Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/7f9be1-b72b-4585-a2bd-e4da8ac2b3db/1/TnhW0pVYCTaRalU_ub-1nzoXaAQ.mft
File: TnhW0pVYCTaRalU_ub-1nzoXaAQ.mft (raw, json)
Hash identifier: YtfXxhctg2Dquz622/Dl0aHQ/pP8qirGOB0L5coK4ss=
Subject key identifier: A0:11:AC:FB:70:61:FF:4E:1F:8D:F9:68:AD:0A:BE:1D:F6:11:B3:27
Authority key identifier: 4E:78:56:D2:95:58:09:36:91:6A:55:3F:B9:BF:B5:9F:3A:17:68:04
Certificate issuer: /CN=4e7856d295580936916a553fb9bfb59f3a176804
Certificate serial: 0197B820FC907AAC39EE77D31163E104449F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TnhW0pVYCTaRalU_ub-1nzoXaAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/7f9be1-b72b-4585-a2bd-e4da8ac2b3db/1/TnhW0pVYCTaRalU_ub-1nzoXaAQ.mft
Manifest number: 58
Signing time: Sat 28 Jun 2025 20:00:58 +0000
Manifest this update: Sat 28 Jun 2025 20:00:58 +0000
Manifest next update: Sun 29 Jun 2025 20:00:58 +0000
Files and hashes: 1: PQkIeE659gopb00eRM_lG80Gc8o.roa (hash: jYp7n+Hnf2RwdwBfym+F/7I14DXBfuEPAe6US1OGNLE=)
2: TnhW0pVYCTaRalU_ub-1nzoXaAQ.crl (hash: Xx+IjZOkENm/30gvsXIaGWf+L7KAZIzjeBPOkZV1ZsQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/7f9be1-b72b-4585-a2bd-e4da8ac2b3db/1/TnhW0pVYCTaRalU_ub-1nzoXaAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/7f9be1-b72b-4585-a2bd-e4da8ac2b3db/1/TnhW0pVYCTaRalU_ub-1nzoXaAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/TnhW0pVYCTaRalU_ub-1nzoXaAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:20:fc:90:7a:ac:39:ee:77:d3:11:63:e1:04:44:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e7856d295580936916a553fb9bfb59f3a176804
Validity
Not Before: Jun 28 20:00:58 2025 GMT
Not After : Jun 29 20:00:58 2025 GMT
Subject: CN=a011acfb7061ff4e1f8df968ad0abe1df611b327
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:bc:c0:98:cb:1c:56:d0:78:cd:94:90:52:2f:
e7:52:73:61:e0:45:71:e7:77:1b:2b:62:5c:bc:01:
d4:58:01:b8:f5:7d:ef:3d:e6:aa:b3:2d:b5:d8:65:
a7:ef:94:9e:59:ba:f4:dd:42:1f:49:82:5f:d4:64:
54:1c:71:54:b2:54:1d:f5:03:8b:53:52:1b:e6:39:
14:3e:ca:2e:24:36:8e:a2:33:fe:35:d9:5d:20:75:
ec:21:71:13:93:d6:b2:fb:18:32:03:4d:46:ee:84:
a7:e8:6a:1f:08:c0:cf:70:32:e1:75:df:35:d6:d0:
6a:68:1b:a1:ec:7d:c4:a8:0d:82:49:81:a1:7e:35:
94:ae:ca:01:6d:95:d0:66:4e:45:6a:e8:08:2e:85:
2e:65:b3:01:84:4f:6f:f2:2c:3f:cd:48:32:34:45:
a5:a9:e9:2c:50:01:81:e1:58:6c:d4:d2:e7:5d:a5:
68:d2:c7:b0:12:24:f1:c8:46:7f:3f:43:b3:9c:47:
00:c0:16:6d:a9:30:4c:49:65:5d:58:84:b9:48:18:
47:6a:31:68:48:40:40:a6:4c:39:1c:19:71:dc:df:
56:e2:9f:2b:7a:15:b5:99:fd:4f:37:7e:ab:78:eb:
8d:8f:54:a9:af:a5:06:ed:28:d1:6a:02:f4:9a:14:
44:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:11:AC:FB:70:61:FF:4E:1F:8D:F9:68:AD:0A:BE:1D:F6:11:B3:27
X509v3 Authority Key Identifier:
keyid:4E:78:56:D2:95:58:09:36:91:6A:55:3F:B9:BF:B5:9F:3A:17:68:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TnhW0pVYCTaRalU_ub-1nzoXaAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/7f9be1-b72b-4585-a2bd-e4da8ac2b3db/1/TnhW0pVYCTaRalU_ub-1nzoXaAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/7f9be1-b72b-4585-a2bd-e4da8ac2b3db/1/TnhW0pVYCTaRalU_ub-1nzoXaAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:87:57:5a:ff:33:40:c8:77:9d:a2:63:1a:14:5f:2a:f4:e2:
6a:1a:24:5f:d0:c4:04:a8:33:03:b9:42:a9:11:80:6b:05:69:
78:aa:8f:ef:22:ef:2e:77:da:36:60:f0:56:d3:25:4a:1f:47:
36:ab:78:14:f4:01:d4:11:7b:5f:d0:91:0b:2a:05:36:01:53:
2d:87:33:af:24:69:8b:c8:09:f9:01:35:5d:73:ac:7b:d5:0e:
fc:93:8b:13:06:ca:1a:6e:de:22:16:08:5a:20:77:42:ec:c2:
fc:04:02:4f:a9:9c:bb:b5:0f:0f:d0:65:60:fd:2b:40:04:0d:
c7:af:06:2b:ba:fc:0d:d8:30:76:4a:52:44:65:f1:4a:cc:92:
bc:c4:a4:b8:61:97:d0:b1:48:e0:95:24:6c:1e:99:ca:d8:12:
11:cd:28:ca:25:24:59:3c:ca:c8:07:af:95:10:04:b2:3a:c6:
c0:62:2c:93:bf:7d:68:b4:65:92:3f:5d:11:fd:d2:df:8b:82:
82:24:7f:98:43:38:6c:6a:54:f5:e9:ef:3e:6a:96:3e:36:d1:
45:9d:bf:56:eb:2b:9f:11:ca:2a:73:6c:f3:8f:0e:9e:01:24:
ee:ea:ea:9d:de:af:e4:59:a1:54:e2:a1:1d:43:80:92:51:80:
d7:8d:8b:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:06:02 2025 by rpki-client