
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/61d213-2a0f-4348-893c-e726374330ce/1/tht5dOl6uTeRJAc0oZ-5rnRFy9k.mft
File: tht5dOl6uTeRJAc0oZ-5rnRFy9k.mft (raw, json)
Hash identifier: kDtIAak/iBuOXFCqra+zER2/PDZSUe3M9ab//M4s0AA=
Subject key identifier: 57:BC:6F:C6:FA:A2:0C:53:6F:13:CB:FD:78:08:FE:5D:A9:6A:43:43
Authority key identifier: B6:1B:79:74:E9:7A:B9:37:91:24:07:34:A1:9F:B9:AE:74:45:CB:D9
Certificate issuer: /CN=b61b7974e97ab93791240734a19fb9ae7445cbd9
Certificate serial: 01974B56721327A26B8416376337C980D962
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tht5dOl6uTeRJAc0oZ-5rnRFy9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/61d213-2a0f-4348-893c-e726374330ce/1/tht5dOl6uTeRJAc0oZ-5rnRFy9k.mft
Manifest number: 0FD0
Signing time: Sat 07 Jun 2025 17:00:45 +0000
Manifest this update: Sat 07 Jun 2025 17:00:45 +0000
Manifest next update: Sun 08 Jun 2025 17:00:45 +0000
Files and hashes: 1: KS8RslAPEYL2MOaeQ2coeWMc0Gs.roa (hash: Lm70YO9Qmcp4xR0fEfPDxvBSHKReqF8+K4qP2dqdms8=)
2: tht5dOl6uTeRJAc0oZ-5rnRFy9k.crl (hash: SeTbCh55oRHxvn+pXdQ4OUyAqw1YnJEY7WJTvGsYGbc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/61d213-2a0f-4348-893c-e726374330ce/1/tht5dOl6uTeRJAc0oZ-5rnRFy9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/61d213-2a0f-4348-893c-e726374330ce/1/tht5dOl6uTeRJAc0oZ-5rnRFy9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/tht5dOl6uTeRJAc0oZ-5rnRFy9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:56:72:13:27:a2:6b:84:16:37:63:37:c9:80:d9:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b61b7974e97ab93791240734a19fb9ae7445cbd9
Validity
Not Before: Jun 7 17:00:45 2025 GMT
Not After : Jun 8 17:00:45 2025 GMT
Subject: CN=57bc6fc6faa20c536f13cbfd7808fe5da96a4343
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a8:85:5a:88:2c:d6:ef:77:db:18:83:04:be:
58:5f:52:a6:98:c9:23:3b:e2:52:90:ce:9a:c6:5d:
1e:6c:2f:9d:f9:53:e4:59:e6:d5:67:20:9e:eb:12:
22:3b:e5:c6:de:b2:ac:59:cd:c9:af:67:e4:fd:e5:
c5:33:77:95:dd:5b:c3:77:7c:9c:d3:7e:e1:23:3a:
4e:c3:3e:42:fd:b9:de:f0:88:81:e6:83:b7:f8:d3:
13:94:85:c9:75:55:1f:1b:87:3c:ed:79:0b:55:54:
83:8c:b1:e1:ca:3e:bf:05:88:b8:91:1d:80:96:41:
62:54:c7:85:6c:91:24:08:24:79:6a:68:e3:49:6a:
29:8e:35:fc:ca:e9:f7:f0:e4:14:f1:a7:1b:aa:ae:
24:1f:3e:50:8e:ee:87:a9:3c:f7:c2:c4:c1:20:e1:
03:a9:60:19:7d:d5:ef:50:20:a1:25:38:62:2a:7b:
b9:67:9a:36:ae:22:80:b2:eb:7f:24:ea:58:3c:88:
b0:c3:e7:14:02:25:d4:02:18:b3:c8:b3:53:55:34:
d6:bb:30:00:f7:92:d2:f2:8b:ef:dc:50:cf:e7:fd:
9c:55:4c:cb:32:e8:45:13:49:e2:0c:03:fe:86:d8:
09:63:6e:56:ba:70:91:e3:f7:ab:d2:e4:d2:48:e5:
be:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:BC:6F:C6:FA:A2:0C:53:6F:13:CB:FD:78:08:FE:5D:A9:6A:43:43
X509v3 Authority Key Identifier:
keyid:B6:1B:79:74:E9:7A:B9:37:91:24:07:34:A1:9F:B9:AE:74:45:CB:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tht5dOl6uTeRJAc0oZ-5rnRFy9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/61d213-2a0f-4348-893c-e726374330ce/1/tht5dOl6uTeRJAc0oZ-5rnRFy9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/61d213-2a0f-4348-893c-e726374330ce/1/tht5dOl6uTeRJAc0oZ-5rnRFy9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:e2:fe:14:35:25:bb:38:16:69:5f:97:1f:d1:31:03:b2:69:
74:8c:18:f6:f1:27:54:41:66:37:59:75:64:0b:49:c7:87:07:
b8:11:5a:93:f0:64:19:f4:af:7b:fd:c8:86:96:66:86:69:2c:
33:c0:b1:8e:e0:02:d7:cd:ee:e9:8f:c2:81:51:56:8a:00:f5:
7c:46:82:f6:cb:16:de:6e:b2:b8:94:fc:d4:4e:dc:af:00:d4:
fa:2a:39:8b:28:f5:5c:b5:34:48:5c:dc:42:11:f4:4f:42:4f:
0a:d1:0c:d4:4c:a0:14:a6:3b:f5:a3:0a:86:13:54:d7:36:67:
0b:fc:68:ff:2a:8d:19:e5:cd:8d:5c:1f:1b:92:df:a1:bf:df:
c5:dd:7e:d2:9e:8d:f3:ba:e4:77:a0:65:dc:a5:c0:08:bd:c0:
46:3b:f4:5d:21:0e:80:ab:88:4a:b1:a7:17:7e:29:26:c1:86:
7b:4b:50:05:da:f1:46:31:22:64:53:ba:a1:7a:a3:0c:8e:3f:
90:3d:da:f3:12:c6:de:1c:8e:2c:6a:08:c4:9b:45:50:b7:28:
54:e8:af:c9:cb:31:cd:70:f4:34:2b:d1:12:7b:3d:76:16:68:
95:6e:08:9d:34:59:ee:88:6d:e1:2e:6d:2c:42:bc:33:e1:bf:
fe:6a:23:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 20:25:23 2025 by rpki-client