Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/6274d7-8d1c-493b-9c22-096ee29d997d/1/Tmsy2dPrxu5JvW-mzZDk9cfVROg.mft
File: Tmsy2dPrxu5JvW-mzZDk9cfVROg.mft (raw, json)
Hash identifier: ITYRqPi8/0PAdqF0MjxYHuXxpEWeE7GEn+DVsY/Zwt0=
Subject key identifier: 1B:19:26:88:58:B6:BF:30:2C:49:A8:9D:8E:2A:3E:E3:06:0D:22:F7
Authority key identifier: 4E:6B:32:D9:D3:EB:C6:EE:49:BD:6F:A6:CD:90:E4:F5:C7:D5:44:E8
Certificate issuer: /CN=4e6b32d9d3ebc6ee49bd6fa6cd90e4f5c7d544e8
Certificate serial: 0197B70E6AD1C4998168564ADA787B22A6C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tmsy2dPrxu5JvW-mzZDk9cfVROg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/6274d7-8d1c-493b-9c22-096ee29d997d/1/Tmsy2dPrxu5JvW-mzZDk9cfVROg.mft
Manifest number: 037E
Signing time: Sat 28 Jun 2025 15:01:04 +0000
Manifest this update: Sat 28 Jun 2025 15:01:04 +0000
Manifest next update: Sun 29 Jun 2025 15:01:04 +0000
Files and hashes: 1: Tmsy2dPrxu5JvW-mzZDk9cfVROg.crl (hash: wQ9ddlvHGr1I3hqEKFfczKa3wBzWOzaP++ff94KQjoI=)
2: dRB7xJtajjzk6UoGyoSGsT51giI.roa (hash: YcmDNZ/enUR0rChrVz40koeNmEa+q2s38R7f9KQbajo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/6274d7-8d1c-493b-9c22-096ee29d997d/1/Tmsy2dPrxu5JvW-mzZDk9cfVROg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/6274d7-8d1c-493b-9c22-096ee29d997d/1/Tmsy2dPrxu5JvW-mzZDk9cfVROg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tmsy2dPrxu5JvW-mzZDk9cfVROg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:6a:d1:c4:99:81:68:56:4a:da:78:7b:22:a6:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e6b32d9d3ebc6ee49bd6fa6cd90e4f5c7d544e8
Validity
Not Before: Jun 28 15:01:04 2025 GMT
Not After : Jun 29 15:01:04 2025 GMT
Subject: CN=1b19268858b6bf302c49a89d8e2a3ee3060d22f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c6:3b:de:3c:35:d0:18:ce:66:9c:da:68:ab:
1e:19:e5:b3:27:0b:06:6c:90:5b:74:99:ba:b0:1f:
5f:26:4d:88:3d:a8:54:82:55:6f:dd:78:16:97:2e:
c2:ed:38:9f:bc:5a:d0:97:d9:99:1d:68:f6:da:2f:
36:42:c3:59:7d:cc:d3:29:f1:82:b4:8b:a7:d9:e9:
8e:30:23:f9:09:7e:ef:46:7f:95:de:0f:f8:51:a5:
9c:95:f8:71:57:28:36:9b:0a:d5:ed:8a:24:08:cf:
0b:20:92:f5:ee:db:c6:ea:8d:b9:76:1d:e9:a5:89:
4d:03:34:90:79:47:ae:a9:54:e2:c4:80:68:25:d2:
82:24:2f:bc:78:fd:92:1b:a5:c5:94:a6:7e:4c:a0:
8c:c7:65:5c:16:b1:9b:ee:f6:8d:2d:a0:d1:01:a7:
e7:00:04:70:56:bc:c1:eb:6f:f0:58:fe:d8:59:d5:
de:45:a3:09:61:1a:db:fd:68:3b:e1:aa:17:92:ad:
4d:8f:f4:eb:43:9d:e1:24:1d:49:25:8f:d8:3b:14:
7a:30:c4:13:3d:3c:fe:a5:44:42:61:d3:76:ee:b9:
fb:8e:92:54:95:8c:93:ae:38:3e:83:12:2a:6a:bd:
b7:a6:a3:1b:8d:7a:39:35:e3:d3:cb:44:08:c9:80:
26:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:19:26:88:58:B6:BF:30:2C:49:A8:9D:8E:2A:3E:E3:06:0D:22:F7
X509v3 Authority Key Identifier:
keyid:4E:6B:32:D9:D3:EB:C6:EE:49:BD:6F:A6:CD:90:E4:F5:C7:D5:44:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tmsy2dPrxu5JvW-mzZDk9cfVROg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6274d7-8d1c-493b-9c22-096ee29d997d/1/Tmsy2dPrxu5JvW-mzZDk9cfVROg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6274d7-8d1c-493b-9c22-096ee29d997d/1/Tmsy2dPrxu5JvW-mzZDk9cfVROg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:c7:a0:64:8e:b3:28:08:68:22:78:90:36:b8:b9:70:82:58:
58:bb:35:df:0c:34:2e:a0:3d:3c:10:37:98:48:80:60:c2:07:
27:fd:43:33:6d:f7:4b:fe:6b:7d:fe:90:bf:8d:0b:27:74:8b:
9f:ae:6f:ed:01:e2:99:78:26:98:77:ca:e2:88:22:f9:7d:9a:
4b:82:3c:7f:10:38:f2:94:5a:b3:81:bd:29:61:96:e3:8b:02:
84:4f:3f:b5:b1:4b:ba:81:a8:65:08:d5:db:98:51:07:50:29:
8f:4a:a5:1c:fa:fc:e6:19:03:22:b6:7b:88:8d:2a:03:f4:74:
3b:be:32:ca:88:be:f5:77:dc:60:67:38:ae:d0:ce:71:c0:9d:
d4:df:13:45:48:7e:98:da:16:d5:a4:14:35:4d:da:e0:ad:3c:
c9:a3:8c:7b:f1:34:36:6a:40:c7:8a:71:90:14:13:12:e9:19:
3c:24:92:6e:00:b8:a3:48:cd:0b:3f:fd:69:50:bd:95:f3:3b:
c3:3d:8a:9d:31:15:94:b0:1a:65:4f:90:34:1c:4e:c5:31:69:
7f:60:66:b9:d3:73:5e:89:ff:52:bf:aa:75:fd:c1:f7:b2:59:
8d:48:ee:81:61:a1:5c:dc:4a:d1:e8:59:57:e6:36:77:f3:00:
a1:52:ea:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:12:51 2025 by rpki-client