Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/e6f13e-ebeb-4e26-9f91-8183751813d9/1/tTsKRfBg4Q7M8Sa29mdYm4AyjJU.mft
File: tTsKRfBg4Q7M8Sa29mdYm4AyjJU.mft (raw, json)
Hash identifier: 9XgqHtOKEryilCOTFVG+HJn95ExbePUbFlbMHnjVmsE=
Subject key identifier: 9A:D8:B4:CE:3B:3B:B6:B2:DF:F2:83:70:31:C6:D6:69:B1:39:74:90
Authority key identifier: B5:3B:0A:45:F0:60:E1:0E:CC:F1:26:B6:F6:67:58:9B:80:32:8C:95
Certificate issuer: /CN=b53b0a45f060e10eccf126b6f667589b80328c95
Certificate serial: 0197B7B339794129096DE2C732284DB10196
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tTsKRfBg4Q7M8Sa29mdYm4AyjJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/e6f13e-ebeb-4e26-9f91-8183751813d9/1/tTsKRfBg4Q7M8Sa29mdYm4AyjJU.mft
Manifest number: 0FB1
Signing time: Sat 28 Jun 2025 18:01:05 +0000
Manifest this update: Sat 28 Jun 2025 18:01:05 +0000
Manifest next update: Sun 29 Jun 2025 18:01:05 +0000
Files and hashes: 1: QmuYhMxVHMJMwyzvnCygHs-m3Zo.roa (hash: /n3/bE2lrLZKCXuOWQR91nGS2U+GVup7q9CGUuChZsQ=)
2: tTsKRfBg4Q7M8Sa29mdYm4AyjJU.crl (hash: lWjSbhaMOnt25/4PJWOD3biAG5JVyPO4EhnxFW1aZEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/e6f13e-ebeb-4e26-9f91-8183751813d9/1/tTsKRfBg4Q7M8Sa29mdYm4AyjJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/e6f13e-ebeb-4e26-9f91-8183751813d9/1/tTsKRfBg4Q7M8Sa29mdYm4AyjJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tTsKRfBg4Q7M8Sa29mdYm4AyjJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:39:79:41:29:09:6d:e2:c7:32:28:4d:b1:01:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b53b0a45f060e10eccf126b6f667589b80328c95
Validity
Not Before: Jun 28 18:01:05 2025 GMT
Not After : Jun 29 18:01:05 2025 GMT
Subject: CN=9ad8b4ce3b3bb6b2dff2837031c6d669b1397490
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b4:66:47:1a:e2:f2:8b:56:49:ce:d4:21:c2:
b1:54:0c:6e:dc:66:b2:de:75:32:ec:52:d9:8a:b4:
a6:1e:98:9c:f6:b3:44:f4:08:01:22:d2:cf:d3:b2:
c9:31:ec:2e:46:68:93:57:cf:37:09:83:04:a8:a2:
1f:35:2d:51:a4:d6:83:2f:e7:5d:7e:65:55:c9:d4:
2c:45:45:a0:3c:85:9f:c4:d9:f2:d2:88:94:10:7a:
a6:0f:91:dc:17:49:f2:2e:8c:09:a7:fd:5b:6b:54:
77:0d:a2:88:56:dc:ed:a3:b9:1c:c6:09:60:e3:99:
a2:da:ad:81:04:d8:ea:82:00:a7:3f:4d:f0:e7:dc:
c8:26:24:a8:b4:c9:13:4b:ec:4d:99:c0:87:55:60:
b9:1d:2c:85:4f:08:23:ff:34:62:47:69:8c:ae:de:
73:3e:88:10:2c:dc:9e:1c:73:fa:28:15:73:52:0c:
6e:3b:f5:d0:bb:4b:c9:42:2f:e2:a7:cf:29:32:06:
89:5f:39:b3:4f:27:13:a9:6b:ff:51:70:74:32:65:
c9:0f:da:89:4e:66:53:ba:91:80:52:49:95:96:f9:
38:0b:d1:57:89:0b:a8:ea:d4:15:86:08:b8:73:77:
3a:c5:9a:47:0a:66:ad:3a:6e:9f:92:79:9f:e3:97:
79:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:D8:B4:CE:3B:3B:B6:B2:DF:F2:83:70:31:C6:D6:69:B1:39:74:90
X509v3 Authority Key Identifier:
keyid:B5:3B:0A:45:F0:60:E1:0E:CC:F1:26:B6:F6:67:58:9B:80:32:8C:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tTsKRfBg4Q7M8Sa29mdYm4AyjJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e6f13e-ebeb-4e26-9f91-8183751813d9/1/tTsKRfBg4Q7M8Sa29mdYm4AyjJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e6f13e-ebeb-4e26-9f91-8183751813d9/1/tTsKRfBg4Q7M8Sa29mdYm4AyjJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:0d:56:1e:d7:03:d4:6e:56:eb:57:e1:13:c5:a4:52:d6:a7:
27:7a:01:79:99:ab:90:d7:20:ca:a8:4e:16:64:1f:44:c4:c6:
f5:1f:58:55:1d:06:92:02:5a:4f:e9:c1:75:6c:d6:d5:25:64:
d4:23:78:c2:c2:74:fe:3e:b9:c5:4f:1e:8b:79:d1:a3:4d:23:
2b:aa:bf:f7:e9:98:3e:dd:f7:52:a8:fe:8f:b7:cc:18:37:f4:
fe:65:34:3f:63:4e:cc:69:6c:f8:d2:b4:70:a7:29:05:f5:75:
4d:d7:2e:2b:c9:bf:92:c4:41:3e:c3:15:0f:52:a6:74:08:6d:
87:1f:6b:d9:b8:75:4a:d8:0a:30:0e:f1:71:0f:3d:d4:85:0e:
32:d3:7b:29:62:8f:3a:e4:a6:dd:d4:fe:91:90:99:6d:20:e0:
2b:3f:4a:9e:d3:d7:fd:93:bf:ab:8f:80:20:c0:56:00:7a:d0:
e3:36:64:9a:d1:01:d2:6d:c8:bf:c5:6c:26:f7:58:36:83:72:
42:89:e8:65:71:01:89:c1:eb:af:a7:1f:36:61:f1:14:6d:96:
8b:cf:f0:e4:62:c1:e9:e7:6a:bf:b0:b6:27:79:99:fd:45:b1:
f8:e2:cf:fa:2f:f7:3e:9b:c6:39:7d:b4:77:ab:e8:ba:25:b3:
f3:d7:56:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:15:40 2025 by rpki-client