Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/ff2a1c-18af-4ba5-a49f-ecad3b714938/1/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.mft
File: Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.mft (raw, json)
Hash identifier: doO2T2Wvd6v5q6vurodmUOtcvSHW8fBkzKgOKORxLeY=
Subject key identifier: F4:45:4E:B2:44:07:7A:16:7C:C5:21:6A:73:91:D3:DC:00:DF:19:DB
Authority key identifier: 4E:5E:CF:EC:9F:54:E4:EC:39:C2:00:5E:F4:E6:3E:70:B5:1F:AE:D4
Certificate issuer: /CN=4e5ecfec9f54e4ec39c2005ef4e63e70b51faed4
Certificate serial: 0197B70EF2F49BA3FCAADFE11744A2FE7599
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/ff2a1c-18af-4ba5-a49f-ecad3b714938/1/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 15:01:39 +0000
Manifest this update: Sat 28 Jun 2025 15:01:39 +0000
Manifest next update: Sun 29 Jun 2025 15:01:39 +0000
Files and hashes: 1: 88NNjHCiX9_36_Ap90bLZBoJu2g.roa (hash: ZT80OMK3BXF8ZC1FoGfNRJbcIwwVIXvLAOficLJgVoc=)
2: Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.crl (hash: gJLpEmEzcAzVWjDPplxCT0KiR8TirI4NsmiCSh38brE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/ff2a1c-18af-4ba5-a49f-ecad3b714938/1/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/ff2a1c-18af-4ba5-a49f-ecad3b714938/1/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:f2:f4:9b:a3:fc:aa:df:e1:17:44:a2:fe:75:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e5ecfec9f54e4ec39c2005ef4e63e70b51faed4
Validity
Not Before: Jun 28 15:01:39 2025 GMT
Not After : Jun 29 15:01:39 2025 GMT
Subject: CN=f4454eb244077a167cc5216a7391d3dc00df19db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:14:3b:6a:b2:0d:80:c2:ee:31:52:9b:b6:69:
37:de:f1:0f:11:b7:98:a8:47:98:bb:b4:39:74:44:
58:15:7e:83:d6:42:5f:27:cb:55:2a:f5:8c:65:00:
a5:c3:af:e9:1c:b3:bc:3b:52:a5:20:f9:1b:79:e0:
ec:32:62:11:cc:bd:ca:93:00:4f:23:93:8c:cc:6a:
f4:66:b1:27:47:fc:01:c7:c2:30:43:05:55:4c:e4:
43:0f:38:fa:ab:d6:5e:ed:0c:73:7d:76:65:e8:3f:
78:c6:95:ec:93:2b:e8:c6:c5:af:8c:79:78:80:40:
0f:2e:30:30:fd:07:28:08:d6:64:56:2d:50:e3:e3:
20:5b:b2:f0:13:47:d1:10:d6:9f:0c:a6:fe:5f:fc:
2f:89:4d:5a:c0:a6:52:18:72:3f:35:71:6b:1f:27:
94:7c:d2:6b:54:89:4c:93:e1:9a:2a:9d:73:06:8b:
9c:70:33:0e:70:bf:f7:e6:1f:f3:d5:b1:5a:a5:f6:
0e:de:cc:50:62:94:c1:19:db:0a:7a:f4:07:af:e5:
1c:58:01:49:c3:10:62:f4:61:32:5a:8b:5f:d6:90:
6a:d5:7e:5b:c9:f1:7b:f0:40:f1:c9:7e:65:2d:17:
4b:64:45:8a:23:37:7a:55:75:05:60:89:6c:14:00:
b7:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:45:4E:B2:44:07:7A:16:7C:C5:21:6A:73:91:D3:DC:00:DF:19:DB
X509v3 Authority Key Identifier:
keyid:4E:5E:CF:EC:9F:54:E4:EC:39:C2:00:5E:F4:E6:3E:70:B5:1F:AE:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ff2a1c-18af-4ba5-a49f-ecad3b714938/1/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ff2a1c-18af-4ba5-a49f-ecad3b714938/1/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:c2:41:31:29:9f:28:0c:1b:ee:35:dc:43:cc:f5:26:7a:bb:
6e:46:d9:30:d3:d4:50:3f:75:63:de:22:05:a2:e0:4f:21:6f:
b3:0f:53:00:50:81:f2:07:bb:8b:09:3c:c2:c2:8a:8c:20:55:
8e:46:4b:cd:7c:5b:d8:f6:9d:36:61:a8:73:65:e5:1a:cb:4d:
28:ba:55:bf:55:1f:fb:7f:af:38:61:b8:36:37:c6:e4:07:c5:
e1:92:3a:18:42:81:82:f6:9c:54:51:42:4b:34:69:29:c7:ba:
8b:e1:66:29:6b:aa:53:9d:b5:10:7d:14:f7:ab:e0:45:9b:e8:
46:1f:10:ac:f3:70:9e:e0:86:95:2b:62:a7:55:b6:cf:1f:52:
03:bf:87:1d:57:2d:be:a5:86:81:ad:99:25:ee:24:8d:87:6f:
4a:48:d6:1d:57:49:01:19:86:b5:cc:74:a7:e3:b1:0c:97:7a:
8d:9c:4a:ed:92:62:97:72:f5:db:97:5f:0b:49:b1:12:b2:8d:
8e:c7:2a:83:ff:c5:07:91:52:d7:c7:c1:6f:89:9c:8f:36:da:
98:e1:79:b3:1a:14:67:f1:2d:9e:a1:7e:4a:d6:bb:f8:fe:30:
32:1a:ca:d9:c6:86:a5:a5:82:84:f0:d5:90:11:b5:ca:11:90:
1b:ee:6e:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:55:48 2025 by rpki-client