Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/TBsMQJaQgJV_zO4fuKP7S7OL9dw.mft
File: TBsMQJaQgJV_zO4fuKP7S7OL9dw.mft (raw, json)
Hash identifier: c3M2UFYLn+1kBeopt/SW59T00E+mWzsCPsCELOhHeKc=
Subject key identifier: E7:01:D7:00:50:BA:4C:6E:CF:62:6B:48:75:80:A4:81:D0:3F:FD:C7
Authority key identifier: 4C:1B:0C:40:96:90:80:95:7F:CC:EE:1F:B8:A3:FB:4B:B3:8B:F5:DC
Certificate issuer: /CN=4c1b0c40969080957fccee1fb8a3fb4bb38bf5dc
Certificate serial: 0197B6A10B15D21E23BDAA44008A14B648B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TBsMQJaQgJV_zO4fuKP7S7OL9dw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/TBsMQJaQgJV_zO4fuKP7S7OL9dw.mft
Manifest number: 12A3
Signing time: Sat 28 Jun 2025 13:01:36 +0000
Manifest this update: Sat 28 Jun 2025 13:01:36 +0000
Manifest next update: Sun 29 Jun 2025 13:01:36 +0000
Files and hashes: 1: H36xXwuB9FJ3ESjpo_XmH_KZ2R4.roa (hash: CUtTMRPtfP9rNsMoQeZ2J44Z+jwTnsWRsKW5k/0LKug=)
2: TBsMQJaQgJV_zO4fuKP7S7OL9dw.crl (hash: g8eZz+HrFsALXep45aioeICjSpdVEKqldxfXCowGing=)
3: tpqvdlW8wuSttlFQd80uk4F5YQY.roa (hash: yDvp+gGPiyhARcManoLZEVb02KcZ7k4JkC3clhGu75w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/TBsMQJaQgJV_zO4fuKP7S7OL9dw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/TBsMQJaQgJV_zO4fuKP7S7OL9dw.mft
rsync://rpki.ripe.net/repository/DEFAULT/TBsMQJaQgJV_zO4fuKP7S7OL9dw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:0b:15:d2:1e:23:bd:aa:44:00:8a:14:b6:48:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c1b0c40969080957fccee1fb8a3fb4bb38bf5dc
Validity
Not Before: Jun 28 13:01:36 2025 GMT
Not After : Jun 29 13:01:36 2025 GMT
Subject: CN=e701d70050ba4c6ecf626b487580a481d03ffdc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:65:dc:a8:80:64:dc:a3:ce:f7:28:ac:20:f5:
fe:d4:25:5f:f6:10:5f:44:bf:de:26:35:ba:c2:b3:
a6:f6:a0:ec:03:ce:96:b0:89:eb:e9:cb:9c:49:e1:
f3:db:b8:ae:d4:09:b0:e1:9b:d9:dc:8a:ac:8a:b9:
07:56:e1:de:14:14:11:3a:32:d4:99:b8:ff:26:27:
84:7e:01:00:71:f0:04:f4:10:41:b6:6e:2d:91:56:
be:4f:25:73:1e:57:3f:66:76:10:b6:9d:4b:d2:15:
3f:6c:cd:dd:57:27:14:83:55:0a:c4:68:21:7e:c5:
34:56:e3:cc:b1:46:17:1d:b1:82:ab:bd:ae:8f:e5:
c0:82:06:e1:03:85:d6:22:e1:2e:40:fa:02:73:24:
5d:a3:ea:05:21:c5:bd:66:e9:14:98:6d:53:f6:8d:
c5:2e:db:78:82:5f:a8:3c:9d:6c:d8:13:60:d4:5d:
55:2c:73:45:df:97:1f:cd:3e:f6:08:a2:a4:83:75:
07:b8:7b:87:f1:b1:91:2d:b5:07:7d:3f:9c:a3:f6:
1a:69:f0:85:2b:ac:44:08:72:b6:f3:82:35:5c:f1:
46:86:8c:62:5c:47:e8:bb:0a:12:5c:a6:4f:25:6d:
c7:15:38:e9:d9:c1:77:8f:36:bf:f4:49:78:0e:d4:
c9:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:01:D7:00:50:BA:4C:6E:CF:62:6B:48:75:80:A4:81:D0:3F:FD:C7
X509v3 Authority Key Identifier:
keyid:4C:1B:0C:40:96:90:80:95:7F:CC:EE:1F:B8:A3:FB:4B:B3:8B:F5:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TBsMQJaQgJV_zO4fuKP7S7OL9dw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/TBsMQJaQgJV_zO4fuKP7S7OL9dw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/TBsMQJaQgJV_zO4fuKP7S7OL9dw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:89:65:b3:fd:df:ae:af:d7:d4:cd:57:4d:0f:73:b4:7f:49:
ad:e9:e0:24:d0:f8:de:32:b3:f5:17:d2:04:7f:62:d2:17:33:
28:8a:72:55:65:5a:65:6d:c0:b1:66:b6:38:fa:d8:bf:98:38:
1c:cf:33:2f:d6:8a:7f:94:3e:74:2f:0d:72:2d:7c:fc:fe:14:
e2:f1:32:7e:8b:a4:13:2a:e9:59:35:1e:e1:1f:d7:9e:80:6b:
fd:8a:98:c5:b5:1b:bb:b3:fb:e5:4a:45:0e:89:80:c4:67:ec:
ff:8d:92:b2:d0:cc:fa:4b:8b:74:5e:5a:65:b3:9a:8c:e2:88:
55:9b:cf:41:a3:c3:0b:43:de:1e:7e:a3:82:6e:eb:29:62:ba:
5e:a4:d1:9b:52:7d:a3:58:e8:62:3b:97:c8:c1:fe:b1:c5:80:
f8:67:14:16:b2:bd:85:b7:b1:7a:7a:07:be:87:0f:5f:24:21:
d0:f6:19:2d:70:8a:b5:1d:4a:fb:23:33:a2:4c:04:01:15:1b:
24:81:71:20:c1:70:e6:56:5d:74:bb:bd:f1:6b:93:e1:7d:46:
49:0d:9c:6f:5f:2d:5f:2e:68:e4:0d:88:7b:81:3f:6f:8c:50:
e5:86:e3:75:d8:e0:66:b9:d7:e2:cf:4e:73:0a:a0:2a:aa:25:
0d:b7:42:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:32:49 2025 by rpki-client