Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/T9ZkbJPCl0eJ7O97REZW7mQWFyk.mft
File: T9ZkbJPCl0eJ7O97REZW7mQWFyk.mft (raw, json)
Hash identifier: aB2dObphLt1yekQ7T2mtL5K7AamZefUNU6wDczefG+Y=
Subject key identifier: 54:B1:52:A0:39:0F:A9:59:12:E1:44:38:F8:A0:A0:D1:FC:68:AD:10
Authority key identifier: 4F:D6:64:6C:93:C2:97:47:89:EC:EF:7B:44:46:56:EE:64:16:17:29
Certificate issuer: /CN=4fd6646c93c2974789ecef7b444656ee64161729
Certificate serial: 0197B7EA856169722FAEDF2F0249B1C16335
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T9ZkbJPCl0eJ7O97REZW7mQWFyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/T9ZkbJPCl0eJ7O97REZW7mQWFyk.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 19:01:29 +0000
Manifest this update: Sat 28 Jun 2025 19:01:29 +0000
Manifest next update: Sun 29 Jun 2025 19:01:29 +0000
Files and hashes: 1: HSxOpF8LeaRif88_oEZ4y7MBldM.roa (hash: n8DGCpnE1FwgPJK7R+0dK8cIDb4XdG2XSYHd7OuwJKU=)
2: T9ZkbJPCl0eJ7O97REZW7mQWFyk.crl (hash: oSRTtveLnSsl69wmB4T91iHj0hhxjyuUBCRQPx06GKU=)
3: W44szkVz920V6-JywE9vsVlLyvY.roa (hash: CydWhda8ET4rgRmemVZtuScSzfI/qh7Sm6ASW7UNUoE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/T9ZkbJPCl0eJ7O97REZW7mQWFyk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/T9ZkbJPCl0eJ7O97REZW7mQWFyk.mft
rsync://rpki.ripe.net/repository/DEFAULT/T9ZkbJPCl0eJ7O97REZW7mQWFyk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:85:61:69:72:2f:ae:df:2f:02:49:b1:c1:63:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fd6646c93c2974789ecef7b444656ee64161729
Validity
Not Before: Jun 28 19:01:29 2025 GMT
Not After : Jun 29 19:01:29 2025 GMT
Subject: CN=54b152a0390fa95912e14438f8a0a0d1fc68ad10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f9:49:a4:50:9f:5a:76:71:9f:41:f5:eb:24:
f0:b3:cf:ec:14:46:68:89:a2:61:0c:e6:77:32:ff:
cf:49:58:91:46:c2:63:0e:ab:14:a4:a5:0a:ea:69:
11:ab:f0:71:9c:6a:fb:52:61:ea:4c:46:4d:0a:fb:
2e:23:fb:d8:b8:97:f4:9c:55:5e:3c:51:65:ab:b4:
f4:20:b0:19:66:f8:9a:36:8f:df:84:1a:4b:3c:34:
39:61:7c:4b:62:3f:bf:09:08:1d:e4:91:eb:58:25:
44:88:3a:79:85:10:5f:5d:bd:04:38:18:b2:80:7e:
bf:b8:d7:59:68:e9:2c:2e:c5:a8:e3:3a:00:fa:4c:
23:a7:3d:3d:69:07:f7:52:90:50:6b:39:62:5f:bd:
0f:8e:ea:cc:93:3a:bf:ff:1a:a8:ca:d0:9d:da:3c:
5e:b9:7a:cd:7f:75:82:0b:a7:c7:33:28:16:70:bc:
be:f7:d9:83:0a:97:82:4f:1e:9a:cd:81:bf:cb:ed:
b2:c4:63:2a:a1:6e:29:f1:7d:1f:fb:0c:61:92:c3:
66:9c:53:28:e2:75:58:77:ef:19:3d:93:f7:9b:ca:
e7:de:a2:95:23:26:3a:6d:55:a8:20:ce:29:fb:76:
63:85:6d:a6:67:e1:f7:11:3b:4b:35:1a:ff:18:38:
c6:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:B1:52:A0:39:0F:A9:59:12:E1:44:38:F8:A0:A0:D1:FC:68:AD:10
X509v3 Authority Key Identifier:
keyid:4F:D6:64:6C:93:C2:97:47:89:EC:EF:7B:44:46:56:EE:64:16:17:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T9ZkbJPCl0eJ7O97REZW7mQWFyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/T9ZkbJPCl0eJ7O97REZW7mQWFyk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/T9ZkbJPCl0eJ7O97REZW7mQWFyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:59:2e:02:c6:23:ef:b5:c5:8f:03:9c:f6:39:05:6a:86:d8:
28:52:2d:9e:01:fc:bc:7a:b4:7f:5d:70:28:5c:5d:21:60:7f:
72:5c:08:79:eb:eb:25:59:61:a9:40:b3:78:49:60:63:23:71:
1a:74:de:b3:d9:da:0f:32:65:49:f8:8a:86:bb:84:8b:4b:01:
7e:ae:20:3b:ca:b9:a1:f2:b4:04:e1:c2:76:de:7f:9a:f8:f7:
c6:25:86:e0:9c:d3:2b:86:6d:7a:98:fc:8f:06:71:dc:3b:c6:
39:5d:dc:90:cd:fd:ae:a7:2f:2f:b6:da:30:a5:97:6e:d7:ae:
3c:6d:7a:3c:e1:6c:83:88:f5:57:29:dd:1c:4f:7b:12:cf:76:
cf:7c:78:2b:63:19:c8:9c:31:6a:6f:ca:24:3a:40:5c:fc:4f:
c7:12:5f:22:8c:df:b5:39:2c:1b:06:dd:e4:6d:8c:94:75:f8:
08:38:50:5e:d5:21:49:6e:ad:8e:5a:4e:e7:d4:19:05:ef:f3:
9e:e8:4e:b9:5a:65:ff:a5:8a:77:fe:7d:7e:0d:26:a5:b5:fe:
df:47:8d:30:c6:3d:b7:01:ff:f6:db:a6:06:5d:4d:c1:ff:34:
72:a9:41:a4:ee:36:64:72:0c:7e:43:ca:ee:a1:4c:0c:b0:f3:
4f:bd:f7:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:45:26 2025 by rpki-client