Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/3182ce-9d2f-4b22-abcd-acd9a2eca33f/1/tAyVhnwwhMTBai_rtGZRCQ8yR-Q.mft
File: tAyVhnwwhMTBai_rtGZRCQ8yR-Q.mft (raw, json)
Hash identifier: ilSjK8JOfCn+lFx5QwLsQBDQwpgRaNv6iH6+sp7zuHA=
Subject key identifier: 44:B8:8E:28:1D:92:31:61:0E:EA:D6:D5:B9:55:40:CA:0B:8C:CC:88
Authority key identifier: B4:0C:95:86:7C:30:84:C4:C1:6A:2F:EB:B4:66:51:09:0F:32:47:E4
Certificate issuer: /CN=b40c95867c3084c4c16a2febb46651090f3247e4
Certificate serial: 0197B9D9189F82F743BF483CA7E30246E508
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tAyVhnwwhMTBai_rtGZRCQ8yR-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/3182ce-9d2f-4b22-abcd-acd9a2eca33f/1/tAyVhnwwhMTBai_rtGZRCQ8yR-Q.mft
Manifest number: 0C34
Signing time: Sun 29 Jun 2025 04:01:41 +0000
Manifest this update: Sun 29 Jun 2025 04:01:41 +0000
Manifest next update: Mon 30 Jun 2025 04:01:41 +0000
Files and hashes: 1: lEEZzzybqBVZbE52j1UTaBha8S8.roa (hash: M0ghNe8I1TZs4KtvQ8xKIi7A+x2ciHjaRyld8EsOpko=)
2: tAyVhnwwhMTBai_rtGZRCQ8yR-Q.crl (hash: 3nc0gysVi4jQBNuLllzgjY+N6AanuIhPNFrE81+af8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/3182ce-9d2f-4b22-abcd-acd9a2eca33f/1/tAyVhnwwhMTBai_rtGZRCQ8yR-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/3182ce-9d2f-4b22-abcd-acd9a2eca33f/1/tAyVhnwwhMTBai_rtGZRCQ8yR-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/tAyVhnwwhMTBai_rtGZRCQ8yR-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:d9:18:9f:82:f7:43:bf:48:3c:a7:e3:02:46:e5:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b40c95867c3084c4c16a2febb46651090f3247e4
Validity
Not Before: Jun 29 04:01:41 2025 GMT
Not After : Jun 30 04:01:41 2025 GMT
Subject: CN=44b88e281d9231610eead6d5b95540ca0b8ccc88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:7e:99:de:1e:7a:9a:16:e3:3b:80:b3:f4:b9:
a1:e6:71:5c:60:3a:29:5c:32:90:e2:39:e1:e2:e1:
a7:bd:1f:05:c8:43:85:95:19:63:9f:93:c9:a8:f4:
97:96:37:2f:10:92:ca:67:d6:30:8f:d4:3e:e5:31:
1c:c9:a0:13:57:f6:c9:63:9f:f4:36:84:01:af:a9:
b4:c6:da:01:61:58:06:d1:e6:61:7f:5e:eb:73:6b:
46:46:83:7c:d7:10:08:df:9a:52:b8:0c:88:a6:7a:
b6:cb:8f:87:9f:e6:29:b2:37:b0:50:55:27:15:f3:
4e:0b:c5:b7:fe:29:db:35:58:06:c8:97:36:16:fe:
1b:32:6e:7d:2b:66:df:4e:78:69:a2:d7:cc:74:82:
cd:de:f4:45:75:c6:75:6c:ed:a1:b9:18:ce:94:7d:
6a:75:92:4e:59:ec:08:63:67:f1:f9:69:c8:de:c4:
f2:71:ba:ae:e4:3d:48:d6:ee:1c:80:cd:a5:d2:1c:
09:44:e9:98:19:ca:4c:69:d1:ee:08:78:36:ba:3c:
87:ae:4e:48:a2:0f:96:8f:0a:01:68:e9:42:0a:35:
b3:d1:97:19:93:26:62:89:23:0e:91:16:94:c6:c7:
ab:33:05:b8:c5:b6:c9:21:b8:31:1e:d2:ee:5f:ac:
ec:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:B8:8E:28:1D:92:31:61:0E:EA:D6:D5:B9:55:40:CA:0B:8C:CC:88
X509v3 Authority Key Identifier:
keyid:B4:0C:95:86:7C:30:84:C4:C1:6A:2F:EB:B4:66:51:09:0F:32:47:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tAyVhnwwhMTBai_rtGZRCQ8yR-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/3182ce-9d2f-4b22-abcd-acd9a2eca33f/1/tAyVhnwwhMTBai_rtGZRCQ8yR-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/3182ce-9d2f-4b22-abcd-acd9a2eca33f/1/tAyVhnwwhMTBai_rtGZRCQ8yR-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:25:c7:6c:4a:47:dc:f8:ee:c0:ba:e0:ac:87:fd:83:69:d6:
97:5a:c7:6d:d3:90:ca:d8:0b:19:aa:5b:b8:ba:87:68:ca:99:
47:84:a4:68:0f:f9:05:aa:d5:b4:1a:12:a0:39:75:1d:14:be:
cf:ab:da:9c:e9:72:f8:30:ad:25:72:60:ae:bf:7c:b9:04:66:
b6:0d:5c:e0:8a:8e:77:37:99:09:c8:a1:fe:28:72:9b:40:e2:
03:04:c6:f3:c4:3c:e1:e5:50:46:48:47:3c:65:3a:5b:24:74:
44:49:7c:75:02:e4:37:07:46:94:9b:38:66:1f:8f:e4:75:da:
89:f0:b6:d5:97:f6:8b:bb:01:1c:3f:16:e6:c7:e8:2d:59:7d:
e8:6b:fd:5f:10:9d:54:d1:58:2e:fd:18:00:ec:06:de:f2:e6:
12:22:54:a3:e6:ab:98:d6:95:8d:e1:0f:9d:2e:cc:2c:59:bc:
f7:de:af:1e:3a:8f:03:3c:f6:ec:3c:b4:55:88:e2:ca:59:1f:
7d:25:21:84:68:c4:4e:bf:1b:f5:18:c1:43:b1:7a:0e:3b:44:
3a:63:03:bf:05:61:95:36:bc:63:11:c1:06:9e:6f:b0:59:30:
c9:f5:b7:e6:ee:e7:8e:f6:cf:12:98:5c:27:12:6d:8a:8a:4c:
86:bf:5e:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 14:29:36 2025 by rpki-client