Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/132ba8-7676-49f6-afcc-7d0423bda74c/1/tNftFLjVGiC67HtmDwioDNz4F78.mft
File: tNftFLjVGiC67HtmDwioDNz4F78.mft (raw, json)
Hash identifier: Qzx9qegKmZvoW2qdIM/wAifXu6ZcntMAu10+sM95lsk=
Subject key identifier: 70:A8:08:C4:D0:0E:ED:2E:3C:AF:06:3E:8E:44:A2:E6:AD:BB:16:9D
Authority key identifier: B4:D7:ED:14:B8:D5:1A:20:BA:EC:7B:66:0F:08:A8:0C:DC:F8:17:BF
Certificate issuer: /CN=b4d7ed14b8d51a20baec7b660f08a80cdcf817bf
Certificate serial: 0197B7EA738935A469334180B6A29288D883
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tNftFLjVGiC67HtmDwioDNz4F78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/132ba8-7676-49f6-afcc-7d0423bda74c/1/tNftFLjVGiC67HtmDwioDNz4F78.mft
Manifest number: 1516
Signing time: Sat 28 Jun 2025 19:01:24 +0000
Manifest this update: Sat 28 Jun 2025 19:01:24 +0000
Manifest next update: Sun 29 Jun 2025 19:01:24 +0000
Files and hashes: 1: VhTYh9Iw5PVI--2GM6MQuLQlHfw.roa (hash: 4Hkp0WmvBYBS95p1FHn/M3/EZ2GIH50SPjU4ACziYZE=)
2: YVY9twtvMqgJ8wFpvv3lKZVmEkQ.roa (hash: 17qlPl9D+uyL5rzeTz5pj3TELME7ziHzDZ+/fRR9Vec=)
3: tNftFLjVGiC67HtmDwioDNz4F78.crl (hash: vsmSB/b3/x83vZtr4F4P9uFDFmvh+SNHc4v6sIkfkX8=)
4: y_HvmHHGVlKjcbTPtfwbbemE9ts.roa (hash: 8SIoZagJaVQOy82S0A9ugj7Iv6sEqZZHPMha1KNQ3uM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/132ba8-7676-49f6-afcc-7d0423bda74c/1/tNftFLjVGiC67HtmDwioDNz4F78.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/132ba8-7676-49f6-afcc-7d0423bda74c/1/tNftFLjVGiC67HtmDwioDNz4F78.mft
rsync://rpki.ripe.net/repository/DEFAULT/tNftFLjVGiC67HtmDwioDNz4F78.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:73:89:35:a4:69:33:41:80:b6:a2:92:88:d8:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4d7ed14b8d51a20baec7b660f08a80cdcf817bf
Validity
Not Before: Jun 28 19:01:24 2025 GMT
Not After : Jun 29 19:01:24 2025 GMT
Subject: CN=70a808c4d00eed2e3caf063e8e44a2e6adbb169d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:f3:05:ee:f0:40:a6:de:b6:f8:ab:d8:7c:ef:
a0:35:be:1b:b7:6e:a9:2f:cc:6d:78:8b:7c:6a:8a:
5b:4b:4b:15:6f:b5:9a:1f:9c:1d:51:8d:62:63:c0:
b7:f2:90:17:e5:f0:a1:83:2c:72:ac:35:b1:61:00:
51:6c:48:80:0e:32:14:31:90:59:21:b3:f6:69:03:
37:f1:1a:1b:14:73:ed:c8:cd:c1:01:72:c2:ba:7e:
62:d4:52:a7:f9:0f:07:3c:57:1f:c8:d8:21:25:ba:
13:ca:13:c9:02:5b:30:f9:f3:5c:70:d0:5f:7a:ae:
b6:c0:9b:52:6c:cd:06:36:60:dd:a8:d6:51:a7:3e:
47:f2:9f:65:18:b0:28:c4:6a:c2:00:be:d7:36:cc:
d0:6d:9a:ab:7b:2c:21:cd:48:06:c0:ae:f2:2a:e4:
06:aa:c1:9e:b4:93:9e:f9:85:53:93:8a:40:9f:27:
eb:27:23:97:7d:9d:15:87:b7:6e:15:b2:86:f6:dd:
90:4c:8e:95:6a:d7:e1:2e:77:49:d9:bb:46:95:12:
d7:de:1b:49:2e:f3:2c:3a:b9:d1:72:25:48:bf:6e:
ba:a4:56:a4:c5:84:45:3a:8e:a3:f1:06:5a:a6:ab:
f5:41:ba:99:48:51:c9:19:aa:5b:f1:2b:76:54:82:
18:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:A8:08:C4:D0:0E:ED:2E:3C:AF:06:3E:8E:44:A2:E6:AD:BB:16:9D
X509v3 Authority Key Identifier:
keyid:B4:D7:ED:14:B8:D5:1A:20:BA:EC:7B:66:0F:08:A8:0C:DC:F8:17:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tNftFLjVGiC67HtmDwioDNz4F78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/132ba8-7676-49f6-afcc-7d0423bda74c/1/tNftFLjVGiC67HtmDwioDNz4F78.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/132ba8-7676-49f6-afcc-7d0423bda74c/1/tNftFLjVGiC67HtmDwioDNz4F78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:66:87:aa:15:b6:07:c1:a3:3b:0e:d6:45:11:f7:8f:0d:f1:
80:fb:3d:51:ef:87:92:a3:72:9b:1d:2e:b7:3f:9a:25:ba:1b:
2c:bf:f2:57:bc:8d:ec:21:e7:bb:af:3d:81:1d:3b:ff:b5:37:
76:74:1c:f1:ce:d2:bc:69:8b:31:25:65:70:73:a6:ef:9e:7d:
d3:af:11:d0:3b:b1:5d:7e:5d:84:68:b9:2f:53:2b:3b:a6:e2:
60:1d:a9:48:80:36:0c:76:f1:c3:78:5c:4e:c1:6a:ac:7c:4e:
98:08:84:9e:89:08:66:4b:a8:90:b6:29:77:a6:32:75:69:a0:
41:bd:bd:99:a1:dc:07:7a:4c:8f:9a:bf:52:9e:d1:ac:e6:58:
88:78:0e:21:e6:c2:6c:0e:0f:d4:c4:01:d7:52:2a:5d:a6:7d:
73:b7:be:98:16:ca:1d:cf:43:88:c5:db:12:e8:b8:65:9a:ab:
92:4b:de:6c:03:5f:03:09:2d:63:ee:81:e0:62:e3:9f:17:f0:
7b:c4:5f:24:af:3c:81:1b:84:70:a7:0c:73:d6:b4:87:c0:e0:
cc:c6:58:10:f0:59:f8:f6:95:56:f6:38:4c:7e:74:a1:b8:93:
a4:5e:22:ce:cb:2b:23:d6:dd:af:2b:a0:6b:fc:ac:9e:d7:01:
3c:40:b1:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:55:51 2025 by rpki-client