Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/d6513d-2d53-4022-8360-3117989601ad/1/tKIIXH3jtZgha4n7Dysdkw3mbBk.mft
File: tKIIXH3jtZgha4n7Dysdkw3mbBk.mft (raw, json)
Hash identifier: 6wTmmSAqnkZsZM+zECKW2S4YK8F2xr0Wy79lkDbWQ2A=
Subject key identifier: 11:A3:AF:1C:4C:AF:4C:8C:79:9B:AB:40:78:0A:4C:56:95:B9:E2:2E
Authority key identifier: B4:A2:08:5C:7D:E3:B5:98:21:6B:89:FB:0F:2B:1D:93:0D:E6:6C:19
Certificate issuer: /CN=b4a2085c7de3b598216b89fb0f2b1d930de66c19
Certificate serial: 0197B8213F1045D54F7A4BDF678D7F0C9ACA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tKIIXH3jtZgha4n7Dysdkw3mbBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/d6513d-2d53-4022-8360-3117989601ad/1/tKIIXH3jtZgha4n7Dysdkw3mbBk.mft
Manifest number: 158B
Signing time: Sat 28 Jun 2025 20:01:15 +0000
Manifest this update: Sat 28 Jun 2025 20:01:15 +0000
Manifest next update: Sun 29 Jun 2025 20:01:15 +0000
Files and hashes: 1: Bm5UACtbnF-zdFYjA8vPOBqvgzc.roa (hash: TLMH3v0yPGvBQf4sp02A0ciC7nkIzxuyV+cC5oHQvcg=)
2: KygTuxQFGUD5ATwC-VI56P0_KW8.roa (hash: +kPqhnKnrFZGjWfktqCyP4orZXjdv9+6M6sRVLgaUrA=)
3: kH7H7auuv6q7VTDiT7be_vcY-1Q.roa (hash: M4+McdjIhgE1/SI8bKbvFu1HsdzjwaQszRqVGjqa+wM=)
4: tKIIXH3jtZgha4n7Dysdkw3mbBk.crl (hash: OsbrlsfgGBfAj1pVwnutpBo7LIqZOROqLumWjwnsHA8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/d6513d-2d53-4022-8360-3117989601ad/1/tKIIXH3jtZgha4n7Dysdkw3mbBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/d6513d-2d53-4022-8360-3117989601ad/1/tKIIXH3jtZgha4n7Dysdkw3mbBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/tKIIXH3jtZgha4n7Dysdkw3mbBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:3f:10:45:d5:4f:7a:4b:df:67:8d:7f:0c:9a:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4a2085c7de3b598216b89fb0f2b1d930de66c19
Validity
Not Before: Jun 28 20:01:15 2025 GMT
Not After : Jun 29 20:01:15 2025 GMT
Subject: CN=11a3af1c4caf4c8c799bab40780a4c5695b9e22e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b4:75:09:05:e7:3c:09:73:1f:ae:72:a1:60:
f3:ad:8f:16:ef:62:94:ef:3c:eb:fa:e5:e1:fb:fe:
e5:8b:3d:d1:7e:d8:91:c3:04:01:6f:a2:ad:17:08:
94:ef:26:c1:79:58:4f:84:32:81:e6:2b:e5:cc:b9:
5b:29:d8:bc:83:f2:a9:83:b3:81:58:75:0c:a9:cb:
63:e7:70:9f:c0:ef:11:d2:19:5d:72:70:54:13:e2:
30:06:f3:21:a9:fd:d7:91:13:d0:78:cf:b0:18:d7:
4c:10:af:9d:3a:ec:69:62:b5:53:d1:fd:6b:3b:95:
01:0f:a6:98:4c:ac:1c:ba:16:d4:57:6c:46:ed:d5:
c3:69:c0:d2:d0:e7:8e:f2:b0:e2:57:f4:3a:90:21:
13:02:fd:f7:a1:f7:3c:7a:c1:fa:36:30:46:d2:61:
d6:00:09:24:38:8f:d9:b3:4a:06:21:a5:0a:37:4c:
35:0b:b6:27:f1:5e:2f:a4:c3:f3:8a:de:1a:37:36:
2a:50:7b:b8:ff:86:79:6a:86:19:91:20:8b:e1:05:
79:8e:9b:60:5d:d5:23:e0:1f:4a:dd:45:c2:1d:d7:
90:1e:2d:11:73:dc:da:6e:0d:1a:d4:11:2d:3a:76:
74:bc:d3:94:06:45:33:71:26:35:ff:14:52:06:f4:
65:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:A3:AF:1C:4C:AF:4C:8C:79:9B:AB:40:78:0A:4C:56:95:B9:E2:2E
X509v3 Authority Key Identifier:
keyid:B4:A2:08:5C:7D:E3:B5:98:21:6B:89:FB:0F:2B:1D:93:0D:E6:6C:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tKIIXH3jtZgha4n7Dysdkw3mbBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d6513d-2d53-4022-8360-3117989601ad/1/tKIIXH3jtZgha4n7Dysdkw3mbBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d6513d-2d53-4022-8360-3117989601ad/1/tKIIXH3jtZgha4n7Dysdkw3mbBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d5:76:93:1a:b4:57:cb:48:3d:18:ab:46:2d:7b:41:cb:bf:8b:
9e:80:4c:67:11:79:bb:08:9f:0a:2b:5c:38:92:02:b9:64:06:
db:5c:89:1a:f2:52:b8:3d:69:fa:d4:06:a6:88:02:d7:e9:03:
95:8e:5c:33:45:bf:26:34:88:d3:6a:c8:42:c2:1d:43:22:87:
6d:d9:cd:ef:81:9a:e5:1a:f2:07:fe:f4:d5:42:b2:c2:7f:ad:
35:64:2d:5d:b0:4e:8c:59:5a:e7:34:d9:66:9c:85:f6:d7:2a:
39:b5:22:58:d7:54:71:e9:61:0e:89:f4:e9:84:52:bc:5b:d9:
6d:26:c4:5d:af:13:5a:a6:fa:21:5a:0b:8a:41:a4:30:84:a6:
7d:b2:4d:06:1f:20:82:fe:3f:96:1c:0f:3f:93:9d:e6:93:9a:
ca:39:68:06:4f:ab:c9:f1:c2:c7:b7:63:19:2a:8e:b6:9a:85:
50:d1:a6:77:c4:81:06:4d:4d:7e:7c:87:36:3a:79:55:4f:e3:
8a:be:3f:15:8e:66:1f:73:a4:da:aa:48:c8:44:0f:77:f9:2b:
ae:1d:b0:51:80:76:55:93:0b:7e:d3:df:ff:aa:92:82:a5:3d:
f7:19:12:d2:a6:97:44:20:dd:41:d9:13:67:e3:88:43:ed:33:
5c:87:d3:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:06:05 2025 by rpki-client