Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/3502fc-d9f7-4fa8-baf6-77d529be53d7/1/tLC71kRVeO28e6a1v3ypNo0kF78.mft
File: tLC71kRVeO28e6a1v3ypNo0kF78.mft (raw, json)
Hash identifier: Oobu36d5Z8m4pSSN4pUhACK02bfw7SiH/w59l3ZudwQ=
Subject key identifier: 25:8C:50:DA:9B:93:D7:0C:14:73:7C:38:F5:D1:62:FA:0A:16:BD:11
Authority key identifier: B4:B0:BB:D6:44:55:78:ED:BC:7B:A6:B5:BF:7C:A9:36:8D:24:17:BF
Certificate issuer: /CN=b4b0bbd6445578edbc7ba6b5bf7ca9368d2417bf
Certificate serial: 0197B820C40909B516BDD804A3D04AF8A05D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tLC71kRVeO28e6a1v3ypNo0kF78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/3502fc-d9f7-4fa8-baf6-77d529be53d7/1/tLC71kRVeO28e6a1v3ypNo0kF78.mft
Manifest number: 0C19
Signing time: Sat 28 Jun 2025 20:00:44 +0000
Manifest this update: Sat 28 Jun 2025 20:00:44 +0000
Manifest next update: Sun 29 Jun 2025 20:00:44 +0000
Files and hashes: 1: E_gpRXs1wyJj1CMrt4P6GzVFs4U.roa (hash: gqqgWP9QREPzkIwRRirj81r/4D9tgTwnunohsTpcA6w=)
2: HYQhj9GfS2VL1LGH2hoGRnAq_1g.roa (hash: vupLnnm29iaNTZjA+glh+6XHc5HkCkw1Lh/FCGeyQn4=)
3: tLC71kRVeO28e6a1v3ypNo0kF78.crl (hash: HXN/RN6157hPrdT1G5+nCn9OEsbGdMZjJhs5qF/o5OE=)
4: zqLBYDBfWNqychEyI3nXYt2CCRQ.roa (hash: xPd7pskgYW4omSSyK6JduhnPOzmyiWl553qH0EzZiqI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/3502fc-d9f7-4fa8-baf6-77d529be53d7/1/tLC71kRVeO28e6a1v3ypNo0kF78.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/3502fc-d9f7-4fa8-baf6-77d529be53d7/1/tLC71kRVeO28e6a1v3ypNo0kF78.mft
rsync://rpki.ripe.net/repository/DEFAULT/tLC71kRVeO28e6a1v3ypNo0kF78.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:20:c4:09:09:b5:16:bd:d8:04:a3:d0:4a:f8:a0:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4b0bbd6445578edbc7ba6b5bf7ca9368d2417bf
Validity
Not Before: Jun 28 20:00:44 2025 GMT
Not After : Jun 29 20:00:44 2025 GMT
Subject: CN=258c50da9b93d70c14737c38f5d162fa0a16bd11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:cf:af:1b:00:e6:f5:d5:52:0a:f4:22:69:9f:
ec:8f:a1:9f:80:e1:35:fa:23:07:bf:1f:76:cf:56:
c7:69:52:4e:d5:99:57:71:ff:f2:29:6f:f2:22:7a:
78:92:68:be:2d:bf:99:dd:a6:72:be:e0:7b:a2:a6:
18:b1:9f:70:1a:98:b0:7b:34:0b:3a:56:55:6a:09:
3f:a7:0f:1c:0f:12:0b:6e:ff:79:10:64:f5:bb:4b:
be:ac:05:a3:76:1c:9c:6e:e5:49:23:95:aa:37:f0:
e8:58:70:5f:ce:4c:26:3c:13:3e:4b:17:f9:3b:5f:
8b:df:3a:12:3f:fe:31:21:cd:26:5b:42:22:d4:6c:
a2:15:84:7b:e7:11:10:d2:40:34:8b:f1:b2:f4:3f:
49:84:9d:13:06:0b:e4:b8:ba:35:50:5f:c3:f5:69:
c4:7c:fe:9d:9d:21:df:4c:3f:34:61:3a:eb:a8:76:
6a:b9:9b:61:64:cf:d5:19:5e:b3:3d:a4:72:52:54:
a1:f2:9d:7f:62:5c:06:32:34:cd:0a:55:15:85:68:
6d:19:a1:44:e2:29:ab:27:3b:71:d4:7a:fb:12:f3:
07:9b:04:41:b8:4a:71:3d:a4:5a:58:15:ff:bb:7e:
ea:35:cc:56:4f:f5:38:82:4c:82:a1:b9:c0:81:82:
45:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:8C:50:DA:9B:93:D7:0C:14:73:7C:38:F5:D1:62:FA:0A:16:BD:11
X509v3 Authority Key Identifier:
keyid:B4:B0:BB:D6:44:55:78:ED:BC:7B:A6:B5:BF:7C:A9:36:8D:24:17:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tLC71kRVeO28e6a1v3ypNo0kF78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/3502fc-d9f7-4fa8-baf6-77d529be53d7/1/tLC71kRVeO28e6a1v3ypNo0kF78.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/3502fc-d9f7-4fa8-baf6-77d529be53d7/1/tLC71kRVeO28e6a1v3ypNo0kF78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:e9:cd:25:e2:24:8a:47:ea:b1:d1:6b:47:81:07:73:f5:bb:
54:82:e0:41:d5:b8:bf:d4:08:07:35:13:80:5a:57:1f:e7:6a:
75:b5:ae:ff:2d:15:22:ba:a6:ca:7f:bb:e8:18:45:e7:04:58:
9e:54:6d:70:fa:c9:e3:2d:03:a9:f2:fb:eb:30:82:ca:a5:5d:
ff:c8:f3:80:9a:e6:53:97:55:ab:cf:06:65:ee:ef:81:3e:d0:
eb:a7:cf:9c:e1:b9:c0:7f:19:a7:10:f4:a2:3c:25:ab:3a:5b:
cd:d1:ef:f7:27:c2:f7:c2:22:eb:b9:f6:fd:72:d2:43:44:3d:
4b:21:19:d0:83:1a:53:41:01:63:b5:1d:7b:50:01:d6:f9:b0:
cd:75:96:a9:3b:8c:6c:be:92:01:e0:69:c4:d0:09:f9:e4:27:
fd:a9:aa:30:85:69:da:19:f6:5e:43:16:11:f4:46:57:30:11:
c9:e9:fd:13:43:35:04:37:36:f0:02:ff:37:d6:ac:cd:f2:8e:
4f:28:e2:90:28:76:9f:a4:c1:43:0c:35:31:40:61:ae:cc:70:
4f:41:09:a4:68:96:fb:67:d7:35:58:e2:46:19:12:f3:28:5d:
10:11:eb:4d:25:54:cc:59:b2:9e:03:21:07:12:14:f6:1b:89:
71:6a:17:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:21:21 2025 by rpki-client