Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/2e6613-4332-4c19-addf-dedaf79356ce/1/t4OAtB43tXV9PU4u7N8G2TCnC50.mft
File: t4OAtB43tXV9PU4u7N8G2TCnC50.mft (raw, json)
Hash identifier: sztQb7lZUuwq41Mou9Jcmi9ftVN2U8SF1V96eKKy6/o=
Subject key identifier: A7:35:2D:57:62:FC:94:AD:1D:4B:24:A9:AD:68:AA:34:96:E6:B3:5C
Authority key identifier: B7:83:80:B4:1E:37:B5:75:7D:3D:4E:2E:EC:DF:06:D9:30:A7:0B:9D
Certificate issuer: /CN=b78380b41e37b5757d3d4e2eecdf06d930a70b9d
Certificate serial: 0197BF36295DED8E6D1E622AA4C3E5B34D3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t4OAtB43tXV9PU4u7N8G2TCnC50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/2e6613-4332-4c19-addf-dedaf79356ce/1/t4OAtB43tXV9PU4u7N8G2TCnC50.mft
Manifest number: 15C0
Signing time: Mon 30 Jun 2025 05:01:27 +0000
Manifest this update: Mon 30 Jun 2025 05:01:27 +0000
Manifest next update: Tue 01 Jul 2025 05:01:27 +0000
Files and hashes: 1: FFNfocwWW0AfwhIbyh5sOWKp-YQ.roa (hash: +IQV10jr/ct4eRg1uckgNvPR/qQ6+ipg5/BVGvg6xW8=)
2: t4OAtB43tXV9PU4u7N8G2TCnC50.crl (hash: SyJ0G7m1cJ6p1tG5tFn3TSxzLpXaCLxfsxdfSTVDwKk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/2e6613-4332-4c19-addf-dedaf79356ce/1/t4OAtB43tXV9PU4u7N8G2TCnC50.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/2e6613-4332-4c19-addf-dedaf79356ce/1/t4OAtB43tXV9PU4u7N8G2TCnC50.mft
rsync://rpki.ripe.net/repository/DEFAULT/t4OAtB43tXV9PU4u7N8G2TCnC50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 05:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:bf:36:29:5d:ed:8e:6d:1e:62:2a:a4:c3:e5:b3:4d:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b78380b41e37b5757d3d4e2eecdf06d930a70b9d
Validity
Not Before: Jun 30 05:01:27 2025 GMT
Not After : Jul 1 05:01:27 2025 GMT
Subject: CN=a7352d5762fc94ad1d4b24a9ad68aa3496e6b35c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:cd:a4:47:da:97:04:c3:76:e2:1c:8f:c2:96:
4b:c4:2a:36:94:83:8b:3a:25:79:0e:16:c5:a9:9d:
e2:bc:f4:d2:c6:88:db:15:fe:41:7c:6b:57:54:ee:
04:56:77:71:52:56:78:8b:1d:1c:48:9d:5a:3a:40:
40:a1:65:e4:ef:70:e1:eb:3c:9c:73:de:62:f1:80:
e8:42:68:61:29:ac:9c:0c:96:0b:58:6a:26:c7:8d:
a3:ec:a3:4c:24:e4:bb:e2:6d:ab:a0:8a:5b:28:85:
cf:b9:1d:d9:c3:36:00:a5:90:29:2e:b9:15:ec:e5:
97:ba:2a:86:9a:56:2d:9c:fc:28:4a:f4:64:89:8f:
f8:f3:b4:51:15:0a:34:55:0c:4f:3a:77:40:6e:87:
ad:aa:13:fb:55:36:92:59:7f:09:ad:bb:14:25:b5:
88:25:04:ca:6f:dc:55:76:ab:1b:90:8c:16:e3:7f:
50:73:dc:65:9f:13:26:b1:d5:93:f5:b1:ea:f9:57:
76:d6:75:87:3e:29:1e:74:55:82:38:11:7d:7d:f9:
eb:13:82:92:58:83:2c:b2:af:f6:e3:09:eb:b9:7a:
72:c6:e7:8a:57:61:d1:02:09:cf:06:4b:2b:d2:8d:
1e:06:a6:c4:ee:76:45:28:1d:9d:d3:bb:99:36:ae:
c7:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:35:2D:57:62:FC:94:AD:1D:4B:24:A9:AD:68:AA:34:96:E6:B3:5C
X509v3 Authority Key Identifier:
keyid:B7:83:80:B4:1E:37:B5:75:7D:3D:4E:2E:EC:DF:06:D9:30:A7:0B:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4OAtB43tXV9PU4u7N8G2TCnC50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/2e6613-4332-4c19-addf-dedaf79356ce/1/t4OAtB43tXV9PU4u7N8G2TCnC50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/2e6613-4332-4c19-addf-dedaf79356ce/1/t4OAtB43tXV9PU4u7N8G2TCnC50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:78:f7:8c:b7:93:c2:61:7a:16:23:fb:d1:01:43:dc:43:2c:
7b:e4:07:97:26:9c:d1:8c:fb:b4:9c:d5:ca:93:87:ec:88:7c:
d3:4a:b7:3a:38:74:61:1a:14:10:4f:15:c1:41:4c:16:06:f4:
a7:3c:b8:6c:99:3c:ad:ff:d6:50:54:9e:eb:8c:4c:ee:71:d9:
5b:f1:86:3e:6d:44:cd:39:d0:c9:b4:e7:9e:9b:a8:60:59:ba:
d2:a7:75:c7:88:58:78:a3:e5:1f:16:c3:9e:f6:84:c1:b8:2f:
c2:2b:bf:27:04:9c:b6:71:8e:9e:fe:53:fb:1f:1d:61:3a:9d:
e4:b6:49:b4:a5:a9:6e:85:52:0b:42:db:14:a4:a5:ec:55:25:
37:b7:9d:1e:4f:56:18:4d:14:72:98:68:24:36:90:f3:8e:73:
14:b6:ff:40:a8:ca:a1:5b:b4:b0:5e:a6:db:76:c4:dc:72:a2:
49:ac:1b:16:9a:64:75:85:3e:b7:97:48:71:3e:52:9f:27:7c:
3a:d6:89:e9:97:e6:e4:e7:53:fb:de:78:d6:87:35:42:fc:9a:
74:52:80:77:d5:74:7e:55:fe:e6:a5:df:e8:0d:91:ac:41:b6:
ab:18:49:bb:45:b8:9f:ba:b0:34:bd:63:e6:4e:54:9d:99:af:
94:9c:3b:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 15:52:00 2025 by rpki-client