Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/b8e5c4-38eb-445f-b036-c37790e6d482/1/Tu9qrm-6XGGmFzmvyrVaYiZuie4.mft
File: Tu9qrm-6XGGmFzmvyrVaYiZuie4.mft (raw, json)
Hash identifier: 7mynXepHNJU/PfIryP7xSju5MMjbskRdwcZGj4/v83Q=
Subject key identifier: F5:14:9E:17:95:5F:C4:FF:59:2D:B2:9C:E8:2E:8D:89:6C:BD:CC:6A
Authority key identifier: 4E:EF:6A:AE:6F:BA:5C:61:A6:17:39:AF:CA:B5:5A:62:26:6E:89:EE
Certificate issuer: /CN=4eef6aae6fba5c61a61739afcab55a62266e89ee
Certificate serial: 0197CEA8FDA7B0BD5E37B2159A82C4DA2695
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tu9qrm-6XGGmFzmvyrVaYiZuie4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e5c4-38eb-445f-b036-c37790e6d482/1/Tu9qrm-6XGGmFzmvyrVaYiZuie4.mft
Manifest number: 15BA
Signing time: Thu 03 Jul 2025 05:01:10 +0000
Manifest this update: Thu 03 Jul 2025 05:01:10 +0000
Manifest next update: Fri 04 Jul 2025 05:01:10 +0000
Files and hashes: 1: EsNde2nZ0dUcA8Xoq5-tHg_EXc8.roa (hash: EuB6IqBcAAWKbULQ1dsjzb0/Ucv72mc0J9mJsdHmCGA=)
2: Tu9qrm-6XGGmFzmvyrVaYiZuie4.crl (hash: PABBUTPSHLhLh5ncdL6of5UvncwIxwnSHrtpG2F5ybw=)
3: eUaNjbQ13AL_bdj9OsodbJhievk.roa (hash: vqTtUX/Z4j6GrRJo/zNXECftqpV9YIa2rqV3Ge4NXvs=)
4: occ86qiOIs73r7C894le5tLORUc.roa (hash: vjqBb3FygjXd34w4UXc66ToikB55Yx9gYxFBgH7Uvw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e5c4-38eb-445f-b036-c37790e6d482/1/Tu9qrm-6XGGmFzmvyrVaYiZuie4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e5c4-38eb-445f-b036-c37790e6d482/1/Tu9qrm-6XGGmFzmvyrVaYiZuie4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tu9qrm-6XGGmFzmvyrVaYiZuie4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 05:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ce:a8:fd:a7:b0:bd:5e:37:b2:15:9a:82:c4:da:26:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4eef6aae6fba5c61a61739afcab55a62266e89ee
Validity
Not Before: Jul 3 05:01:10 2025 GMT
Not After : Jul 4 05:01:10 2025 GMT
Subject: CN=f5149e17955fc4ff592db29ce82e8d896cbdcc6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ac:56:be:cb:4f:f4:8d:43:01:3b:52:0d:bc:
2d:02:f1:5e:71:d2:54:f5:b1:19:13:ba:87:8c:16:
69:f2:70:78:d5:22:f3:11:1a:e3:05:c2:d0:b1:a6:
d4:9a:cf:85:02:0d:c2:c3:87:36:f8:a1:94:af:37:
7f:f7:8f:f9:8d:f4:ad:5e:2f:52:ce:96:c0:bc:20:
39:69:99:84:6e:49:67:35:ec:62:a3:fb:14:1f:df:
6a:6e:6b:81:a3:38:d2:15:12:df:48:d2:92:33:d1:
18:7e:e9:3c:20:27:96:8c:99:60:39:d1:6e:98:22:
0c:68:0f:54:c5:21:4c:9e:51:8b:57:60:bd:b4:1c:
6b:1f:dd:03:4f:31:42:5c:28:65:1e:e7:b4:73:08:
23:7f:1d:cb:a6:b1:79:bf:4a:72:f0:2e:8c:1d:9a:
af:71:20:10:ba:2d:e7:4e:ef:06:77:35:23:81:da:
1b:d0:ff:28:ea:c8:ff:2b:ec:a0:c7:2f:ae:57:d1:
74:64:19:53:22:04:2e:67:5e:4a:06:b8:cb:f6:a3:
c8:e0:dc:66:bb:75:b9:82:07:59:09:25:0b:67:3a:
17:2a:ad:bc:a2:e0:b3:67:52:da:95:ce:2d:86:a0:
83:15:19:e8:51:c5:61:82:ab:71:8c:bb:02:ff:f8:
3d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:14:9E:17:95:5F:C4:FF:59:2D:B2:9C:E8:2E:8D:89:6C:BD:CC:6A
X509v3 Authority Key Identifier:
keyid:4E:EF:6A:AE:6F:BA:5C:61:A6:17:39:AF:CA:B5:5A:62:26:6E:89:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tu9qrm-6XGGmFzmvyrVaYiZuie4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e5c4-38eb-445f-b036-c37790e6d482/1/Tu9qrm-6XGGmFzmvyrVaYiZuie4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e5c4-38eb-445f-b036-c37790e6d482/1/Tu9qrm-6XGGmFzmvyrVaYiZuie4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:fb:09:bb:02:36:b8:5c:c0:6f:ff:43:eb:4f:32:a7:7b:2c:
79:85:1b:41:88:e6:0d:5e:d7:4c:4f:a9:ac:36:8b:3d:17:9c:
87:80:89:85:b9:0d:14:6f:5e:92:55:49:a5:4e:0c:86:fe:ba:
bf:17:19:31:25:ae:93:e1:d0:ca:74:60:4b:57:ef:e6:6b:89:
c8:22:67:07:01:b8:72:4a:70:70:aa:6d:7f:bf:8c:1f:5c:df:
c1:38:e9:4d:0a:ed:fc:e2:0b:e7:cc:63:cf:4d:6e:57:56:8e:
bc:d3:1d:3d:7c:f6:f3:ec:75:8e:dc:d6:54:ce:98:f9:c5:14:
66:33:6c:96:34:8a:aa:fd:24:65:79:c1:68:f7:f8:7f:26:13:
6e:22:99:5f:17:1e:4e:2c:f0:8b:29:52:66:c5:52:a1:d1:0b:
c4:6f:65:01:ae:dd:4f:a5:c7:05:0e:b9:22:71:d1:4d:06:0a:
11:5c:42:dc:d1:aa:92:de:0b:e6:aa:a1:84:b5:a0:3b:ce:89:
90:3d:21:3e:bb:d0:e0:fa:41:fe:b1:69:93:7d:f8:82:45:b3:
83:98:32:94:d0:3a:76:90:65:22:8f:7c:37:a4:85:a0:90:ef:
9d:9f:db:8e:1a:c7:2b:d6:22:4d:c7:b7:70:40:1f:28:76:36:
06:3c:ba:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 08:10:10 2025 by rpki-client