Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/869214-16d4-45e0-b87e-32e932d6fd0e/1/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.mft
File: tPEVQkwYHGeWbMwkZ-3mnQYMz1M.mft (raw, json)
Hash identifier: dA2HT68DaHedyENW77+QInfk9DsAUytu4LUKh4g4Ixg=
Subject key identifier: AA:AE:52:BC:F5:5B:81:29:37:F7:91:B8:D9:E6:60:1C:EC:6F:F8:0E
Authority key identifier: B4:F1:15:42:4C:18:1C:67:96:6C:CC:24:67:ED:E6:9D:06:0C:CF:53
Certificate issuer: /CN=b4f115424c181c67966ccc2467ede69d060ccf53
Certificate serial: 0197B7EA96D2892152D7A0878CB4F56B68AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/869214-16d4-45e0-b87e-32e932d6fd0e/1/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.mft
Manifest number: 131D
Signing time: Sat 28 Jun 2025 19:01:33 +0000
Manifest this update: Sat 28 Jun 2025 19:01:33 +0000
Manifest next update: Sun 29 Jun 2025 19:01:33 +0000
Files and hashes: 1: bqp6f9GjY5TF5wTxOeK8Ji-YrkE.roa (hash: b7SVmPCcwJQed2khWFQ0sTeZykPXeoqQG4LQy2NRwCA=)
2: tPEVQkwYHGeWbMwkZ-3mnQYMz1M.crl (hash: Enq/cJ9bwwX5dmZBgzZ5bFain748QEDpu6V9CgDM1ms=)
3: xktUIB6GDLW-h2_LFZTy4dam33Y.roa (hash: BgrfS/HN5mPWhSmcXKgkikTloXU/AxYtLSZ8SaD1EM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/869214-16d4-45e0-b87e-32e932d6fd0e/1/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/869214-16d4-45e0-b87e-32e932d6fd0e/1/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:96:d2:89:21:52:d7:a0:87:8c:b4:f5:6b:68:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f115424c181c67966ccc2467ede69d060ccf53
Validity
Not Before: Jun 28 19:01:33 2025 GMT
Not After : Jun 29 19:01:33 2025 GMT
Subject: CN=aaae52bcf55b812937f791b8d9e6601cec6ff80e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:91:95:2c:62:52:ac:12:38:81:8e:af:6c:1d:
af:55:70:3a:06:52:c4:fa:f6:cb:31:48:de:72:5c:
03:cf:22:6c:a7:7d:86:98:31:e1:d1:e7:9d:8b:d6:
b4:87:54:ea:f6:af:73:17:40:b0:26:1c:86:d0:32:
3a:17:4b:22:7b:3d:56:f6:ad:3e:3b:7d:dd:11:23:
68:01:67:76:90:41:ca:37:fa:82:9d:5f:c3:44:69:
aa:ec:e1:53:f6:51:87:2f:ce:3c:ec:e6:44:86:34:
3b:d2:c9:da:5d:d7:99:f8:90:79:9c:47:83:8a:2e:
ad:1b:e7:bc:e3:3a:a4:bd:6e:4c:c7:56:81:34:47:
94:04:9c:6a:8c:9e:a4:2a:18:aa:f4:f5:63:dd:67:
92:e3:d6:65:ce:10:17:76:3c:f0:d3:98:35:56:30:
3d:54:ac:1c:0d:af:0a:0e:7b:94:1a:97:a2:6c:72:
de:23:74:41:2e:a5:84:2f:95:fc:ca:40:31:8c:2b:
7d:20:b8:47:72:6f:30:5e:69:b2:97:3f:a5:1d:7f:
1e:8d:ae:1d:4b:a2:1b:26:7a:62:87:bc:a7:27:54:
a1:45:81:99:7d:36:db:69:5a:af:db:7f:96:89:e6:
49:bf:3f:0d:d3:87:f7:81:43:3f:34:f6:96:6d:7d:
ac:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:AE:52:BC:F5:5B:81:29:37:F7:91:B8:D9:E6:60:1C:EC:6F:F8:0E
X509v3 Authority Key Identifier:
keyid:B4:F1:15:42:4C:18:1C:67:96:6C:CC:24:67:ED:E6:9D:06:0C:CF:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/869214-16d4-45e0-b87e-32e932d6fd0e/1/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/869214-16d4-45e0-b87e-32e932d6fd0e/1/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:c4:23:c2:e3:63:2a:e8:c7:9f:d3:d8:39:da:87:b5:68:5a:
6c:3b:0d:28:ba:b4:60:f3:c8:5c:13:c3:ab:21:12:f1:b6:58:
61:f9:f8:d7:e3:dd:f6:49:48:26:39:69:06:4d:aa:91:ea:a9:
7e:ef:19:15:98:82:30:b5:1a:3a:bf:68:fe:32:19:cc:0d:e4:
2e:bd:4a:10:a7:f6:bb:05:8f:5e:a3:44:80:fc:5e:09:5b:bf:
1f:2f:da:db:e5:5c:78:5f:51:95:6c:22:25:c8:75:31:94:60:
f2:c1:6e:4d:20:a8:e9:2a:0a:1d:bc:b8:eb:13:26:35:64:5d:
06:16:92:67:c2:a3:3e:0c:75:12:72:ee:2a:81:af:53:b4:47:
21:aa:71:73:5e:7e:84:21:84:a9:29:1c:b2:f2:75:89:a2:53:
57:6b:b9:ee:02:59:f7:56:c9:d2:38:c2:4b:45:7c:6e:77:cf:
b7:79:7d:fc:e2:42:c8:56:19:73:2b:45:4b:68:f5:fc:bb:49:
f5:61:1d:c6:b4:b9:da:ba:cb:cc:1a:0b:ae:71:b4:f7:b3:a9:
4b:b0:c7:77:42:9b:f1:fd:35:7f:33:95:ce:65:a9:28:33:89:
37:60:06:e6:64:20:68:bf:9c:07:99:39:75:64:7a:74:74:31:
dd:91:96:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:49:19 2025 by rpki-client