Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/1e1ac6-fcd6-4ae8-ad77-51e4bba6bf5b/1/Ty87yZp5UD4JdXR36O9kPhGIbIs.mft
File: Ty87yZp5UD4JdXR36O9kPhGIbIs.mft (raw, json)
Hash identifier: BNB6nMAdGzLK/CgGQY+fnftIIbkcT78tZMUT7i7oJ/s=
Subject key identifier: C2:20:D2:A9:24:48:43:79:0F:63:F5:79:98:58:2D:33:27:EA:6B:99
Authority key identifier: 4F:2F:3B:C9:9A:79:50:3E:09:75:74:77:E8:EF:64:3E:11:88:6C:8B
Certificate issuer: /CN=4f2f3bc99a79503e09757477e8ef643e11886c8b
Certificate serial: 0197B6A120B683064B7A4398F1C2D1D47675
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ty87yZp5UD4JdXR36O9kPhGIbIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/1e1ac6-fcd6-4ae8-ad77-51e4bba6bf5b/1/Ty87yZp5UD4JdXR36O9kPhGIbIs.mft
Manifest number: 1466
Signing time: Sat 28 Jun 2025 13:01:42 +0000
Manifest this update: Sat 28 Jun 2025 13:01:42 +0000
Manifest next update: Sun 29 Jun 2025 13:01:42 +0000
Files and hashes: 1: DmY4OlpSGtRwQGNkVI6pwwKmQOM.roa (hash: QsmPHxvFnUbBb8Hdz5mPLnRJfO8cxjGYjuC9mmKC/hY=)
2: Ty87yZp5UD4JdXR36O9kPhGIbIs.crl (hash: D9CaoiA2z1Dc9ryCxmFL+P4GQN6zWhQS4SeAD1VVm/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/1e1ac6-fcd6-4ae8-ad77-51e4bba6bf5b/1/Ty87yZp5UD4JdXR36O9kPhGIbIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/1e1ac6-fcd6-4ae8-ad77-51e4bba6bf5b/1/Ty87yZp5UD4JdXR36O9kPhGIbIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ty87yZp5UD4JdXR36O9kPhGIbIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:20:b6:83:06:4b:7a:43:98:f1:c2:d1:d4:76:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f2f3bc99a79503e09757477e8ef643e11886c8b
Validity
Not Before: Jun 28 13:01:42 2025 GMT
Not After : Jun 29 13:01:42 2025 GMT
Subject: CN=c220d2a9244843790f63f57998582d3327ea6b99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7d:c1:b1:ab:ff:4c:c1:89:a0:7f:70:f5:a1:
c9:70:33:92:41:32:33:22:ef:22:9a:d9:e5:d7:3d:
e9:5d:8a:e5:2b:f6:48:a8:eb:35:dd:91:94:4f:74:
6e:1a:98:d3:bb:1d:c5:d5:aa:a2:63:00:3c:6b:2b:
b9:84:4b:40:f4:1d:f1:dd:b4:d2:10:fe:14:7f:7c:
f2:6a:59:44:95:38:a6:f0:01:fc:0f:39:2c:e3:fc:
39:67:64:f3:73:a5:ba:03:88:22:97:40:f5:68:37:
72:10:db:f4:72:7f:31:a8:f8:aa:56:f0:89:03:ac:
86:62:f0:3c:41:68:e1:e6:53:15:10:07:1a:c7:11:
f5:42:90:bf:09:cb:54:c6:14:ed:90:3d:b7:f8:96:
2a:e6:87:8f:32:0e:c3:3a:4b:88:bd:7a:cb:b1:d8:
86:57:45:c8:6a:fc:2d:7c:92:bc:5c:b3:03:c4:30:
96:21:6d:a6:af:5b:e2:de:fc:93:a9:e5:9f:18:bf:
0a:6a:2b:52:8f:73:e1:8a:1d:46:e7:fd:53:b7:05:
1e:c0:69:00:8a:1a:a5:18:f8:6b:a7:99:b2:32:1c:
5a:c4:e5:b0:20:1d:1e:19:60:70:da:e1:d5:b5:dd:
d5:0f:30:cf:82:dc:f4:17:7f:a4:e9:4d:4e:6a:70:
e1:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:20:D2:A9:24:48:43:79:0F:63:F5:79:98:58:2D:33:27:EA:6B:99
X509v3 Authority Key Identifier:
keyid:4F:2F:3B:C9:9A:79:50:3E:09:75:74:77:E8:EF:64:3E:11:88:6C:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ty87yZp5UD4JdXR36O9kPhGIbIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/1e1ac6-fcd6-4ae8-ad77-51e4bba6bf5b/1/Ty87yZp5UD4JdXR36O9kPhGIbIs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/1e1ac6-fcd6-4ae8-ad77-51e4bba6bf5b/1/Ty87yZp5UD4JdXR36O9kPhGIbIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:57:ce:e0:97:c6:5f:f3:44:d0:d3:70:31:d4:b5:da:a8:a9:
0e:8c:ef:0c:f1:01:5f:2e:51:c5:5e:e4:73:37:ae:a0:9a:f6:
e6:f3:d1:40:20:e2:26:58:74:91:8e:f4:0a:b1:fd:9d:c0:ee:
6b:92:5a:5a:7f:38:e2:5f:9f:ee:96:3d:ff:6a:39:b6:a6:21:
4e:0e:5e:eb:5b:66:18:9c:a6:74:ea:be:e8:d5:3e:49:12:7d:
8c:88:f4:b4:cd:88:89:dd:56:1f:91:88:dc:a4:02:d2:f0:d2:
66:8e:af:35:93:3e:7a:a3:94:e8:0b:14:b2:e9:de:53:02:36:
53:ca:84:3e:e0:2a:d0:18:d1:52:c2:32:4d:5c:86:da:fd:46:
b6:2f:6e:84:a8:09:60:9e:2a:0d:45:3e:7a:52:30:ce:52:bf:
93:da:1e:bf:79:44:a5:5e:4c:43:52:42:f7:28:e4:b3:a4:b0:
3f:2c:bc:16:90:fb:01:fb:75:8f:86:97:cc:71:73:55:64:73:
80:4e:05:9c:e9:25:13:a6:80:91:b8:85:51:ff:ef:ba:26:43:
5a:fd:2c:e5:27:17:a8:3b:a4:11:7d:1a:3e:90:2d:7b:aa:c8:
c3:42:f7:f3:0d:f0:29:6b:4b:3d:fc:e5:53:8e:61:6c:de:42:
ce:1c:3c:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:11:31 2025 by rpki-client