Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/3d4c46-7545-4b3d-8f1c-2a63402bec66/1/tIENfJv8WLngoeWRacPdMi3p9zc.mft
File: tIENfJv8WLngoeWRacPdMi3p9zc.mft (raw, json)
Hash identifier: lM4kRTEpJUW3aEndDReMpZoCy7KhKalahRuUAveX6D8=
Subject key identifier: 90:89:3B:C9:A5:F2:2E:C0:47:E8:CE:61:31:66:89:5F:59:68:85:5B
Authority key identifier: B4:81:0D:7C:9B:FC:58:B9:E0:A1:E5:91:69:C3:DD:32:2D:E9:F7:37
Certificate issuer: /CN=b4810d7c9bfc58b9e0a1e59169c3dd322de9f737
Certificate serial: 0197B70F27853A1A52E87AFD252941648A44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tIENfJv8WLngoeWRacPdMi3p9zc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/3d4c46-7545-4b3d-8f1c-2a63402bec66/1/tIENfJv8WLngoeWRacPdMi3p9zc.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 15:01:52 +0000
Manifest this update: Sat 28 Jun 2025 15:01:52 +0000
Manifest next update: Sun 29 Jun 2025 15:01:52 +0000
Files and hashes: 1: jHERjwHQQByovrguIT9kNAenUlw.roa (hash: fC13Nqgu9Ca7tsn1KpGgJ5T6X5W9BeqrdrYm3SZE1Rs=)
2: tIENfJv8WLngoeWRacPdMi3p9zc.crl (hash: TdRj5wwzxrpkv0Fz1gBdrLeEGxy/yStCUo32UiWqE/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/3d4c46-7545-4b3d-8f1c-2a63402bec66/1/tIENfJv8WLngoeWRacPdMi3p9zc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/3d4c46-7545-4b3d-8f1c-2a63402bec66/1/tIENfJv8WLngoeWRacPdMi3p9zc.mft
rsync://rpki.ripe.net/repository/DEFAULT/tIENfJv8WLngoeWRacPdMi3p9zc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:27:85:3a:1a:52:e8:7a:fd:25:29:41:64:8a:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4810d7c9bfc58b9e0a1e59169c3dd322de9f737
Validity
Not Before: Jun 28 15:01:52 2025 GMT
Not After : Jun 29 15:01:52 2025 GMT
Subject: CN=90893bc9a5f22ec047e8ce613166895f5968855b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:47:99:e9:35:3f:11:53:b8:08:8a:6a:1f:08:
dc:02:bc:16:1d:23:70:39:ff:c1:29:2b:39:ce:b2:
af:95:9a:bd:57:0e:e8:7a:18:9a:10:4d:1a:0c:30:
db:66:bc:d3:b4:e2:b4:71:46:24:f4:81:f7:1a:f4:
3e:da:16:0f:71:8b:30:51:42:29:36:79:0e:0e:59:
ac:39:bc:7a:82:04:26:3a:db:61:d2:83:57:85:9e:
e6:74:7c:14:1b:6e:6e:cd:33:06:c0:67:65:12:45:
d3:40:cd:36:d3:8f:eb:ac:e8:9e:cc:a5:92:2a:87:
dd:c9:da:a2:0c:0b:8d:8d:7e:48:95:85:d0:69:76:
bd:d4:84:b6:fb:6e:27:c6:39:48:2a:d5:db:fa:66:
a4:a8:03:8e:a3:60:2f:af:98:12:ca:d7:6f:37:ba:
20:f4:8b:4e:b3:72:b9:3e:76:ef:53:47:ca:3c:ef:
c9:ed:da:66:9d:5a:2b:65:02:0a:0d:08:f7:33:bd:
13:4e:24:0e:e4:80:22:6b:a9:7b:3c:3e:7d:52:13:
3f:b3:20:bc:5f:d1:a4:9e:7d:93:28:76:77:1b:78:
7e:fe:13:da:df:a3:02:de:69:a3:d9:b7:bb:ea:e1:
fa:43:2d:7f:a0:3f:59:71:98:7a:d8:72:13:91:e9:
b2:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:89:3B:C9:A5:F2:2E:C0:47:E8:CE:61:31:66:89:5F:59:68:85:5B
X509v3 Authority Key Identifier:
keyid:B4:81:0D:7C:9B:FC:58:B9:E0:A1:E5:91:69:C3:DD:32:2D:E9:F7:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tIENfJv8WLngoeWRacPdMi3p9zc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/3d4c46-7545-4b3d-8f1c-2a63402bec66/1/tIENfJv8WLngoeWRacPdMi3p9zc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/3d4c46-7545-4b3d-8f1c-2a63402bec66/1/tIENfJv8WLngoeWRacPdMi3p9zc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:d8:27:67:0a:ec:fe:fb:cf:e8:0c:07:ee:8a:c3:07:3a:3f:
55:58:3d:ac:64:7a:4d:10:b9:3b:c4:47:9f:99:65:0b:07:ae:
33:10:46:2d:59:63:56:22:99:55:a1:c3:d4:62:82:95:6e:aa:
8c:cd:4c:c6:9d:4b:36:72:96:5a:ae:82:4c:2f:b7:8f:e2:49:
c9:e6:11:c6:62:82:09:66:d4:c8:aa:aa:91:fb:ae:72:1d:a1:
bc:48:95:5f:e9:f8:92:36:71:57:f9:7a:68:52:8b:6b:b9:dc:
07:77:ad:bc:74:ce:fe:33:28:26:1d:1e:5a:73:7c:6e:55:33:
45:26:d1:3f:2f:15:54:c1:35:ae:60:c4:9e:18:24:93:04:f9:
64:fb:ba:23:70:94:38:3a:0f:c5:8a:18:99:71:94:b4:ca:6d:
19:e7:31:ed:dc:a2:9c:e7:4a:18:ad:a3:1b:98:61:08:07:6c:
49:b8:47:b0:7b:43:98:29:69:7c:a2:95:ed:04:fa:8b:cc:6a:
4b:29:87:bc:1b:e6:c0:dc:f6:f1:2c:13:2d:a7:c0:03:8b:5f:
5c:eb:a4:01:48:4e:21:1c:39:fa:39:1e:c1:e5:a0:e2:0f:a7:
1b:1e:37:d6:7c:86:fd:f0:ab:39:d9:b3:64:d5:fd:35:eb:2e:
53:ae:2a:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:34:08 2025 by rpki-client