Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/689ab5-30d2-46a3-8c54-16b4196fa294/1/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.mft
File: Tmm0ArZ9dZNvRdyLxUuGgU4GNro.mft (raw, json)
Hash identifier: qK2ZJGcEId15xQNofnlbBenHFt78K8+Es3AKZdUzjrQ=
Subject key identifier: 1D:95:AA:A6:8D:4A:17:C6:4B:25:5E:75:BF:24:65:F3:A1:04:4C:88
Authority key identifier: 4E:69:B4:02:B6:7D:75:93:6F:45:DC:8B:C5:4B:86:81:4E:06:36:BA
Certificate issuer: /CN=4e69b402b67d75936f45dc8bc54b86814e0636ba
Certificate serial: 0197B7B3289882E50F357BCC979CC719A75D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/689ab5-30d2-46a3-8c54-16b4196fa294/1/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.mft
Manifest number: 1196
Signing time: Sat 28 Jun 2025 18:01:01 +0000
Manifest this update: Sat 28 Jun 2025 18:01:01 +0000
Manifest next update: Sun 29 Jun 2025 18:01:01 +0000
Files and hashes: 1: OvfWeCcNPkjbD4WceB7qJUQP56g.roa (hash: fRXrYY7/CZ7H+wWfEy5WHXYQSNWj53G/u9ERuP4d6t8=)
2: Tmm0ArZ9dZNvRdyLxUuGgU4GNro.crl (hash: qwF6Lr1muvY6aUTNcFB5R3EbOH6CgjynSrx+v/f5rGI=)
3: mVQlHhnVYgof6PbGg47IlXbHufE.roa (hash: EuWc5XhS83Rt6mxNh7vCwfoYl/yRKN36oWWE3rRVLmQ=)
4: qs4pJOexn1Zfkfzcd1TjFYHIVOs.roa (hash: FgzvVUL28rYxcaIK8c4YP+ZNrmGFqrNKlv9zOeTK/II=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/689ab5-30d2-46a3-8c54-16b4196fa294/1/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/689ab5-30d2-46a3-8c54-16b4196fa294/1/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:28:98:82:e5:0f:35:7b:cc:97:9c:c7:19:a7:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e69b402b67d75936f45dc8bc54b86814e0636ba
Validity
Not Before: Jun 28 18:01:01 2025 GMT
Not After : Jun 29 18:01:01 2025 GMT
Subject: CN=1d95aaa68d4a17c64b255e75bf2465f3a1044c88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:34:2b:cf:57:b6:b4:8d:f1:d5:a6:85:47:95:
b7:e9:da:88:e3:b6:6d:b5:ea:ca:2e:7a:3b:4d:d2:
1c:50:99:53:7e:87:f8:86:f3:86:5a:10:90:03:b7:
a1:f4:cd:8f:a5:cb:9b:b3:99:f7:86:12:59:f7:1e:
c4:e0:ff:9e:9b:78:ab:0f:f3:4f:22:c4:f8:38:38:
cd:68:ec:05:10:ad:69:8e:b6:13:49:04:f9:4e:3c:
df:9c:19:22:e3:22:da:ee:0a:da:be:c8:42:22:d4:
4b:d7:31:d4:53:46:37:12:a5:71:17:4f:a3:a5:d6:
84:6e:30:d6:ed:21:f6:e8:bc:78:c2:1d:39:93:8b:
37:f8:f2:3b:9a:02:bf:e7:9e:6e:53:7c:27:d6:74:
15:a3:ed:76:8d:2d:83:90:c7:68:c0:cd:d0:d7:d9:
13:11:ee:e3:05:ef:61:ad:0a:61:56:82:97:90:90:
8a:7a:c9:69:3e:16:b1:b4:40:d0:72:e1:4f:26:d5:
fc:3b:e4:c7:51:69:89:81:f6:d0:ef:16:d3:7a:e5:
e1:3c:53:7b:79:e8:a1:29:ef:d0:c1:a7:76:b4:a2:
e5:c2:07:70:6a:a3:e8:21:18:1e:5c:52:5a:8e:eb:
b7:91:37:1f:38:d9:45:0e:ee:62:e1:c4:8c:87:82:
f8:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:95:AA:A6:8D:4A:17:C6:4B:25:5E:75:BF:24:65:F3:A1:04:4C:88
X509v3 Authority Key Identifier:
keyid:4E:69:B4:02:B6:7D:75:93:6F:45:DC:8B:C5:4B:86:81:4E:06:36:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/689ab5-30d2-46a3-8c54-16b4196fa294/1/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/689ab5-30d2-46a3-8c54-16b4196fa294/1/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:95:49:92:86:4c:02:d2:bc:d3:c1:05:d9:65:60:31:4c:34:
3d:66:5f:22:3d:e5:3f:c8:ea:ad:7b:ae:6a:ec:6a:c8:b8:ff:
0f:41:6e:41:45:fe:76:0e:dd:a1:53:da:76:63:27:e1:fa:73:
cb:d3:3d:f1:b0:d1:77:f4:98:11:e4:ef:21:1f:14:d8:a8:fe:
90:37:95:67:89:41:a2:cd:d5:91:60:6b:e5:e8:aa:39:c7:c4:
39:d8:7c:ba:4d:a4:89:cc:cb:6e:43:ab:28:8b:6e:9d:1c:ed:
b2:6c:86:f4:8f:7d:94:d2:9a:6a:04:0e:88:50:9e:52:77:8f:
09:0e:f2:43:d5:f9:3a:8e:ec:8b:af:39:f7:a2:a8:d4:a7:a6:
21:d3:26:d9:5f:a1:a6:4b:3d:bf:e0:c4:da:30:1c:90:cd:b2:
4a:99:62:3a:89:2d:9f:01:36:32:48:98:1c:20:ce:6c:c5:12:
fc:39:db:dd:f1:51:fd:5f:4c:4a:1c:98:85:3d:ec:4b:3e:8e:
bc:ab:0e:db:3e:cf:f0:f4:01:fd:eb:c8:05:69:65:99:2e:80:
67:23:36:52:4f:6c:51:3b:19:c0:0f:92:ee:80:cf:7e:d9:50:
e6:e9:6f:f9:3f:bc:c7:66:64:d4:7e:2d:15:de:bd:1b:12:f9:
c7:16:25:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:05:54 2025 by rpki-client