Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/097da1-7cc9-4343-8024-b310d71c2cad/1/1TX4-scGL3fyS5jNXDtUqJutSDg.mft
File: 1TX4-scGL3fyS5jNXDtUqJutSDg.mft (raw, json)
Hash identifier: 5QbB6QhL8cX0ZndRmiBGDgGr8dZ67noQWebSMcQ8MJM=
Subject key identifier: E2:DB:A7:42:E0:58:D7:8F:79:BE:A7:94:81:71:3E:8C:43:C0:E0:60
Authority key identifier: D5:35:F8:FA:C7:06:2F:77:F2:4B:98:CD:5C:3B:54:A8:9B:AD:48:38
Certificate issuer: /CN=d535f8fac7062f77f24b98cd5c3b54a89bad4838
Certificate serial: 0197B88F6F8280770D4E221AC5F098DF2D34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1TX4-scGL3fyS5jNXDtUqJutSDg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/097da1-7cc9-4343-8024-b310d71c2cad/1/1TX4-scGL3fyS5jNXDtUqJutSDg.mft
Manifest number: 1549
Signing time: Sat 28 Jun 2025 22:01:37 +0000
Manifest this update: Sat 28 Jun 2025 22:01:37 +0000
Manifest next update: Sun 29 Jun 2025 22:01:37 +0000
Files and hashes: 1: 1TX4-scGL3fyS5jNXDtUqJutSDg.crl (hash: NkediSZX1zcgYmFMb80fQBqll0pTpuwvr1JdBTW/wBk=)
2: N3-917WPyl7E_IHoSS2FMLc18wo.roa (hash: VHNMzSlgwcYRKlzGy0Nb6X63KDdiRRNUd0w6+PH3+3w=)
3: oJEvXpEBpuYbcFfcZPDBTEehGY8.roa (hash: b0SdOLZ2AbPJ+0i7CwF2Gja+/00y5/FVMUIAvNs5h1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/097da1-7cc9-4343-8024-b310d71c2cad/1/1TX4-scGL3fyS5jNXDtUqJutSDg.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/097da1-7cc9-4343-8024-b310d71c2cad/1/1TX4-scGL3fyS5jNXDtUqJutSDg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1TX4-scGL3fyS5jNXDtUqJutSDg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:6f:82:80:77:0d:4e:22:1a:c5:f0:98:df:2d:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d535f8fac7062f77f24b98cd5c3b54a89bad4838
Validity
Not Before: Jun 28 22:01:37 2025 GMT
Not After : Jun 29 22:01:37 2025 GMT
Subject: CN=e2dba742e058d78f79bea79481713e8c43c0e060
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:97:dc:fb:30:c0:0b:cc:bd:8e:b2:2d:72:80:
6f:fc:38:57:2d:9e:77:87:18:e3:a7:8e:64:33:cc:
b7:ee:61:66:22:f5:fc:6c:4d:d7:f2:5f:13:1e:96:
6a:ab:d7:98:da:e6:fa:06:45:12:0c:c2:49:32:de:
cb:d9:1e:c6:76:f3:86:84:1e:df:8a:9f:20:1f:3c:
24:1a:23:03:18:ad:fb:1b:26:5b:28:fe:f8:00:bc:
6e:8b:40:9a:50:ca:dd:35:ef:4a:03:76:00:4c:ff:
16:5c:51:5c:f9:61:48:5e:92:a9:57:c6:f7:ef:89:
ad:63:06:79:46:7d:09:ac:23:17:70:f9:c4:92:e5:
ce:da:ed:1a:f1:9d:2c:ab:0a:cc:fc:45:35:eb:05:
b7:f2:ef:d7:c5:dd:fa:b9:40:25:28:1d:12:36:78:
c4:e6:f3:90:d3:42:a6:38:32:4e:8f:01:18:37:92:
de:2a:ff:3f:f1:99:8c:56:7d:05:eb:9a:65:40:bc:
59:23:9b:27:6d:42:d3:d1:91:0b:fc:8b:64:1b:bc:
26:69:4f:ac:0d:e6:c0:89:b6:61:8e:6d:c1:11:29:
a5:e0:70:f5:06:60:7c:34:33:43:6f:0f:61:ee:f0:
4c:f1:89:5d:d3:81:b5:a6:f3:6c:b9:a4:13:65:e3:
26:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:DB:A7:42:E0:58:D7:8F:79:BE:A7:94:81:71:3E:8C:43:C0:E0:60
X509v3 Authority Key Identifier:
keyid:D5:35:F8:FA:C7:06:2F:77:F2:4B:98:CD:5C:3B:54:A8:9B:AD:48:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1TX4-scGL3fyS5jNXDtUqJutSDg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/097da1-7cc9-4343-8024-b310d71c2cad/1/1TX4-scGL3fyS5jNXDtUqJutSDg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/097da1-7cc9-4343-8024-b310d71c2cad/1/1TX4-scGL3fyS5jNXDtUqJutSDg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:23:16:eb:7f:5e:57:54:5e:9e:a9:5f:53:41:be:1f:db:cd:
e6:4d:35:b2:ad:40:22:ec:19:84:9f:bc:f1:c5:ac:00:b4:57:
3e:c0:32:94:46:95:75:e8:03:99:7b:22:eb:33:f6:1d:e7:15:
aa:88:f0:ee:14:6f:92:5d:9e:ec:88:8a:6e:a7:9a:7c:35:e0:
59:c3:ff:f2:12:05:bd:b1:2c:84:8d:6c:f7:64:d1:16:e7:5b:
8c:34:46:65:0f:8f:76:22:e7:52:de:56:93:07:c3:11:b3:5e:
03:e1:4b:56:a2:f1:84:5b:91:2b:c0:35:f1:98:f3:62:d1:e8:
8c:e8:56:9a:8c:ae:ae:dd:28:e5:dc:3d:b3:0a:54:6e:bf:a6:
cd:71:c7:b7:ae:16:38:69:5a:bd:de:14:69:55:b6:5f:2a:c3:
88:46:2b:2b:eb:87:cb:68:d2:60:7a:42:f8:ca:01:66:b7:50:
0d:d6:1b:45:08:c0:7c:6c:f1:39:27:e6:7a:15:9d:9d:67:74:
c5:4e:ce:f5:7a:8c:0c:c7:cc:8f:05:30:ba:14:04:ac:16:28:
cc:d3:37:8a:29:1b:7d:20:18:46:4f:d6:79:0b:9f:e7:16:4e:
77:0c:30:98:2d:52:3b:5b:55:4c:84:bd:b6:e5:8e:95:55:7a:
54:14:fc:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 00:36:06 2025 by rpki-client