Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/e828b7-b1d8-4f40-bd30-7c0497913af0/1/TQ8u53Yh6iXCgZ1OrJXFgYd-MM0.mft
File: TQ8u53Yh6iXCgZ1OrJXFgYd-MM0.mft (raw, json)
Hash identifier: 72SiYcljF0hO3AhexTQKsU65lusV3nizyJj3SrRpOas=
Subject key identifier: A9:D2:B9:AB:EA:20:9D:30:00:5E:FF:99:58:0C:5C:E2:20:0D:A7:00
Authority key identifier: 4D:0F:2E:E7:76:21:EA:25:C2:81:9D:4E:AC:95:C5:81:87:7E:30:CD
Certificate issuer: /CN=4d0f2ee77621ea25c2819d4eac95c581877e30cd
Certificate serial: 0197B6A0414C80429E1F347EB6E07A593A1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TQ8u53Yh6iXCgZ1OrJXFgYd-MM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/e828b7-b1d8-4f40-bd30-7c0497913af0/1/TQ8u53Yh6iXCgZ1OrJXFgYd-MM0.mft
Manifest number: 0D11
Signing time: Sat 28 Jun 2025 13:00:45 +0000
Manifest this update: Sat 28 Jun 2025 13:00:45 +0000
Manifest next update: Sun 29 Jun 2025 13:00:45 +0000
Files and hashes: 1: PVatpozxq2iSr5EjDz4p95PO1D8.roa (hash: jnj6J4YwXSNpdZA8cx57mMPaW12cBZG8T42Zb5JhBQ4=)
2: TQ8u53Yh6iXCgZ1OrJXFgYd-MM0.crl (hash: AC09UM0mT3SvoDm26/bfaGajLmKEvEI79kt2nTFA+GE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/e828b7-b1d8-4f40-bd30-7c0497913af0/1/TQ8u53Yh6iXCgZ1OrJXFgYd-MM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/e828b7-b1d8-4f40-bd30-7c0497913af0/1/TQ8u53Yh6iXCgZ1OrJXFgYd-MM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/TQ8u53Yh6iXCgZ1OrJXFgYd-MM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:41:4c:80:42:9e:1f:34:7e:b6:e0:7a:59:3a:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d0f2ee77621ea25c2819d4eac95c581877e30cd
Validity
Not Before: Jun 28 13:00:45 2025 GMT
Not After : Jun 29 13:00:45 2025 GMT
Subject: CN=a9d2b9abea209d30005eff99580c5ce2200da700
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:36:4a:50:d0:88:ab:18:cf:fc:c3:12:ba:ae:
61:09:ca:85:aa:19:99:e4:a8:44:4f:d3:f1:b7:c7:
6f:c0:38:79:3d:4a:ce:ad:b4:03:c1:24:d3:cc:17:
9b:14:ee:bb:f3:63:eb:12:d7:49:a9:0d:c3:10:00:
f0:6d:1c:4e:fe:53:98:3d:cc:c6:72:2f:69:e2:5f:
cc:b5:32:6f:70:8c:ad:50:79:c6:39:eb:f9:96:d2:
39:81:d1:27:ae:eb:99:d0:7d:ac:bf:e3:9c:76:54:
7a:ac:56:fd:57:10:43:54:d1:c7:76:c0:bf:90:bc:
89:26:92:25:b1:62:2a:e3:34:c5:64:65:db:e5:f1:
47:47:2e:69:7e:72:10:db:1d:0c:41:e7:49:38:75:
e9:c8:a3:37:61:ad:95:b8:78:6f:3c:95:c1:92:3a:
71:e1:fa:a9:7d:fd:33:8d:57:ec:d3:50:45:a1:c1:
4d:dc:2b:c7:23:86:f3:d4:6a:87:77:2f:0f:16:16:
09:3f:6a:23:b5:79:07:cf:9e:de:e0:2e:7f:74:7a:
d9:c1:da:01:f1:ef:df:c7:a2:55:ef:44:e0:e3:73:
42:27:3d:8f:11:c2:7a:83:5d:61:a2:95:70:e7:d6:
d4:3a:17:cd:0d:e8:08:0e:26:92:b7:ff:61:bd:1d:
0d:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:D2:B9:AB:EA:20:9D:30:00:5E:FF:99:58:0C:5C:E2:20:0D:A7:00
X509v3 Authority Key Identifier:
keyid:4D:0F:2E:E7:76:21:EA:25:C2:81:9D:4E:AC:95:C5:81:87:7E:30:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TQ8u53Yh6iXCgZ1OrJXFgYd-MM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/e828b7-b1d8-4f40-bd30-7c0497913af0/1/TQ8u53Yh6iXCgZ1OrJXFgYd-MM0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/e828b7-b1d8-4f40-bd30-7c0497913af0/1/TQ8u53Yh6iXCgZ1OrJXFgYd-MM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:45:e1:6f:4c:cd:c0:6d:2f:5b:05:24:f3:ea:dc:0c:57:65:
74:46:d0:a3:2e:0c:04:3f:89:59:d3:3e:fa:1a:37:bd:43:e1:
30:34:a8:84:bf:a2:49:cb:e9:99:85:2e:d8:86:9f:5a:a6:3a:
b1:79:ea:d7:b2:b7:82:09:1c:d9:42:4a:ee:dc:17:25:d1:81:
08:be:7d:06:38:51:35:89:0a:e6:b3:9e:25:98:4f:7f:76:5e:
d8:27:81:fa:6b:6d:00:99:82:b8:2f:a8:dc:57:cf:63:c6:7a:
8c:0f:6d:2a:d1:3b:8c:92:4d:0e:66:f3:55:45:74:78:88:9d:
e9:c3:4d:12:3e:77:98:b1:f2:85:21:d9:e1:1c:8a:0b:1a:5d:
05:f2:e4:03:32:95:65:bd:aa:c7:dd:2a:a2:99:39:0c:e7:5b:
39:23:f8:e6:d4:16:b0:c7:4f:d9:d4:13:3c:cd:92:22:bc:b5:
8a:28:5b:3d:0c:dd:30:c0:83:27:a7:06:6d:3a:5b:30:d8:bb:
fb:29:20:0d:ad:5b:41:25:91:ff:12:f1:e8:c1:eb:f1:1c:7c:
71:23:ac:da:b6:f0:23:bd:fc:a6:7a:2f:ca:ee:52:85:58:ef:
5e:fc:19:61:05:54:63:5a:f1:aa:3e:13:33:d7:b6:14:cb:cf:
54:e4:06:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:09:24 2025 by rpki-client