Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/bbedbe-8821-4bd8-bbcc-3adf9b61347d/1/TPzH4BfCyfdjLacpNHa7fkowNlo.mft
File: TPzH4BfCyfdjLacpNHa7fkowNlo.mft (raw, json)
Hash identifier: 1ryMbLu1czaO7TjuAC1WRSSkImcSx2MkESeA2shbJGs=
Subject key identifier: 8B:D3:FB:1B:AC:30:91:0E:7E:2D:39:61:80:06:42:61:7E:EA:FB:51
Authority key identifier: 4C:FC:C7:E0:17:C2:C9:F7:63:2D:A7:29:34:76:BB:7E:4A:30:36:5A
Certificate issuer: /CN=4cfcc7e017c2c9f7632da7293476bb7e4a30365a
Certificate serial: 0197B70F192AD27EABE397D8881A268FEBA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TPzH4BfCyfdjLacpNHa7fkowNlo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/bbedbe-8821-4bd8-bbcc-3adf9b61347d/1/TPzH4BfCyfdjLacpNHa7fkowNlo.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 15:01:49 +0000
Manifest this update: Sat 28 Jun 2025 15:01:49 +0000
Manifest next update: Sun 29 Jun 2025 15:01:49 +0000
Files and hashes: 1: OQKKfCP8SjNyLo9484epfP4wbRU.roa (hash: GIFqkdSx0szCVRVxH/rU2b7Y/JXh/nneSVo+VlwXpJY=)
2: TPzH4BfCyfdjLacpNHa7fkowNlo.crl (hash: ZW+ERG/LoxyA9SJGZXJw8kain2riKwHSYSNXAgBmVIY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/bbedbe-8821-4bd8-bbcc-3adf9b61347d/1/TPzH4BfCyfdjLacpNHa7fkowNlo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/bbedbe-8821-4bd8-bbcc-3adf9b61347d/1/TPzH4BfCyfdjLacpNHa7fkowNlo.mft
rsync://rpki.ripe.net/repository/DEFAULT/TPzH4BfCyfdjLacpNHa7fkowNlo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:19:2a:d2:7e:ab:e3:97:d8:88:1a:26:8f:eb:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cfcc7e017c2c9f7632da7293476bb7e4a30365a
Validity
Not Before: Jun 28 15:01:49 2025 GMT
Not After : Jun 29 15:01:49 2025 GMT
Subject: CN=8bd3fb1bac30910e7e2d3961800642617eeafb51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:19:a3:8b:a5:82:67:8f:28:8d:7d:e6:91:7d:
e4:b4:74:06:10:30:63:51:2e:10:67:19:0c:91:3f:
ca:ef:b5:48:7c:8d:cb:1d:5a:b1:db:2a:ba:9d:8c:
48:09:8f:74:07:56:de:0a:9b:82:f5:0d:49:8a:98:
8f:6d:5c:8a:3d:ec:1a:2d:72:60:16:8d:86:34:5d:
d9:dc:3a:70:09:43:e9:18:c7:bd:82:81:cc:0d:60:
16:5a:d5:d9:8b:e5:4f:3b:d9:d3:b4:42:5c:28:4d:
3e:4e:a3:42:19:79:db:35:9d:84:2b:88:39:8e:71:
3d:f5:40:fe:2c:7b:2f:7a:af:89:d9:d5:a0:13:d2:
7c:00:af:ed:de:31:bb:98:a6:7b:14:e3:a4:46:c4:
7d:b9:a5:c1:34:8a:79:c7:f0:f9:c8:19:f4:eb:57:
8f:0a:b1:0a:be:3c:c0:c2:9d:65:3b:d6:c0:dd:62:
d1:5a:4b:06:ce:aa:db:c8:03:71:b8:29:1b:7f:f6:
e8:10:2f:b4:b6:a6:c7:71:59:ad:f2:b4:93:ba:00:
48:e1:24:fc:b0:0c:bf:02:6a:61:02:3f:32:cc:73:
37:ea:4e:3c:53:59:f9:64:8f:0e:d7:28:86:ba:5f:
c5:c0:58:bd:eb:09:46:85:93:e0:d9:41:8f:39:f1:
9c:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:D3:FB:1B:AC:30:91:0E:7E:2D:39:61:80:06:42:61:7E:EA:FB:51
X509v3 Authority Key Identifier:
keyid:4C:FC:C7:E0:17:C2:C9:F7:63:2D:A7:29:34:76:BB:7E:4A:30:36:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TPzH4BfCyfdjLacpNHa7fkowNlo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/bbedbe-8821-4bd8-bbcc-3adf9b61347d/1/TPzH4BfCyfdjLacpNHa7fkowNlo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/bbedbe-8821-4bd8-bbcc-3adf9b61347d/1/TPzH4BfCyfdjLacpNHa7fkowNlo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:89:53:2f:11:a7:56:d1:0b:78:9e:78:a7:e0:b0:84:ff:58:
25:7e:42:87:a5:54:81:29:47:0e:31:6f:dd:bb:18:4f:09:3f:
8b:e3:09:04:74:0d:16:2d:8b:73:29:13:55:03:fd:4a:0f:02:
09:0c:75:30:75:01:4e:67:d6:e0:5e:59:d5:cc:53:bc:4d:79:
68:2b:19:44:f5:49:5c:4f:18:0c:c0:12:b7:e1:48:ae:19:b6:
29:90:d9:64:3c:b3:ba:ed:08:37:14:db:74:2b:5c:a3:91:2f:
33:68:24:01:05:a4:21:e3:c8:a4:65:bf:cf:d6:88:b5:39:b7:
1a:f2:23:8f:3e:a3:5b:de:70:fe:26:a9:1a:07:42:6c:70:73:
0f:91:6c:ec:e5:fd:65:62:97:ad:a9:01:7e:fc:8a:7d:12:86:
55:0a:c0:66:cc:46:d5:6e:31:34:82:42:0d:86:b9:a6:68:36:
f9:94:6f:66:27:12:59:00:1e:3a:3f:5f:62:ae:f6:48:59:21:
75:8b:ef:c0:fc:47:ec:c0:df:e9:3a:bc:fa:d7:fc:a1:54:45:
c4:d4:2d:d8:2c:cd:ec:f0:24:96:f6:32:af:a8:0b:2a:e2:df:
3f:70:1e:06:69:bb:e7:29:fe:43:c0:59:ee:fe:15:72:ce:a3:
ef:15:ef:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:03:07 2025 by rpki-client