Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/e080b6-4e09-42d8-b91c-b2798c1a0327/1/TyESy_bcyN00ROTs7ShEVzEPcNI.mft
File: TyESy_bcyN00ROTs7ShEVzEPcNI.mft (raw, json)
Hash identifier: a6HS3nqeIZ9wJdT0Q9mCs1ZRqLvOumQ74GpqVYBZFGQ=
Subject key identifier: 87:11:43:8E:79:32:C4:DE:D9:EE:C0:CE:DC:6B:91:45:50:F7:C7:5B
Authority key identifier: 4F:21:12:CB:F6:DC:C8:DD:34:44:E4:EC:ED:28:44:57:31:0F:70:D2
Certificate issuer: /CN=4f2112cbf6dcc8dd3444e4eced284457310f70d2
Certificate serial: 0197B7B305DDA31D229AD87013B2B913E092
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TyESy_bcyN00ROTs7ShEVzEPcNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/e080b6-4e09-42d8-b91c-b2798c1a0327/1/TyESy_bcyN00ROTs7ShEVzEPcNI.mft
Manifest number: 0AE3
Signing time: Sat 28 Jun 2025 18:00:52 +0000
Manifest this update: Sat 28 Jun 2025 18:00:52 +0000
Manifest next update: Sun 29 Jun 2025 18:00:52 +0000
Files and hashes: 1: TyESy_bcyN00ROTs7ShEVzEPcNI.crl (hash: 8aKRrT8rB1O29BsD5QHYTkuhSNADoU+P+brkFNEr+Ag=)
2: zMi5Kc-tpOMXc_ZTzrnudYI3V1w.roa (hash: gNyfXx018kULloOwGFLfmzefXCbqCOiY4gpRitRdbz8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/e080b6-4e09-42d8-b91c-b2798c1a0327/1/TyESy_bcyN00ROTs7ShEVzEPcNI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/e080b6-4e09-42d8-b91c-b2798c1a0327/1/TyESy_bcyN00ROTs7ShEVzEPcNI.mft
rsync://rpki.ripe.net/repository/DEFAULT/TyESy_bcyN00ROTs7ShEVzEPcNI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:05:dd:a3:1d:22:9a:d8:70:13:b2:b9:13:e0:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f2112cbf6dcc8dd3444e4eced284457310f70d2
Validity
Not Before: Jun 28 18:00:52 2025 GMT
Not After : Jun 29 18:00:52 2025 GMT
Subject: CN=8711438e7932c4ded9eec0cedc6b914550f7c75b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:7f:89:29:dc:c9:be:c7:23:f9:7b:7e:59:e5:
b1:2b:01:c1:3e:f2:82:0d:cb:9b:40:cc:4e:b8:4e:
10:2f:b7:9f:00:a5:15:be:1c:3c:4f:d3:54:f1:52:
6c:db:3a:a1:ea:73:fd:98:1e:b1:a1:55:1f:af:a0:
1a:cb:1f:b0:ec:cb:98:9d:c1:e6:c3:ca:4c:db:a0:
15:cf:32:57:71:af:c2:d5:f9:5d:56:d2:6b:16:ec:
04:35:50:97:0a:26:41:c4:81:3b:67:bd:ca:d0:a9:
ce:59:71:cf:1c:ba:c4:40:18:8a:80:fb:8b:5d:72:
59:0e:db:ad:e0:a4:8d:93:ba:67:f9:9b:ba:bf:d1:
d1:8b:e3:ba:55:0f:96:cf:c8:ab:3c:de:a3:86:3a:
a4:c4:92:92:65:67:25:25:38:87:26:57:4a:a3:cb:
74:57:37:3d:ef:c5:b5:c9:af:13:8f:16:86:b6:90:
55:34:fd:c6:94:7a:c1:57:28:8b:5c:73:bf:8f:2c:
1b:d8:a7:e8:00:3f:54:3a:8d:43:ed:c1:03:5f:f6:
f4:68:84:cf:8d:2b:2f:b8:e2:37:ab:10:b5:88:d6:
4f:70:2d:0b:81:1b:5f:40:a0:f1:38:6c:df:ec:95:
bc:25:15:da:6b:35:92:49:5d:bf:26:7d:00:fe:4b:
48:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:11:43:8E:79:32:C4:DE:D9:EE:C0:CE:DC:6B:91:45:50:F7:C7:5B
X509v3 Authority Key Identifier:
keyid:4F:21:12:CB:F6:DC:C8:DD:34:44:E4:EC:ED:28:44:57:31:0F:70:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TyESy_bcyN00ROTs7ShEVzEPcNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/e080b6-4e09-42d8-b91c-b2798c1a0327/1/TyESy_bcyN00ROTs7ShEVzEPcNI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/e080b6-4e09-42d8-b91c-b2798c1a0327/1/TyESy_bcyN00ROTs7ShEVzEPcNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:76:ab:00:85:b2:16:08:07:42:27:0e:ef:e8:26:a7:cc:ee:
04:1b:2c:d3:0d:02:4e:08:94:1b:43:85:21:f2:48:32:95:ce:
e2:a2:28:a1:9e:ae:58:f1:98:d9:b8:e6:b0:d4:8a:c6:3a:21:
e5:fb:30:ac:d7:68:7d:94:b8:bc:91:7b:25:72:93:9e:46:38:
6e:d2:1f:b1:2c:c4:ed:e5:e2:4d:e3:1b:12:d0:ae:a2:88:38:
c5:c8:34:b9:9d:35:f7:07:72:7f:72:5b:32:2a:1c:98:f2:56:
d3:a1:84:8b:99:6b:b4:73:64:33:6a:56:4b:25:92:3e:ab:f3:
30:92:19:60:fa:79:b6:f0:c5:39:68:f9:cd:97:d4:96:e7:f0:
7f:ff:5d:c3:82:60:e7:dd:f4:6d:2e:6b:ba:8c:cd:97:2d:1c:
b8:57:43:8e:13:81:3e:e9:5a:3f:e7:01:18:04:55:a6:46:2a:
6a:dc:df:d0:20:92:82:f4:97:c9:e8:39:fa:7a:67:74:24:0e:
f1:1b:c2:60:08:85:05:b4:9c:ee:5d:91:0a:eb:c4:fd:ce:0f:
e2:75:74:26:38:86:1b:e8:60:c9:0b:20:99:c3:41:71:9b:5f:
8c:9f:a1:6e:f1:59:de:b4:ea:58:c6:9f:8e:f3:10:2a:84:ad:
e1:5d:31:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:05:59 2025 by rpki-client