Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/3e8e42-dffb-435d-bd2b-eb8b1ecc4741/1/TdL8TSP9nCQgxASRhxgI7FQkpnA.mft
File: TdL8TSP9nCQgxASRhxgI7FQkpnA.mft (raw, json)
Hash identifier: 9uKw0gk8JtyhgslJ5miSd7VtGsH6jGLXkllyKmPQEzQ=
Subject key identifier: 06:CE:B2:72:99:3D:4F:FF:90:D7:F1:CC:EB:5C:04:80:3A:1E:33:28
Authority key identifier: 4D:D2:FC:4D:23:FD:9C:24:20:C4:04:91:87:18:08:EC:54:24:A6:70
Certificate issuer: /CN=4dd2fc4d23fd9c2420c40491871808ec5424a670
Certificate serial: 0197B77C8E9A1504C4E642A9DB75421056B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdL8TSP9nCQgxASRhxgI7FQkpnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/3e8e42-dffb-435d-bd2b-eb8b1ecc4741/1/TdL8TSP9nCQgxASRhxgI7FQkpnA.mft
Manifest number: 15B9
Signing time: Sat 28 Jun 2025 17:01:22 +0000
Manifest this update: Sat 28 Jun 2025 17:01:22 +0000
Manifest next update: Sun 29 Jun 2025 17:01:22 +0000
Files and hashes: 1: 6PYHTPLOKPA_a6iVYvGQByWG7yU.roa (hash: w5WzWtoII8U9oezorMTaJGrRrTvsQaItUP16lTCSY7s=)
2: TdL8TSP9nCQgxASRhxgI7FQkpnA.crl (hash: LHFiLMreLGzOwpaiqF0i0CqxXbP30kcJrJJQQxQt0Ps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/3e8e42-dffb-435d-bd2b-eb8b1ecc4741/1/TdL8TSP9nCQgxASRhxgI7FQkpnA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/3e8e42-dffb-435d-bd2b-eb8b1ecc4741/1/TdL8TSP9nCQgxASRhxgI7FQkpnA.mft
rsync://rpki.ripe.net/repository/DEFAULT/TdL8TSP9nCQgxASRhxgI7FQkpnA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:8e:9a:15:04:c4:e6:42:a9:db:75:42:10:56:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd2fc4d23fd9c2420c40491871808ec5424a670
Validity
Not Before: Jun 28 17:01:22 2025 GMT
Not After : Jun 29 17:01:22 2025 GMT
Subject: CN=06ceb272993d4fff90d7f1cceb5c04803a1e3328
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:09:d7:46:d7:0d:5a:84:18:19:be:fc:db:87:
c3:51:18:46:3f:9f:d6:08:91:a9:12:dd:93:59:10:
83:74:ec:e8:09:1b:fc:81:b5:63:b3:86:79:d4:6a:
22:c6:84:f3:55:06:b7:55:39:6b:28:a3:ef:75:c2:
5e:c6:90:a8:94:6b:43:e6:57:3e:85:93:69:2c:50:
79:6e:0c:2b:6e:27:e5:a5:c6:48:2f:3b:5f:a7:f7:
67:d4:5e:cf:e0:bf:d5:8c:2f:9a:2c:79:a3:89:65:
72:7c:e4:63:3f:19:cd:66:8a:f9:ed:eb:54:c2:7e:
47:b2:3f:2a:3d:cf:00:34:df:a3:71:98:f8:99:b7:
6b:7f:44:01:8b:29:0e:11:8c:0d:df:c1:6f:ba:8c:
66:fa:e0:ae:79:af:21:b4:08:67:b8:f7:86:fa:f4:
67:50:84:9e:18:40:f3:d3:af:41:41:8a:05:04:78:
49:90:83:6f:0e:29:d8:79:45:f5:97:68:d8:d5:49:
95:39:9f:16:d7:e1:ee:d7:05:11:98:2f:dd:d8:c6:
78:62:80:11:ee:36:99:37:c1:49:9a:d6:b5:5d:02:
a9:21:c9:d6:c5:93:41:fa:7b:d4:30:9c:c4:8d:a3:
5a:d7:ea:f7:6b:56:d0:5a:07:14:2d:fd:c8:71:3f:
fb:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:CE:B2:72:99:3D:4F:FF:90:D7:F1:CC:EB:5C:04:80:3A:1E:33:28
X509v3 Authority Key Identifier:
keyid:4D:D2:FC:4D:23:FD:9C:24:20:C4:04:91:87:18:08:EC:54:24:A6:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdL8TSP9nCQgxASRhxgI7FQkpnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3e8e42-dffb-435d-bd2b-eb8b1ecc4741/1/TdL8TSP9nCQgxASRhxgI7FQkpnA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3e8e42-dffb-435d-bd2b-eb8b1ecc4741/1/TdL8TSP9nCQgxASRhxgI7FQkpnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:53:b0:a7:8a:42:4c:c8:ae:f6:cd:63:8f:ad:1c:f4:f5:fa:
13:9c:f7:f0:91:55:60:93:8a:4b:5c:f3:fe:54:53:cb:83:36:
ab:65:36:3a:f6:2f:5b:9b:ae:82:f6:9d:81:59:4e:a8:a8:95:
a5:8b:3e:6e:58:be:0d:f0:af:8b:e3:14:a3:8a:91:c1:56:08:
99:0e:23:34:47:24:c7:53:b5:8c:b0:f1:2d:b2:81:42:b2:8c:
7c:fb:d6:36:7a:8a:5d:ce:ee:a1:27:c2:12:6a:0e:2f:a4:e2:
20:ff:1f:e7:33:8a:e0:65:41:79:17:c1:df:7a:4b:5a:d7:4e:
d4:b8:ab:eb:4f:fb:0b:4b:36:cb:65:14:11:94:96:e1:45:44:
ab:da:c1:79:19:11:6d:15:5a:ae:a5:ee:ff:ed:18:2e:7e:f5:
4b:88:b9:1d:52:f8:27:5a:68:92:08:0c:94:a9:a9:51:cc:c4:
6f:6e:ce:03:e4:9b:77:9e:4f:b2:e6:e4:cd:02:32:98:cd:a9:
3e:8b:0c:b9:23:c2:c5:ca:22:ab:24:7a:b7:2c:97:b5:b0:bd:
5d:b1:74:69:dc:ab:2e:94:13:d3:6e:32:97:0f:3d:a2:4a:4e:
0b:9b:5b:15:5b:eb:13:ae:51:be:3a:cb:59:04:29:9f:3b:90:
52:d8:47:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:42:20 2025 by rpki-client