Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/fc7c82-3159-4d54-a0a1-35171aedd313/1/tkB0qoRJgw2psgs6-waC08Ay-f4.mft
File: tkB0qoRJgw2psgs6-waC08Ay-f4.mft (raw, json)
Hash identifier: SjbBgO6+6GdZolP4/61sxZB3YvPWZLdhhTPyjSskQq4=
Subject key identifier: CB:13:0F:8E:B5:7F:A4:57:34:BE:5F:60:10:9F:93:26:19:9B:0C:A4
Authority key identifier: B6:40:74:AA:84:49:83:0D:A9:B2:0B:3A:FB:06:82:D3:C0:32:F9:FE
Certificate issuer: /CN=b64074aa8449830da9b20b3afb0682d3c032f9fe
Certificate serial: 0197B74521D5DBF1F1DE75A6270900FF46EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tkB0qoRJgw2psgs6-waC08Ay-f4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/fc7c82-3159-4d54-a0a1-35171aedd313/1/tkB0qoRJgw2psgs6-waC08Ay-f4.mft
Manifest number: 15BD
Signing time: Sat 28 Jun 2025 16:00:50 +0000
Manifest this update: Sat 28 Jun 2025 16:00:50 +0000
Manifest next update: Sun 29 Jun 2025 16:00:50 +0000
Files and hashes: 1: BdOIN-x7p5NQNZFat3HBRk8aNP8.roa (hash: E6O+SQKCroETYNOj7yjRqDXwGgY2i2+LPEeaEfVM6HA=)
2: SvbWjBtA5USrFJEFyfsvP-SCofs.roa (hash: La++FukCI88aoCCAWTG9ojz1zryPe+WC1BNRSElIvDw=)
3: ZqMh09XL_OuL0ICq-TfvGdj4pmM.roa (hash: l5g5wXS3ZWKojPoOXqpehHnI+SHAfeYcurBv6Xo/WU8=)
4: tkB0qoRJgw2psgs6-waC08Ay-f4.crl (hash: X+QPKIFSezfIhMZvhiCSm9d/VAyDRhk/mLZhS5xZ0SI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/fc7c82-3159-4d54-a0a1-35171aedd313/1/tkB0qoRJgw2psgs6-waC08Ay-f4.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/fc7c82-3159-4d54-a0a1-35171aedd313/1/tkB0qoRJgw2psgs6-waC08Ay-f4.mft
rsync://rpki.ripe.net/repository/DEFAULT/tkB0qoRJgw2psgs6-waC08Ay-f4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:21:d5:db:f1:f1:de:75:a6:27:09:00:ff:46:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b64074aa8449830da9b20b3afb0682d3c032f9fe
Validity
Not Before: Jun 28 16:00:50 2025 GMT
Not After : Jun 29 16:00:50 2025 GMT
Subject: CN=cb130f8eb57fa45734be5f60109f9326199b0ca4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:58:a1:26:b6:bf:1a:b4:15:f3:8b:32:a7:bb:
7e:23:27:e4:65:04:ba:68:79:90:88:c9:c9:d9:ab:
83:15:c5:a8:a9:f7:c4:db:c3:ab:f0:2f:f8:74:14:
25:bb:5f:77:63:0a:37:51:6f:46:95:65:19:90:65:
9b:88:52:5f:01:14:52:f2:c3:1d:bc:de:e4:e9:3b:
80:ed:c6:27:e6:78:ad:a8:5b:1b:72:58:56:b7:9c:
da:01:a2:c9:7b:b3:8f:07:83:72:a1:0f:37:21:93:
8b:9e:0e:e3:c2:5a:b6:6c:d2:7d:ae:5b:e4:d0:cf:
6b:fa:7e:ea:bf:3a:b1:b7:f2:f6:9a:c5:1f:8d:55:
1e:59:99:55:f5:5a:b1:e0:ca:8a:19:a3:6f:27:b5:
e8:ac:70:78:31:d6:56:79:85:c6:a5:78:a0:b3:aa:
53:fc:9e:da:07:f4:58:ad:70:24:b9:6d:ba:59:21:
91:54:37:43:4a:84:8e:f9:59:db:2a:17:be:8c:a0:
d9:54:0c:2a:23:a3:41:91:53:4a:7b:72:c7:5b:35:
e8:5b:ef:d9:f8:94:be:1c:c6:71:23:1c:97:a3:e6:
eb:d6:a6:d7:dc:ec:bc:14:0c:9e:5b:48:2b:2c:48:
4d:39:bf:09:c8:23:75:e2:6c:96:13:77:c2:ce:b6:
2d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:13:0F:8E:B5:7F:A4:57:34:BE:5F:60:10:9F:93:26:19:9B:0C:A4
X509v3 Authority Key Identifier:
keyid:B6:40:74:AA:84:49:83:0D:A9:B2:0B:3A:FB:06:82:D3:C0:32:F9:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tkB0qoRJgw2psgs6-waC08Ay-f4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/fc7c82-3159-4d54-a0a1-35171aedd313/1/tkB0qoRJgw2psgs6-waC08Ay-f4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/fc7c82-3159-4d54-a0a1-35171aedd313/1/tkB0qoRJgw2psgs6-waC08Ay-f4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:dd:e9:66:50:a7:bc:bd:e5:31:af:da:b1:e1:4b:c3:9d:02:
bb:b5:97:26:bf:ea:cb:5f:c3:17:a2:4a:b1:d7:ce:53:c1:0e:
be:a4:1c:4e:3c:f8:de:97:1c:33:84:4e:af:ce:0d:af:1f:8f:
36:0c:6d:4d:9d:de:fc:61:ef:27:5c:0e:3b:ce:e4:d3:18:3f:
e4:04:74:ce:b4:5c:dc:8f:dc:65:0d:7c:20:96:0b:3d:b4:6a:
aa:50:9f:d0:6b:1b:61:e8:b5:52:3d:f7:c9:b7:0a:55:dc:cc:
38:17:55:1d:13:7b:81:08:a2:65:e1:99:71:7d:2f:26:da:64:
a4:af:aa:a1:b3:2d:47:ec:df:dd:e2:33:4b:76:66:b2:33:56:
64:11:28:7c:92:35:e1:ad:fe:2c:09:55:e2:21:68:a5:a8:06:
ba:f0:cc:35:6e:94:91:13:d3:19:68:c1:17:5a:fc:c9:76:db:
6c:38:ca:78:cf:96:35:6c:c2:64:64:3f:d5:da:98:27:09:dc:
11:30:b8:57:c3:3d:d6:8b:b4:b5:f7:7b:d0:66:de:69:72:0f:
55:d8:a8:ca:38:33:aa:27:aa:8f:6f:dd:16:a7:64:04:d0:bf:
98:85:6c:25:53:10:f7:f3:4a:6e:b9:c7:22:bc:47:d7:6d:77:
be:42:06:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:15:27 2025 by rpki-client