Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/27e1ca-e61f-4e8c-ad9c-145c36e38276/1/TeLcLByThHv5efmwEO3EzahJ9Pg.mft
File: TeLcLByThHv5efmwEO3EzahJ9Pg.mft (raw, json)
Hash identifier: sdDBAZ5UieLFbde4zS8KIO+/n9gbEWpuhUGyH5o5ERQ=
Subject key identifier: 15:14:38:CC:43:AC:BB:DE:7F:41:97:B3:1D:14:A9:18:40:04:72:F2
Authority key identifier: 4D:E2:DC:2C:1C:93:84:7B:F9:79:F9:B0:10:ED:C4:CD:A8:49:F4:F8
Certificate issuer: /CN=4de2dc2c1c93847bf979f9b010edc4cda849f4f8
Certificate serial: 0197B77CC61E69FD1912BC70089994B7011E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TeLcLByThHv5efmwEO3EzahJ9Pg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/27e1ca-e61f-4e8c-ad9c-145c36e38276/1/TeLcLByThHv5efmwEO3EzahJ9Pg.mft
Manifest number: 15B8
Signing time: Sat 28 Jun 2025 17:01:36 +0000
Manifest this update: Sat 28 Jun 2025 17:01:36 +0000
Manifest next update: Sun 29 Jun 2025 17:01:36 +0000
Files and hashes: 1: 8JnpLlF6ouYCq_pQniNXbCodhsg.roa (hash: 3w9gQ6ISRWOwFH7sOq0mD8XYTAeUJvnIkcQX2VgiAHE=)
2: TeLcLByThHv5efmwEO3EzahJ9Pg.crl (hash: SJOJBDlvS/UsFofzzzy3sDedwOIFkJiC+HHoa2UHb9Y=)
3: UrlGR9v18F5T4YYElfr8yqGscS0.roa (hash: fj1TXr5g11+IfyDk1z4S0+oWVp/JX8PPHR9S29gA7PE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/27e1ca-e61f-4e8c-ad9c-145c36e38276/1/TeLcLByThHv5efmwEO3EzahJ9Pg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/27e1ca-e61f-4e8c-ad9c-145c36e38276/1/TeLcLByThHv5efmwEO3EzahJ9Pg.mft
rsync://rpki.ripe.net/repository/DEFAULT/TeLcLByThHv5efmwEO3EzahJ9Pg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:c6:1e:69:fd:19:12:bc:70:08:99:94:b7:01:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4de2dc2c1c93847bf979f9b010edc4cda849f4f8
Validity
Not Before: Jun 28 17:01:36 2025 GMT
Not After : Jun 29 17:01:36 2025 GMT
Subject: CN=151438cc43acbbde7f4197b31d14a918400472f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ae:55:a0:72:05:49:25:74:17:2b:81:92:9c:
e6:58:f1:ad:46:7b:65:52:d3:32:3a:d3:81:97:15:
8e:7b:dc:f0:a4:9f:c7:71:cb:45:52:d6:79:16:70:
5a:56:3b:0e:2a:3e:f4:55:1a:28:13:c7:4e:f0:a1:
6d:14:42:62:9b:bb:d1:14:b6:40:c9:1d:e7:3a:11:
40:49:c0:79:92:0a:e2:e5:9f:e5:0c:09:5c:76:28:
a1:ab:38:83:cc:88:c1:99:d1:74:b0:5d:d5:90:2c:
3a:27:10:38:18:0e:49:77:c8:f4:e6:f5:d8:ad:1a:
4b:20:e0:c7:aa:be:c1:c2:7e:03:bd:f0:79:b4:eb:
5f:a8:e5:5a:be:47:af:92:93:12:b4:bb:07:d3:55:
e6:c7:13:95:b5:2e:92:4e:58:f6:2a:8a:2f:63:4f:
0f:25:a0:8e:da:ff:b6:36:ff:ab:46:26:42:e6:ed:
d3:d3:c5:44:94:f0:e0:29:6d:0c:81:db:f5:40:b9:
11:ce:b1:92:d2:be:f7:50:c1:78:9f:39:99:be:de:
78:f6:7a:ff:8e:b8:55:7f:87:b7:79:cd:70:e0:ab:
0c:4e:d2:4d:68:e9:8a:d5:94:3d:08:f6:84:55:c8:
c9:0e:0b:76:83:7f:a0:e2:e8:f9:2f:60:e6:70:56:
00:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:14:38:CC:43:AC:BB:DE:7F:41:97:B3:1D:14:A9:18:40:04:72:F2
X509v3 Authority Key Identifier:
keyid:4D:E2:DC:2C:1C:93:84:7B:F9:79:F9:B0:10:ED:C4:CD:A8:49:F4:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TeLcLByThHv5efmwEO3EzahJ9Pg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/27e1ca-e61f-4e8c-ad9c-145c36e38276/1/TeLcLByThHv5efmwEO3EzahJ9Pg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/27e1ca-e61f-4e8c-ad9c-145c36e38276/1/TeLcLByThHv5efmwEO3EzahJ9Pg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:c8:6d:b1:d9:58:7b:ae:48:3b:6b:03:5f:5d:c4:b9:df:d9:
07:8d:6c:d1:bc:aa:c1:73:ae:e5:dd:2e:fa:ed:4e:7b:52:9e:
d6:7a:60:10:3a:3a:e9:d2:ec:50:b8:21:c7:3e:a5:07:1f:8f:
56:5d:3a:77:b3:1e:70:4c:73:3d:19:4f:f2:9d:63:a8:0b:f6:
8e:d6:fe:6e:37:3d:23:65:92:c3:10:68:a1:d4:8e:05:8c:11:
bd:9a:99:3d:ee:6f:a7:c9:e8:87:24:ac:88:9c:43:47:d7:c7:
d8:d4:72:47:6f:fd:cb:17:65:6f:3f:55:05:6c:bc:59:95:ee:
89:12:28:b7:b7:eb:bd:57:72:72:e6:8f:83:55:75:cc:da:c6:
50:14:b2:4d:36:cd:ac:df:78:0e:d9:f3:ac:ca:5d:45:bf:5c:
ea:a7:09:1a:d9:3f:bb:30:f5:be:78:ce:f9:61:a1:5e:8a:5c:
cb:31:9d:97:9e:08:20:e9:b7:c6:a3:ce:46:c1:b2:14:fa:a0:
60:59:50:72:1e:c7:cf:0a:01:95:fe:ce:65:9c:c0:ee:ba:c7:
c8:af:e7:9f:1f:65:ea:87:4a:55:cd:dc:b4:3d:d5:b1:c8:e8:
76:cf:e9:87:95:f4:f6:23:40:5b:68:1c:cf:fc:4b:c3:2c:b1:
6b:1f:85:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:17:13 2025 by rpki-client