Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/d46a81-3735-42c6-9bbb-1d1799b59c99/1/tLB5uhPORqvsf1vD893Ni7hnWQU.mft
File: tLB5uhPORqvsf1vD893Ni7hnWQU.mft (raw, json)
Hash identifier: C9PHKhRaV6dbtvOz015F7i9d4WdqgQMYrOWsO3KRxpA=
Subject key identifier: 42:87:7C:53:79:34:A4:1E:7A:DB:AD:12:C1:3D:7B:46:29:AF:4A:A9
Authority key identifier: B4:B0:79:BA:13:CE:46:AB:EC:7F:5B:C3:F3:DD:CD:8B:B8:67:59:05
Certificate issuer: /CN=b4b079ba13ce46abec7f5bc3f3ddcd8bb8675905
Certificate serial: 0197B7EAC669AB07E63BF416587F956CE949
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tLB5uhPORqvsf1vD893Ni7hnWQU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/d46a81-3735-42c6-9bbb-1d1799b59c99/1/tLB5uhPORqvsf1vD893Ni7hnWQU.mft
Manifest number: 15B3
Signing time: Sat 28 Jun 2025 19:01:46 +0000
Manifest this update: Sat 28 Jun 2025 19:01:46 +0000
Manifest next update: Sun 29 Jun 2025 19:01:46 +0000
Files and hashes: 1: tLB5uhPORqvsf1vD893Ni7hnWQU.crl (hash: CVHtp7VVGgXZide5OlK9OAvw4qbmjnQZJAkeLN9wkDs=)
2: u2BcurtkahmzzbpCvF5G__EHmrQ.roa (hash: sXnsJfkykB72mvD9Mf1AHstwJM/7MpBbK+WiRKqEOhY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/d46a81-3735-42c6-9bbb-1d1799b59c99/1/tLB5uhPORqvsf1vD893Ni7hnWQU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/d46a81-3735-42c6-9bbb-1d1799b59c99/1/tLB5uhPORqvsf1vD893Ni7hnWQU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tLB5uhPORqvsf1vD893Ni7hnWQU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:c6:69:ab:07:e6:3b:f4:16:58:7f:95:6c:e9:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4b079ba13ce46abec7f5bc3f3ddcd8bb8675905
Validity
Not Before: Jun 28 19:01:46 2025 GMT
Not After : Jun 29 19:01:46 2025 GMT
Subject: CN=42877c537934a41e7adbad12c13d7b4629af4aa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e2:4a:57:bf:7b:b5:82:10:5b:c5:d8:9c:c0:
d6:12:c6:19:5a:27:f7:48:f2:06:17:1b:9f:7c:a5:
89:0c:77:f4:b2:fa:35:a6:3f:ef:28:cd:a4:c5:b3:
f2:39:0c:4c:6c:c5:8b:ea:31:d7:79:ca:3c:e8:98:
7b:35:08:ed:9e:58:3c:ce:2f:4c:66:38:fb:19:29:
09:ab:39:a2:96:29:95:e1:89:8b:c9:03:04:5a:9b:
3d:1d:e3:07:91:6f:cc:2c:fa:f1:71:aa:68:b3:99:
7e:2c:cc:59:b9:a6:aa:f2:9b:c4:e9:08:78:89:96:
3e:1a:4c:89:1f:80:ef:a3:5d:74:f0:ac:2d:56:76:
9d:ca:9e:4f:f4:48:68:e0:9a:c8:bf:5c:d1:31:db:
24:54:59:af:c9:d9:fc:e8:ed:2a:9a:e8:71:8e:e5:
6c:82:e9:21:d0:83:c5:7c:3a:52:0e:aa:6d:0f:29:
ca:9d:4a:4d:d9:27:3a:fc:24:b5:f3:cf:a5:6c:63:
77:b9:98:62:32:38:65:b2:c9:60:7b:7c:7d:14:5d:
8b:ce:8d:64:02:c7:73:b7:8d:64:fc:c5:90:f8:cf:
e8:ec:9f:4f:5b:7b:86:fd:6d:54:3e:25:34:d9:bd:
54:de:75:ff:5d:90:cb:a2:e3:30:52:9a:6d:d7:f9:
c1:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:87:7C:53:79:34:A4:1E:7A:DB:AD:12:C1:3D:7B:46:29:AF:4A:A9
X509v3 Authority Key Identifier:
keyid:B4:B0:79:BA:13:CE:46:AB:EC:7F:5B:C3:F3:DD:CD:8B:B8:67:59:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tLB5uhPORqvsf1vD893Ni7hnWQU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d46a81-3735-42c6-9bbb-1d1799b59c99/1/tLB5uhPORqvsf1vD893Ni7hnWQU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d46a81-3735-42c6-9bbb-1d1799b59c99/1/tLB5uhPORqvsf1vD893Ni7hnWQU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:3f:ae:2e:93:3e:b6:4e:05:e9:11:bc:dc:a8:ec:19:f4:c4:
1e:f5:bd:e1:8f:ef:70:3e:7a:01:95:2e:d7:0f:f4:52:ca:98:
45:c3:98:74:56:ab:46:25:77:8e:48:dc:14:b1:47:8f:38:f7:
87:44:66:71:ae:10:10:b0:62:d4:e2:3e:96:31:3e:2f:f4:02:
06:c6:f8:2e:78:71:e0:ec:6b:b9:78:a9:f1:3d:70:2c:42:99:
a1:e2:78:c3:17:f7:4f:af:31:be:23:15:57:4c:81:69:cd:fd:
72:ea:8a:a4:71:e4:d0:7b:73:24:f2:68:79:d8:78:66:90:ae:
6c:b4:6a:ec:8a:86:7b:a9:5d:6c:2f:da:ed:86:c6:a2:c8:29:
8e:7e:aa:b0:b7:15:0e:f1:5e:31:ab:d8:4f:68:9e:c8:fa:16:
3c:28:7f:60:65:7a:3a:b2:41:f4:d2:f5:42:f1:b4:08:42:a8:
2d:cf:0e:13:1d:8f:9b:c8:e9:98:94:9f:cc:63:04:92:bf:05:
45:32:0c:2b:df:b7:f8:43:85:b1:43:7f:46:6d:1d:93:3a:03:
a0:23:fa:e8:4f:51:37:91:0e:7e:2f:8e:a9:a9:1d:5a:9f:e0:
2d:92:92:8b:78:25:14:c3:f2:27:65:3c:50:14:7f:d3:3c:56:
a3:72:59:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:00:24 2025 by rpki-client