:c7:50:6e:9a:88:72:6b:56:3a:22:05:85:fc:d2:e0:8e:4d:
26:2a:9a:fd:8a:9c:36:ad:d3:e0:5f:0e:a2:cc:e7:53:f1:84:
04:66:7e:d7:32:6b:79:6f:db:43:64:39:62:91:2f:b4:fe:a6:
12:f0:4b:e9:12:76:71:8e:7f:38:25:a1:36:92:a5:6c:c2:d4:
28:ce:e0:6e:bf:23:0d:7c:50:5f:68:bd:ab:ed:ea:cd:56:c0:
36:be:56:c2:74:e7:21:a0:83:e2:6d:30:44:53:68:64:17:fb:
d0:78:8d:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 00:34:27 2025 by rpki-client