Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.mft
File: tJ61DLi6yS3BduiofPJVUoIhlPo.mft (raw, json)
Hash identifier: UKA2xioA/6I0ddkYfFjrXvquSWnG3oBnwUrN1bB3lSw=
Subject key identifier: DE:7B:E4:0F:CB:8E:52:B2:85:DB:18:48:03:A9:83:89:8F:59:00:87
Authority key identifier: B4:9E:B5:0C:B8:BA:C9:2D:C1:76:E8:A8:7C:F2:55:52:82:21:94:FA
Certificate issuer: /CN=b49eb50cb8bac92dc176e8a87cf25552822194fa
Certificate serial: 0197B6A06177C0631A999387A2F820C0F0D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tJ61DLi6yS3BduiofPJVUoIhlPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 13:00:53 +0000
Manifest this update: Sat 28 Jun 2025 13:00:53 +0000
Manifest next update: Sun 29 Jun 2025 13:00:53 +0000
Files and hashes: 1: J7n-Yd5XTH7n67jouruR47yViJQ.roa (hash: uOcoBZNZsx1gjsqlLawiv97uMdypKgT5mBdaC/TonUs=)
2: tJ61DLi6yS3BduiofPJVUoIhlPo.crl (hash: RRk7WA62brQK3AMQ0ss0ZMRgeDEWNGqTrxG44Gmb4qE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/tJ61DLi6yS3BduiofPJVUoIhlPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:61:77:c0:63:1a:99:93:87:a2:f8:20:c0:f0:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b49eb50cb8bac92dc176e8a87cf25552822194fa
Validity
Not Before: Jun 28 13:00:53 2025 GMT
Not After : Jun 29 13:00:53 2025 GMT
Subject: CN=de7be40fcb8e52b285db184803a983898f590087
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:18:57:3c:b7:bc:ee:09:e0:2a:f4:c9:aa:0f:
73:27:b2:8f:26:7b:45:7f:0d:5b:a9:e0:68:1c:00:
1b:92:f4:23:32:51:2e:91:0e:3a:a0:17:61:19:86:
0b:6e:8a:a2:f7:2b:51:a1:a2:ac:73:96:a6:78:99:
6f:39:b7:30:e0:df:98:53:08:ba:3c:3a:18:a6:3f:
de:6d:04:57:0d:a1:9d:f9:8f:a8:77:33:3c:9f:b7:
db:dc:8b:1b:13:60:a6:7f:fc:dd:c1:64:f8:4e:1c:
fe:cd:61:b5:ce:3f:4c:48:91:29:ff:91:5a:87:9c:
6c:90:f6:ca:92:31:24:b6:fd:b9:fd:14:70:5a:99:
42:14:88:32:d6:bb:19:06:d7:1f:23:b7:a0:e1:38:
f1:aa:44:fa:1c:71:01:a4:51:c6:05:5b:9b:ca:76:
70:17:0a:76:8a:b1:a3:28:2d:87:37:de:a2:a4:e6:
09:7f:9e:47:5c:e3:a6:70:6e:ad:c4:ca:1f:f5:39:
fd:d4:27:3b:99:a0:e1:b5:22:97:e1:82:d9:e1:28:
6b:b2:aa:27:76:22:a7:bc:8b:ca:ca:e1:4f:35:98:
09:3d:f4:c5:5b:fe:a1:50:11:a6:3d:4c:40:f8:a5:
e7:5f:72:fd:d4:28:aa:18:3c:58:8d:1f:86:39:74:
af:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:7B:E4:0F:CB:8E:52:B2:85:DB:18:48:03:A9:83:89:8F:59:00:87
X509v3 Authority Key Identifier:
keyid:B4:9E:B5:0C:B8:BA:C9:2D:C1:76:E8:A8:7C:F2:55:52:82:21:94:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tJ61DLi6yS3BduiofPJVUoIhlPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:a3:e9:1e:2d:12:13:16:45:6a:dc:d0:56:07:b3:92:9f:d7:
13:0c:73:af:49:af:20:ff:42:5f:d8:70:20:d9:da:43:6d:37:
2b:86:be:5c:9f:2b:ce:de:50:69:2b:1b:b6:da:47:f5:94:63:
92:9c:d2:fa:9d:9c:0e:15:1b:47:c7:7c:62:ec:e1:a0:3d:2d:
94:23:8c:fe:09:10:b6:fb:e2:a5:0d:cb:cb:cc:72:d5:ee:95:
d1:2b:51:6a:44:e6:51:de:b6:e1:32:3c:24:ab:e3:0d:ff:e4:
18:c8:e5:80:e1:77:3f:c0:f6:3c:da:71:1b:3b:84:56:5f:f0:
d3:a9:34:ce:1d:88:a2:fd:31:43:21:54:cf:5c:a1:9d:43:e7:
46:b3:d5:f1:e4:a6:7f:7e:32:bb:ef:67:71:b0:2a:df:6f:e2:
bc:03:b7:ed:b5:18:11:ed:11:e8:38:45:b9:bd:14:1c:fd:ab:
a5:8f:32:99:3b:57:bb:41:d2:7f:f5:e6:34:e0:aa:2c:a2:61:
4b:c4:58:3e:d8:e0:94:ae:e0:d3:8d:b7:b9:0c:83:2d:9e:be:
ce:45:15:c9:b8:a4:28:61:9f:71:10:d4:3b:42:0d:7d:fe:2c:
37:93:8c:1d:12:dc:48:c2:16:dd:db:7d:eb:e1:57:a5:78:3c:
dc:70:91:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:57:46 2025 by rpki-client