Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/tEJc9VATRKxazDB6vQrwE_rGcHM.mft
File: tEJc9VATRKxazDB6vQrwE_rGcHM.mft (raw, json)
Hash identifier: zENSLTdvuZvTAL3/vYRvFdiDltya694JGW4IyoKsTUQ=
Subject key identifier: AB:C3:2C:8B:05:28:41:69:B9:47:E8:B6:1F:A8:31:12:A4:B4:62:F6
Authority key identifier: B4:42:5C:F5:50:13:44:AC:5A:CC:30:7A:BD:0A:F0:13:FA:C6:70:73
Certificate issuer: /CN=b4425cf5501344ac5acc307abd0af013fac67073
Certificate serial: 0197B70E753F87056DEE3063DE98E88B0FD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tEJc9VATRKxazDB6vQrwE_rGcHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/tEJc9VATRKxazDB6vQrwE_rGcHM.mft
Manifest number: 11BF
Signing time: Sat 28 Jun 2025 15:01:07 +0000
Manifest this update: Sat 28 Jun 2025 15:01:07 +0000
Manifest next update: Sun 29 Jun 2025 15:01:07 +0000
Files and hashes: 1: iP514Grfm7HoMaMSlriqRZUp57w.roa (hash: uxTzsQkoKG+2gHXofBTy3Sd+QDMMkyYiw3WNGMp0rf8=)
2: tEJc9VATRKxazDB6vQrwE_rGcHM.crl (hash: A5c+dNMHgK/AZFUIz3M9vm57uR4t904K4k88X30QnYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/tEJc9VATRKxazDB6vQrwE_rGcHM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/tEJc9VATRKxazDB6vQrwE_rGcHM.mft
rsync://rpki.ripe.net/repository/DEFAULT/tEJc9VATRKxazDB6vQrwE_rGcHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:75:3f:87:05:6d:ee:30:63:de:98:e8:8b:0f:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4425cf5501344ac5acc307abd0af013fac67073
Validity
Not Before: Jun 28 15:01:07 2025 GMT
Not After : Jun 29 15:01:07 2025 GMT
Subject: CN=abc32c8b05284169b947e8b61fa83112a4b462f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:b0:17:19:99:e4:a9:7f:34:ce:2a:5c:5c:6a:
04:9e:6c:b8:8c:9e:c4:c2:46:ff:83:0a:32:61:35:
30:ac:e8:4c:b4:25:93:81:7b:e8:6f:1c:4c:02:7a:
bf:ff:54:36:d9:f5:8b:58:86:30:70:b6:c2:44:44:
74:29:4a:47:6a:a6:ca:be:5d:2a:cc:8c:19:dd:d4:
ce:91:9e:0f:84:fb:36:63:3e:da:45:84:3f:85:d9:
b0:28:ec:14:77:86:95:c1:02:50:da:4e:2b:ce:4e:
21:98:95:c4:6a:6b:39:7a:b4:1a:d0:be:00:09:dd:
27:ce:47:56:18:b2:ce:21:06:16:75:ff:4f:3a:4d:
e4:fb:3d:b2:fe:fb:22:20:08:27:4e:41:a2:c3:d7:
a1:40:b0:23:17:4a:a0:7b:f7:ef:ed:a1:20:a5:26:
4c:a6:a5:93:94:fc:47:fd:64:e5:24:4b:8c:4e:77:
5c:4b:eb:61:68:16:63:51:ed:b1:56:da:32:24:87:
26:2b:05:94:19:9c:93:96:bc:fc:ca:ce:8f:fe:d9:
7b:ec:d4:9b:dc:25:30:53:0a:66:7d:c5:5e:a7:f8:
38:88:a1:09:43:3d:ca:1e:b4:76:bf:8d:c1:0a:20:
56:b9:1d:09:d8:a5:41:06:67:ef:a5:2d:3c:c1:3d:
85:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:C3:2C:8B:05:28:41:69:B9:47:E8:B6:1F:A8:31:12:A4:B4:62:F6
X509v3 Authority Key Identifier:
keyid:B4:42:5C:F5:50:13:44:AC:5A:CC:30:7A:BD:0A:F0:13:FA:C6:70:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tEJc9VATRKxazDB6vQrwE_rGcHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/tEJc9VATRKxazDB6vQrwE_rGcHM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/tEJc9VATRKxazDB6vQrwE_rGcHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:9d:cf:67:e0:af:b8:25:7d:77:3b:2b:07:da:70:64:27:ea:
1a:a7:a4:dc:b3:cf:2c:13:dd:8d:05:52:43:63:aa:f6:a9:39:
04:4b:48:57:47:c9:ea:13:45:87:fe:c2:28:1a:1d:45:eb:76:
0f:fe:d9:3d:4a:5e:90:08:e6:0d:55:6c:1b:02:18:95:41:30:
28:77:58:06:3e:78:1c:c3:31:e3:56:56:57:ad:62:f6:b1:a9:
05:a2:fc:f7:34:6e:f6:0c:d9:e0:43:06:b3:76:e4:cb:f6:8d:
ab:c8:10:f8:f2:4f:a2:fa:15:98:8b:c8:da:4a:cc:69:c1:3f:
f0:70:7f:fb:36:d9:a7:99:52:dd:57:e7:49:4e:c5:e0:27:5e:
a8:9c:f7:a5:a4:17:74:94:8c:41:11:69:61:b6:55:8f:fe:3f:
41:da:dd:fa:c6:76:b2:02:54:af:f2:24:7c:44:31:cc:75:fb:
5e:d9:26:58:41:1e:ea:21:cd:80:8d:b1:63:d5:74:03:7c:d7:
b2:60:48:11:d2:9a:51:ec:e0:58:bf:ee:af:14:2c:cf:ac:0c:
a0:20:89:56:49:af:d0:01:02:fa:6a:15:b8:aa:cb:4a:53:96:
ce:61:6c:bf:1b:bb:36:97:91:55:0a:59:ce:8f:85:a9:5a:05:
eb:08:0a:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:29:48 2025 by rpki-client