Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/dbc472-6e0a-411c-af8f-0888eb42744c/1/TGr5hrJB2dJ-xySt-r8G1dIxeT8.mft
File: TGr5hrJB2dJ-xySt-r8G1dIxeT8.mft (raw, json)
Hash identifier: uU17hzQ8V9umdfRzRKRuZeqe27eHQrmQrZ5xtV+7xUo=
Subject key identifier: EE:CA:FA:5C:A7:07:40:90:3A:25:DE:B6:9A:66:76:65:62:7A:24:9C
Authority key identifier: 4C:6A:F9:86:B2:41:D9:D2:7E:C7:24:AD:FA:BF:06:D5:D2:31:79:3F
Certificate issuer: /CN=4c6af986b241d9d27ec724adfabf06d5d231793f
Certificate serial: 0197B5FC088755B7A3480410CC4E6C8DAA51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TGr5hrJB2dJ-xySt-r8G1dIxeT8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/dbc472-6e0a-411c-af8f-0888eb42744c/1/TGr5hrJB2dJ-xySt-r8G1dIxeT8.mft
Manifest number: 1268
Signing time: Sat 28 Jun 2025 10:01:22 +0000
Manifest this update: Sat 28 Jun 2025 10:01:22 +0000
Manifest next update: Sun 29 Jun 2025 10:01:22 +0000
Files and hashes: 1: 7mVZwCskyJUQ7gPBL_F_4nbKWrk.roa (hash: Spe2b/mS1SAvEHCJH7XwFJrcW3b1Bvz1bY1SvDC0yz8=)
2: TGr5hrJB2dJ-xySt-r8G1dIxeT8.crl (hash: 2EUzigxO0Mif2fbo/1Xtsif+BYIPeVC8VsjHVZ6qvjE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/dbc472-6e0a-411c-af8f-0888eb42744c/1/TGr5hrJB2dJ-xySt-r8G1dIxeT8.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/dbc472-6e0a-411c-af8f-0888eb42744c/1/TGr5hrJB2dJ-xySt-r8G1dIxeT8.mft
rsync://rpki.ripe.net/repository/DEFAULT/TGr5hrJB2dJ-xySt-r8G1dIxeT8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fc:08:87:55:b7:a3:48:04:10:cc:4e:6c:8d:aa:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c6af986b241d9d27ec724adfabf06d5d231793f
Validity
Not Before: Jun 28 10:01:22 2025 GMT
Not After : Jun 29 10:01:22 2025 GMT
Subject: CN=eecafa5ca70740903a25deb69a667665627a249c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:49:db:75:3d:27:9c:d9:ac:57:6c:11:12:c2:
c7:5f:30:7d:6b:e6:76:84:7d:97:bb:39:d0:59:63:
66:0c:fa:93:d8:33:47:8e:7f:04:46:5b:09:93:cb:
b1:d8:4c:e1:70:ce:09:32:5d:07:f3:a1:6e:08:a2:
85:36:7c:26:5e:00:8a:5a:36:2f:35:1e:22:f4:29:
49:b3:0e:18:8b:46:8f:e4:20:5b:d2:8b:78:21:fd:
1a:a4:0d:29:6b:72:39:bc:4e:a7:44:68:c7:65:7d:
25:82:d1:0f:e5:0f:9a:18:ea:d3:08:46:8a:56:a4:
1e:d1:8b:46:67:24:04:c9:2c:e2:44:82:dd:c8:13:
98:25:12:d4:32:75:ac:aa:59:fa:0b:22:22:50:f9:
10:f6:2a:bc:dc:4a:68:a0:12:9c:4f:3b:ec:1c:36:
f7:74:6e:69:eb:fb:4d:42:56:26:75:1a:42:a6:f3:
65:f1:95:7d:3a:78:92:92:a6:1c:d7:d4:14:05:04:
86:d9:60:28:16:18:53:6f:37:54:d0:69:b3:aa:a6:
2d:28:45:42:e8:46:4f:ce:c6:af:e7:51:c2:f8:3f:
b0:d2:d9:7d:36:de:7a:99:06:7b:a3:9e:56:8a:94:
a4:1c:55:3a:85:a1:7f:c9:fb:bf:23:17:08:a1:22:
fa:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:CA:FA:5C:A7:07:40:90:3A:25:DE:B6:9A:66:76:65:62:7A:24:9C
X509v3 Authority Key Identifier:
keyid:4C:6A:F9:86:B2:41:D9:D2:7E:C7:24:AD:FA:BF:06:D5:D2:31:79:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TGr5hrJB2dJ-xySt-r8G1dIxeT8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/dbc472-6e0a-411c-af8f-0888eb42744c/1/TGr5hrJB2dJ-xySt-r8G1dIxeT8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/dbc472-6e0a-411c-af8f-0888eb42744c/1/TGr5hrJB2dJ-xySt-r8G1dIxeT8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:91:dd:34:0c:5f:e1:9a:47:4b:db:c5:22:13:a7:6f:f2:e1:
04:b5:1c:89:c1:7a:9b:2a:6b:7e:8f:b2:29:e5:6a:30:92:e8:
1e:34:9e:12:be:a3:9a:6b:5d:af:65:06:a8:e8:36:eb:b6:82:
99:e1:40:87:4d:10:74:0f:8d:a2:7a:d3:1c:5e:0b:9b:95:0f:
cb:03:12:55:43:b0:42:0c:6c:7e:78:1e:6e:24:83:a8:78:39:
cf:0b:cb:af:89:b6:21:43:fa:d1:73:bb:fa:ea:cb:9d:2d:75:
46:58:f0:e6:8d:98:2b:26:cb:36:2a:1a:02:95:3f:bd:36:e0:
df:69:35:49:c8:54:06:ee:70:38:aa:1c:87:8d:1d:9d:eb:93:
5b:70:59:b7:29:2b:80:8a:d3:14:d6:bc:67:9b:a7:54:3c:59:
ee:17:17:f3:5e:57:db:2d:f9:91:10:ac:23:b4:12:12:ea:d8:
f7:7c:33:4e:00:19:90:d0:7a:0e:12:4b:81:a2:1a:6b:58:25:
35:58:49:02:da:30:e1:4b:d2:f8:71:39:9a:4e:a0:ba:3c:76:
02:f3:d2:46:c8:e2:ac:ff:02:f3:0b:1e:15:15:3e:37:00:f7:
28:24:78:8c:97:be:75:cf:5d:ce:eb:c6:41:d0:fb:71:89:9f:
62:d0:d6:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:37:10 2025 by rpki-client