Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/cf2ebf-2a09-43d2-a225-a165359a6211/1/TuQFf56gFAzvfOR4k2nFzwH3xo4.mft
File: TuQFf56gFAzvfOR4k2nFzwH3xo4.mft (raw, json)
Hash identifier: czpbBATjfZQxGsF2TfBFmQtooVH0aaGuzLto7MYtL0c=
Subject key identifier: 2D:3F:C4:F5:07:BA:5A:9C:86:A8:91:63:01:2B:C7:9D:6A:67:C3:BC
Authority key identifier: 4E:E4:05:7F:9E:A0:14:0C:EF:7C:E4:78:93:69:C5:CF:01:F7:C6:8E
Certificate issuer: /CN=4ee4057f9ea0140cef7ce4789369c5cf01f7c68e
Certificate serial: 0197C04961F5113D396D6E791D278D0D6B4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TuQFf56gFAzvfOR4k2nFzwH3xo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/cf2ebf-2a09-43d2-a225-a165359a6211/1/TuQFf56gFAzvfOR4k2nFzwH3xo4.mft
Manifest number: 1410
Signing time: Mon 30 Jun 2025 10:02:03 +0000
Manifest this update: Mon 30 Jun 2025 10:02:03 +0000
Manifest next update: Tue 01 Jul 2025 10:02:03 +0000
Files and hashes: 1: CEuXJrDVGtc7Z4aBHwivyFbJk6I.roa (hash: YlEuDFYK1ghHbSy2lJ7W4OAiAQ8b74GXZr4K2Q1Nk+o=)
2: TuQFf56gFAzvfOR4k2nFzwH3xo4.crl (hash: l3SniaVGE8Z7XIRs0ebin/hgnY8G+Uy6JgxXwWZPC98=)
3: zQYGnUVB4bBy-t9A3BsXP2JPTI8.roa (hash: yYhiUqDeYjOIAS1CW8QCSgxrWRWrSjdPUM0N7RvDxVg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/cf2ebf-2a09-43d2-a225-a165359a6211/1/TuQFf56gFAzvfOR4k2nFzwH3xo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/cf2ebf-2a09-43d2-a225-a165359a6211/1/TuQFf56gFAzvfOR4k2nFzwH3xo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TuQFf56gFAzvfOR4k2nFzwH3xo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 10:02:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c0:49:61:f5:11:3d:39:6d:6e:79:1d:27:8d:0d:6b:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ee4057f9ea0140cef7ce4789369c5cf01f7c68e
Validity
Not Before: Jun 30 10:02:03 2025 GMT
Not After : Jul 1 10:02:03 2025 GMT
Subject: CN=2d3fc4f507ba5a9c86a89163012bc79d6a67c3bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b4:c1:c7:ae:b6:70:27:c0:c7:9a:21:d9:2b:
fc:d7:45:73:06:92:0e:61:e1:f6:35:2c:06:11:46:
8c:a3:6f:0a:42:e6:a8:d9:68:84:81:54:4d:b0:ea:
b6:7a:fc:27:b5:80:81:4f:78:02:3c:75:4a:4d:a5:
4a:b6:2d:06:f6:fa:01:b0:5c:81:aa:e2:a9:2e:2f:
7f:f4:cc:3f:2a:a5:5f:70:59:a6:4d:f4:a2:38:40:
c4:5e:c6:e2:7e:f8:25:55:49:31:1f:cb:da:ad:f3:
7f:c4:54:a6:af:fd:61:bd:18:d8:de:c4:8c:38:cf:
b3:5c:d5:f2:aa:f9:3a:48:02:2a:c0:ef:e5:c9:dc:
ab:52:25:97:3c:54:b6:78:69:36:32:e9:de:fb:32:
04:26:04:b3:51:0a:14:e0:fb:f6:84:3d:f0:2b:d0:
e4:69:ad:6b:5e:1d:7f:f9:99:c0:43:f9:80:ef:be:
89:1a:5d:2e:2e:c3:a8:23:b2:30:09:6d:20:64:22:
01:1e:1f:4e:5d:49:5b:6a:5a:a9:d0:a6:be:ae:b2:
99:5a:1f:bb:51:65:35:4a:cf:ae:ce:da:89:69:ce:
61:8e:35:fc:c0:36:b9:8b:42:8e:7d:c1:f6:0f:6a:
d2:84:20:3b:79:b3:21:5d:ef:46:c2:f3:c3:df:0f:
b5:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:3F:C4:F5:07:BA:5A:9C:86:A8:91:63:01:2B:C7:9D:6A:67:C3:BC
X509v3 Authority Key Identifier:
keyid:4E:E4:05:7F:9E:A0:14:0C:EF:7C:E4:78:93:69:C5:CF:01:F7:C6:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuQFf56gFAzvfOR4k2nFzwH3xo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/cf2ebf-2a09-43d2-a225-a165359a6211/1/TuQFf56gFAzvfOR4k2nFzwH3xo4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/cf2ebf-2a09-43d2-a225-a165359a6211/1/TuQFf56gFAzvfOR4k2nFzwH3xo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:6f:63:d5:fa:aa:88:a0:ec:bd:24:b8:95:06:2c:a1:b8:d4:
15:e0:0b:be:52:f0:42:3b:c9:e8:1c:95:ab:9a:04:35:42:47:
c4:fe:78:e4:94:eb:89:23:70:a6:c6:96:53:0d:91:94:c7:c3:
19:90:0d:93:e3:fb:6c:1d:8a:1e:5a:de:0a:e2:3a:df:e6:d6:
09:90:50:ba:e3:36:a1:7e:ce:3c:5b:99:b1:bc:76:51:2d:92:
c4:09:f0:5d:6a:d9:f1:1c:8b:d2:75:86:ac:e5:f0:10:d1:91:
96:94:38:47:86:69:2c:08:a9:ff:bf:94:6f:eb:5b:7d:86:16:
14:76:cb:9a:28:ff:26:48:e5:19:c9:00:f9:9d:a0:93:1f:10:
92:be:35:f3:7b:e3:8e:b8:8e:ac:a1:3c:31:2a:32:6f:85:f7:
ee:82:29:8a:82:5c:58:70:36:06:a3:ad:7a:f4:7e:c4:3f:9d:
ae:75:81:ec:03:39:79:30:98:cd:f9:70:1a:a8:4c:c5:a7:4c:
ff:91:e9:39:91:a5:a1:56:b3:d6:3a:72:61:32:d8:7a:87:6b:
63:6f:c4:f4:99:b8:e4:3d:c7:87:95:84:8a:9c:53:e9:a7:97:
cd:8b:0c:de:2f:9d:16:0b:ec:94:7e:56:81:f5:41:78:b3:5b:
64:b5:1a:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 17:20:45 2025 by rpki-client