Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/2f672b-236c-40fb-aaf6-08d0f4bd2c28/1/tXPS3ak-QgQJFj2lnnQU7pGi7vI.mft
File: tXPS3ak-QgQJFj2lnnQU7pGi7vI.mft (raw, json)
Hash identifier: 5+4Drn3HM0/SDD2GPo6/tFuzMm4H80z+Q0fe439dQ4U=
Subject key identifier: 4A:51:2E:26:8D:F9:33:B1:7F:CD:17:6C:F8:2A:C3:A7:39:9E:23:47
Authority key identifier: B5:73:D2:DD:A9:3E:42:04:09:16:3D:A5:9E:74:14:EE:91:A2:EE:F2
Certificate issuer: /CN=b573d2dda93e420409163da59e7414ee91a2eef2
Certificate serial: 0197B7EAAC8C138C2D51162263E8E070E3E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tXPS3ak-QgQJFj2lnnQU7pGi7vI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/2f672b-236c-40fb-aaf6-08d0f4bd2c28/1/tXPS3ak-QgQJFj2lnnQU7pGi7vI.mft
Manifest number: 53
Signing time: Sat 28 Jun 2025 19:01:39 +0000
Manifest this update: Sat 28 Jun 2025 19:01:39 +0000
Manifest next update: Sun 29 Jun 2025 19:01:39 +0000
Files and hashes: 1: r2p_nfti9wP7acQGEaKHM_xZ5Y4.roa (hash: 8x452bR9h9FZkxCtz0Hac6JBkLr+TCy/u9myFaRh5zg=)
2: tXPS3ak-QgQJFj2lnnQU7pGi7vI.crl (hash: eEqLprM6IoVISMslMaBM1/WOSz/d1bcB/7rfJ+8RwEo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/2f672b-236c-40fb-aaf6-08d0f4bd2c28/1/tXPS3ak-QgQJFj2lnnQU7pGi7vI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/2f672b-236c-40fb-aaf6-08d0f4bd2c28/1/tXPS3ak-QgQJFj2lnnQU7pGi7vI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tXPS3ak-QgQJFj2lnnQU7pGi7vI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:ac:8c:13:8c:2d:51:16:22:63:e8:e0:70:e3:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b573d2dda93e420409163da59e7414ee91a2eef2
Validity
Not Before: Jun 28 19:01:39 2025 GMT
Not After : Jun 29 19:01:39 2025 GMT
Subject: CN=4a512e268df933b17fcd176cf82ac3a7399e2347
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:54:55:13:8d:2d:1c:0e:92:ef:16:c0:e3:06:
9d:69:2d:8d:c4:f1:a7:3a:35:8d:dc:ff:db:39:97:
d5:c6:ce:fb:99:63:25:b2:6d:4e:c7:33:33:b4:2c:
6a:07:5f:11:3c:c7:bf:e9:e9:1a:81:8b:6e:39:06:
da:63:0c:ec:7c:49:b2:c6:dc:f9:ba:9d:1c:ff:b2:
44:21:6c:60:f8:05:dc:4f:07:0f:f5:04:d1:95:67:
66:c2:a3:bc:14:9a:c1:6a:99:e5:a4:38:85:1e:79:
3e:52:96:53:21:9a:87:87:8d:4a:ac:b2:16:e3:12:
5f:fa:f4:f1:ea:c4:ff:3e:2a:7b:b7:ac:60:b7:5c:
6b:75:c8:67:58:94:65:31:ff:02:76:c4:f6:b5:69:
cb:b8:2e:e8:df:f4:4c:4a:47:2a:8a:34:93:f7:34:
79:e3:6c:c5:5e:ce:7e:fb:57:35:e3:a5:f2:5b:44:
f7:8b:df:a6:5e:f2:c6:1c:44:fb:bc:0e:0e:ec:cc:
1c:ce:45:81:33:cc:6c:9f:85:a0:cb:d6:59:32:25:
f1:46:fa:a7:5c:9e:ac:14:f7:55:8f:3b:43:96:c7:
34:ee:e4:1f:f1:65:11:7d:a7:7e:29:7e:4d:78:44:
e1:c2:80:b5:e4:fd:e2:45:da:eb:00:3f:4f:e7:6e:
38:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:51:2E:26:8D:F9:33:B1:7F:CD:17:6C:F8:2A:C3:A7:39:9E:23:47
X509v3 Authority Key Identifier:
keyid:B5:73:D2:DD:A9:3E:42:04:09:16:3D:A5:9E:74:14:EE:91:A2:EE:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tXPS3ak-QgQJFj2lnnQU7pGi7vI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/2f672b-236c-40fb-aaf6-08d0f4bd2c28/1/tXPS3ak-QgQJFj2lnnQU7pGi7vI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/2f672b-236c-40fb-aaf6-08d0f4bd2c28/1/tXPS3ak-QgQJFj2lnnQU7pGi7vI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:9d:13:3d:c2:76:8c:a2:10:83:76:b4:3c:cf:d6:df:c2:f0:
f6:77:e0:aa:b7:8c:65:50:44:1d:a7:bc:f5:9c:e3:29:44:53:
60:07:94:e6:b1:e5:af:83:57:16:b4:4f:ee:a7:27:ff:d2:0c:
4c:e3:2a:ef:9f:73:e8:49:fc:0e:59:3f:8b:7d:d2:f4:9d:73:
17:83:22:8f:2c:87:79:d7:b1:9f:fd:b4:9c:aa:57:75:09:22:
17:95:41:23:c8:25:23:ba:a5:96:df:be:ce:5b:cb:b6:0f:a2:
a9:46:10:69:28:cd:09:e0:40:fb:79:37:47:6c:68:5c:31:38:
9a:0a:e6:c7:ab:78:49:89:b0:a9:dd:f0:15:47:be:94:c3:59:
77:84:0f:f6:6e:f2:b6:90:70:39:e6:29:0e:7b:66:04:af:80:
4a:d5:24:09:6e:d4:43:41:54:85:1d:c6:d1:91:86:40:68:79:
91:46:0a:89:41:f1:52:25:b8:7b:b4:b3:a5:2a:55:9d:bc:f3:
ff:31:50:18:99:6f:1a:59:3d:f1:f8:e1:91:5e:b1:40:71:ab:
33:5d:f7:cb:14:55:d1:de:9c:04:04:75:ce:02:6c:14:f7:e9:
3b:61:eb:24:97:5f:10:23:a4:9e:0b:a8:aa:d4:d1:c4:2b:cc:
96:8e:9c:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:17:10 2025 by rpki-client