Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/c49c08-92ab-4cb1-809b-4ec7b5efae37/1/tVNDqiHHSjn81Rg_T99V3EZ56D0.mft
File: tVNDqiHHSjn81Rg_T99V3EZ56D0.mft (raw, json)
Hash identifier: LTLNxtmZhW906rkDvgHvTo+46ueGkCJMCIx+9x6k2dE=
Subject key identifier: FB:43:9B:8B:22:1C:37:85:25:1C:A8:6F:A9:1B:89:02:06:0E:EA:40
Authority key identifier: B5:53:43:AA:21:C7:4A:39:FC:D5:18:3F:4F:DF:55:DC:46:79:E8:3D
Certificate issuer: /CN=b55343aa21c74a39fcd5183f4fdf55dc4679e83d
Certificate serial: 0197B70EF38AE2BB7DE6DEBA04FBC3705CD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVNDqiHHSjn81Rg_T99V3EZ56D0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/c49c08-92ab-4cb1-809b-4ec7b5efae37/1/tVNDqiHHSjn81Rg_T99V3EZ56D0.mft
Manifest number: ED
Signing time: Sat 28 Jun 2025 15:01:39 +0000
Manifest this update: Sat 28 Jun 2025 15:01:39 +0000
Manifest next update: Sun 29 Jun 2025 15:01:39 +0000
Files and hashes: 1: RXmLcd13ajoTVlcEirVukYVayjY.roa (hash: VMYnLhwMDYwO9ah7mzCKDLgq1vs8pRSHkOzi/+9nkdg=)
2: tVNDqiHHSjn81Rg_T99V3EZ56D0.crl (hash: vjLBgnEcgnkbwlE6ydLo2P2oN1k57KD5esVtRyc2J/E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/c49c08-92ab-4cb1-809b-4ec7b5efae37/1/tVNDqiHHSjn81Rg_T99V3EZ56D0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/c49c08-92ab-4cb1-809b-4ec7b5efae37/1/tVNDqiHHSjn81Rg_T99V3EZ56D0.mft
rsync://rpki.ripe.net/repository/DEFAULT/tVNDqiHHSjn81Rg_T99V3EZ56D0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:f3:8a:e2:bb:7d:e6:de:ba:04:fb:c3:70:5c:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b55343aa21c74a39fcd5183f4fdf55dc4679e83d
Validity
Not Before: Jun 28 15:01:39 2025 GMT
Not After : Jun 29 15:01:39 2025 GMT
Subject: CN=fb439b8b221c3785251ca86fa91b8902060eea40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:e2:e1:f7:d8:d4:b5:8c:26:7d:1e:85:d2:9f:
dc:1e:7a:8f:46:7f:89:d2:aa:82:28:87:05:41:2e:
bc:1d:61:c2:68:3e:f2:81:b9:de:1d:b2:10:15:f8:
cb:4b:26:69:06:00:9e:f7:66:68:c5:cd:f7:9c:5b:
38:1a:71:80:73:fe:f2:4f:73:ae:3e:26:48:9f:c4:
dd:7c:89:2f:f4:0f:6f:df:67:a1:76:46:24:09:f8:
94:f4:9a:bc:55:0e:f5:50:cc:5f:1d:3d:ed:e9:e6:
ac:db:83:2c:48:61:3e:96:3e:e3:13:70:95:ac:4c:
43:4b:0f:c8:d7:d1:d3:f1:25:06:68:d3:c8:46:13:
3a:e0:65:a7:12:e2:31:e0:4d:9e:f2:6e:66:0a:71:
a7:54:68:60:04:b0:fb:fb:c4:5b:85:ea:0f:10:28:
3c:96:1e:25:86:b8:55:b5:c6:a1:62:70:74:f9:9f:
77:15:64:a2:53:f8:8f:61:2b:2d:a0:09:47:66:f7:
57:a1:88:6a:43:a1:8f:f9:ef:17:00:59:2a:fc:aa:
20:51:6f:5d:a2:91:78:a8:d6:9d:5e:65:85:37:3b:
45:d9:cb:52:87:f5:a2:f5:ab:b3:ed:53:f7:38:b6:
9b:16:a4:e5:19:ee:ae:b8:e2:14:ef:30:cb:d1:e7:
86:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:43:9B:8B:22:1C:37:85:25:1C:A8:6F:A9:1B:89:02:06:0E:EA:40
X509v3 Authority Key Identifier:
keyid:B5:53:43:AA:21:C7:4A:39:FC:D5:18:3F:4F:DF:55:DC:46:79:E8:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVNDqiHHSjn81Rg_T99V3EZ56D0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c49c08-92ab-4cb1-809b-4ec7b5efae37/1/tVNDqiHHSjn81Rg_T99V3EZ56D0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c49c08-92ab-4cb1-809b-4ec7b5efae37/1/tVNDqiHHSjn81Rg_T99V3EZ56D0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:db:7b:29:4c:46:9a:c6:39:7c:34:d8:1b:0b:5f:9f:3c:cd:
11:62:1d:0c:3b:79:36:e4:23:62:4e:ad:e2:4c:48:b5:40:96:
f0:bc:74:24:e7:55:66:bd:b9:e7:eb:77:05:39:a3:41:11:21:
59:6c:27:54:43:22:75:68:26:4b:41:41:55:73:63:0c:0b:db:
c3:3b:c4:55:88:84:ca:d9:59:e1:67:b6:70:f4:00:64:c9:a2:
58:e8:25:19:95:eb:cb:28:57:95:81:66:78:73:8e:e1:b3:75:
4b:64:77:4b:f0:85:67:c4:58:5c:e6:e9:69:a5:7f:97:98:0c:
7b:5a:09:84:f5:b9:80:f9:c6:e3:fc:94:06:8b:2e:84:b3:8d:
ec:a7:e6:a3:df:c4:63:6f:b9:81:ae:35:27:48:5e:2e:50:18:
90:e1:8a:ca:4c:71:45:52:53:52:63:c0:fd:ed:fd:01:de:77:
f7:d3:e0:ff:04:88:a3:8c:f3:47:ec:99:af:f1:40:cb:fa:34:
7d:60:c8:7a:a9:70:4d:72:95:87:85:22:d1:4e:81:36:23:cf:
f1:89:a1:04:3d:cc:5f:fa:ef:7d:e5:c6:ee:b5:64:7f:83:c9:
8b:21:48:48:8a:87:e8:b8:55:46:66:c0:06:4d:37:f7:94:3a:
7f:ed:da:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:50:30 2025 by rpki-client