Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/c7caf3-eb08-4556-a5b7-fc6e77884054/1/tGS0UjqJcrni9GpPShY06XAnrt8.mft
File: tGS0UjqJcrni9GpPShY06XAnrt8.mft (raw, json)
Hash identifier: fvkmuRT1+gp0zmgcB2kE+tCcK1JEUkW9rAtj/JJ1In0=
Subject key identifier: 40:E0:33:38:0D:C9:94:B8:D7:F8:1B:EB:23:9D:44:D7:CD:FE:82:25
Authority key identifier: B4:64:B4:52:3A:89:72:B9:E2:F4:6A:4F:4A:16:34:E9:70:27:AE:DF
Certificate issuer: /CN=b464b4523a8972b9e2f46a4f4a1634e97027aedf
Certificate serial: 0197B9A1B8034FBC0CC7468AE31C068FEF49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tGS0UjqJcrni9GpPShY06XAnrt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/c7caf3-eb08-4556-a5b7-fc6e77884054/1/tGS0UjqJcrni9GpPShY06XAnrt8.mft
Manifest number: 0580
Signing time: Sun 29 Jun 2025 03:01:12 +0000
Manifest this update: Sun 29 Jun 2025 03:01:12 +0000
Manifest next update: Mon 30 Jun 2025 03:01:12 +0000
Files and hashes: 1: 9_390f2f-M8hYOk7nzURe9equgQ.roa (hash: owTgcA4dyGF3dIAB8I5x/+WpBhjYyAEll9e73TYZ1zg=)
2: AlXMETnbyfFycOBJ00euLPdfF38.roa (hash: dXmkb3+2s7D2AUe9nT6jFWSvFEG8fZEyvWFVr4j1v5Y=)
3: YErFO59kWt9xoLXx1-Pi5aldnP8.roa (hash: DUxqgIUjmMIEsJm9dnaOffY6+caGRgj4+8pmRJ5gRyw=)
4: tGS0UjqJcrni9GpPShY06XAnrt8.crl (hash: CxdG1Ivc9e9oQcE2mGKydV55YyGxaDL09coxnZFGfaE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/c7caf3-eb08-4556-a5b7-fc6e77884054/1/tGS0UjqJcrni9GpPShY06XAnrt8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/c7caf3-eb08-4556-a5b7-fc6e77884054/1/tGS0UjqJcrni9GpPShY06XAnrt8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tGS0UjqJcrni9GpPShY06XAnrt8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:a1:b8:03:4f:bc:0c:c7:46:8a:e3:1c:06:8f:ef:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b464b4523a8972b9e2f46a4f4a1634e97027aedf
Validity
Not Before: Jun 29 03:01:12 2025 GMT
Not After : Jun 30 03:01:12 2025 GMT
Subject: CN=40e033380dc994b8d7f81beb239d44d7cdfe8225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ed:d5:1b:d5:88:d5:a5:60:55:b9:aa:c0:a6:
82:25:7d:d9:56:70:5d:6c:c9:73:45:e6:62:c0:51:
06:0f:0e:77:a1:f3:9d:0a:d4:c8:2c:bd:83:70:c1:
af:cc:28:b1:d3:fd:86:a6:63:b7:4a:d0:0b:de:68:
52:1b:cd:20:aa:eb:c0:07:bf:f9:6e:b0:a7:60:6b:
ad:11:10:6f:f3:e9:9d:d9:59:3a:67:8a:60:14:e8:
a6:49:4d:37:59:9a:ad:12:46:ec:c3:98:cf:50:18:
fb:6c:48:59:74:3a:26:0f:99:0d:12:03:0d:1b:74:
a9:c8:99:e7:21:24:b7:92:29:05:e8:84:27:6b:29:
39:1e:95:2d:95:46:97:2e:af:67:57:cc:2c:5b:94:
b2:04:b2:02:1e:d5:aa:ad:dc:a0:bf:5c:ee:e9:1c:
58:11:cf:03:cc:b6:d4:27:e5:09:ad:f9:7b:0f:eb:
11:04:1e:71:96:c6:9c:e9:db:3b:b6:b2:2e:6a:c5:
e0:df:ac:49:f0:40:75:ca:85:8b:4e:aa:a7:8f:70:
e3:3a:96:cd:d3:1b:5e:e1:29:8b:11:a2:b6:51:f3:
58:6f:af:ae:35:d0:5e:23:4e:dd:44:ee:c3:88:4f:
cc:ca:21:56:39:a8:2c:fe:56:50:32:b4:0a:e7:b3:
ca:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:E0:33:38:0D:C9:94:B8:D7:F8:1B:EB:23:9D:44:D7:CD:FE:82:25
X509v3 Authority Key Identifier:
keyid:B4:64:B4:52:3A:89:72:B9:E2:F4:6A:4F:4A:16:34:E9:70:27:AE:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tGS0UjqJcrni9GpPShY06XAnrt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/c7caf3-eb08-4556-a5b7-fc6e77884054/1/tGS0UjqJcrni9GpPShY06XAnrt8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/c7caf3-eb08-4556-a5b7-fc6e77884054/1/tGS0UjqJcrni9GpPShY06XAnrt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:64:01:28:d8:25:86:9a:c8:1f:69:0a:1b:7b:eb:7e:31:28:
58:11:c4:e4:30:4c:1a:ef:0c:34:ec:a0:c4:24:4a:77:67:d4:
39:0c:13:66:ae:2a:7a:f2:c1:0c:3d:a8:2d:e2:1f:8e:49:82:
00:49:3e:1e:75:82:8b:43:69:a7:fd:9e:b0:63:5a:fb:25:b4:
ab:aa:e6:85:43:50:ec:8a:e6:c6:24:bc:82:29:08:a0:7e:af:
2f:42:92:eb:c7:4e:1d:b1:33:2d:31:c6:4c:4e:36:56:1b:c3:
e1:b0:c1:f9:a6:9d:a5:37:a6:0d:06:1c:8f:bc:f7:bf:82:b6:
e5:31:c1:4f:ca:3f:47:09:f3:9c:9b:e6:0f:1b:f0:31:dd:83:
e3:de:74:1c:4b:be:01:e5:0a:b7:5f:03:f7:1b:9d:83:a0:05:
15:00:db:1c:83:10:7b:a7:2e:1d:eb:69:7f:79:85:a7:ca:0c:
08:d1:c2:df:2f:69:fb:af:b8:79:50:68:65:36:fc:9d:84:80:
de:33:93:29:60:83:c4:f5:22:56:20:ba:89:87:ff:28:7b:74:
d5:68:34:77:f8:61:f1:81:c4:7a:64:a2:c4:7d:91:3a:f8:ad:
ce:bd:54:7f:84:09:61:65:ec:27:d3:30:cd:32:72:0e:ad:9f:
54:e5:5b:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:12:37 2025 by rpki-client