Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/ed3b2e-f0fe-4460-850d-5847b1469326/1/TWh9higIIltFn6OZ5l-KBpRpq6M.mft
File: TWh9higIIltFn6OZ5l-KBpRpq6M.mft (raw, json)
Hash identifier: saPMFUrdR+wwx/kErZ0WohUmHaqD73HoQal3OxuNIZ8=
Subject key identifier: F0:FE:D1:B6:2E:34:07:53:20:2D:27:17:94:63:21:F6:31:50:DA:6F
Authority key identifier: 4D:68:7D:86:28:08:22:5B:45:9F:A3:99:E6:5F:8A:06:94:69:AB:A3
Certificate issuer: /CN=4d687d862808225b459fa399e65f8a069469aba3
Certificate serial: 0197B745057A9AFF868E68BC3A04CD8CFF79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TWh9higIIltFn6OZ5l-KBpRpq6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/ed3b2e-f0fe-4460-850d-5847b1469326/1/TWh9higIIltFn6OZ5l-KBpRpq6M.mft
Manifest number: 1546
Signing time: Sat 28 Jun 2025 16:00:43 +0000
Manifest this update: Sat 28 Jun 2025 16:00:43 +0000
Manifest next update: Sun 29 Jun 2025 16:00:43 +0000
Files and hashes: 1: TWh9higIIltFn6OZ5l-KBpRpq6M.crl (hash: IhLfY/zn/WkSqP2IV9I+U+S54ml12xANO7bN74IHgoM=)
2: yj8S8MOtSmVKNjXl11Yr8esDgtY.roa (hash: px/AqUdCFaeUdcOlWlEpkaK3sSjZNzpfw2t/zU4ncMc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/ed3b2e-f0fe-4460-850d-5847b1469326/1/TWh9higIIltFn6OZ5l-KBpRpq6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/ed3b2e-f0fe-4460-850d-5847b1469326/1/TWh9higIIltFn6OZ5l-KBpRpq6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/TWh9higIIltFn6OZ5l-KBpRpq6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:05:7a:9a:ff:86:8e:68:bc:3a:04:cd:8c:ff:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d687d862808225b459fa399e65f8a069469aba3
Validity
Not Before: Jun 28 16:00:43 2025 GMT
Not After : Jun 29 16:00:43 2025 GMT
Subject: CN=f0fed1b62e340753202d2717946321f63150da6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:1c:6b:80:fa:ff:85:43:11:cb:8d:37:50:e7:
e2:ce:19:d2:d6:2d:ae:da:7d:2f:90:b7:ce:d0:68:
9a:b1:a4:18:10:a1:ab:78:3d:17:15:a1:c9:60:50:
07:ba:91:24:41:37:06:3c:f7:86:47:f1:ac:ef:bc:
9f:d0:be:35:bc:87:7e:54:95:5b:01:f5:41:51:e0:
fb:66:e0:d8:1e:ef:76:de:22:04:6b:5c:9d:21:92:
1a:d8:7c:a6:93:e9:9d:a2:8c:72:f2:d3:64:a3:02:
f5:ca:5b:a8:52:97:06:ea:6f:5e:5d:8a:ce:7a:7e:
b1:3b:0c:8c:82:38:f5:bd:96:d6:3a:34:1a:0f:88:
d1:f3:85:a5:8e:77:a8:58:4f:45:ff:e5:8b:00:59:
29:3c:65:ec:80:73:61:03:26:a1:4c:06:5e:79:d4:
14:f2:19:79:65:f4:8d:a7:f6:d2:63:57:fa:d2:24:
bf:33:fe:87:d9:06:7a:52:51:b1:da:86:08:fc:b0:
8c:98:21:95:84:51:d9:f2:28:49:aa:f6:75:a9:db:
b0:b8:f9:84:82:73:53:e5:f1:8c:2d:70:cf:13:1b:
e6:2e:45:d0:64:3e:d7:ef:a4:cb:00:e3:2f:6a:71:
11:de:c1:6c:4f:0c:48:8c:a4:1c:89:78:8e:d8:d7:
a4:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:FE:D1:B6:2E:34:07:53:20:2D:27:17:94:63:21:F6:31:50:DA:6F
X509v3 Authority Key Identifier:
keyid:4D:68:7D:86:28:08:22:5B:45:9F:A3:99:E6:5F:8A:06:94:69:AB:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TWh9higIIltFn6OZ5l-KBpRpq6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/ed3b2e-f0fe-4460-850d-5847b1469326/1/TWh9higIIltFn6OZ5l-KBpRpq6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/ed3b2e-f0fe-4460-850d-5847b1469326/1/TWh9higIIltFn6OZ5l-KBpRpq6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:2a:ec:b2:21:18:de:14:fc:15:27:ac:8b:5a:02:9a:34:61:
6d:67:a1:1e:7b:bd:fd:99:14:01:7c:6d:cf:e0:41:2b:b2:2c:
a2:ce:53:c6:91:44:66:56:49:35:bf:2e:6f:11:84:f1:1f:3d:
54:c6:95:ca:78:da:5e:bf:7b:11:10:bd:a0:74:7d:44:02:cf:
44:ed:e4:40:81:a6:1c:6e:0a:1d:04:e4:6b:dc:76:25:4f:de:
f4:cd:61:dd:6d:74:30:f7:9b:bc:15:ae:8f:00:58:1d:04:64:
85:4d:7a:23:ab:ec:28:e8:32:c5:26:a4:28:9c:fb:3d:2f:66:
0c:80:84:11:f5:e0:53:43:17:55:ea:bf:59:fb:bc:e3:0a:e6:
6c:ac:49:de:d7:c4:1c:3e:e5:f7:9e:7c:e7:60:56:88:6e:bc:
28:7f:b9:12:9e:96:89:d9:b0:3e:53:d5:9f:17:a6:af:19:ff:
aa:e7:f0:9a:11:07:e1:0b:92:c5:da:96:fb:ea:1c:54:e3:78:
56:5e:d9:ef:75:0b:e9:cc:f7:3f:3c:74:fc:66:0a:65:d5:fe:
85:02:54:e5:b8:c5:8b:ef:59:c8:7f:ad:67:30:f2:b9:25:e0:
2e:63:94:07:15:2b:33:83:31:a3:83:62:55:3b:33:5e:f2:d1:
75:eb:3c:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:40:44 2025 by rpki-client