Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/1a15fa-ace6-464d-8969-e4928180033c/1/TBdAzvl0ncKw9fiM3xA02oHWBtw.mft
File: TBdAzvl0ncKw9fiM3xA02oHWBtw.mft (raw, json)
Hash identifier: CIZ2hTAT2bA6XJFz1SCuV1bEMY4DSZe/AsPjwfsjUEI=
Subject key identifier: 31:3D:E3:8A:F0:F7:C5:02:77:9E:51:0B:60:DE:BB:72:FC:B0:11:62
Authority key identifier: 4C:17:40:CE:F9:74:9D:C2:B0:F5:F8:8C:DF:10:34:DA:81:D6:06:DC
Certificate issuer: /CN=4c1740cef9749dc2b0f5f88cdf1034da81d606dc
Certificate serial: 01974D7BAC5BDA20DE9C8520A72AD4B11FE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TBdAzvl0ncKw9fiM3xA02oHWBtw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/1a15fa-ace6-464d-8969-e4928180033c/1/TBdAzvl0ncKw9fiM3xA02oHWBtw.mft
Manifest number: 0EFD
Signing time: Sun 08 Jun 2025 03:00:40 +0000
Manifest this update: Sun 08 Jun 2025 03:00:40 +0000
Manifest next update: Mon 09 Jun 2025 03:00:40 +0000
Files and hashes: 1: 9UfG7ZfqsnxXdNjOVBB4EufGuiU.roa (hash: nBGGqWZhxqHLJh+Oq/1SCIlZ0ENh9e+rLU6y/LQvQNA=)
2: TBdAzvl0ncKw9fiM3xA02oHWBtw.crl (hash: UBD9IQBXoKiLPuuj5UOrcJexDfjN5acmf63T+ZwMwCs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/1a15fa-ace6-464d-8969-e4928180033c/1/TBdAzvl0ncKw9fiM3xA02oHWBtw.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/1a15fa-ace6-464d-8969-e4928180033c/1/TBdAzvl0ncKw9fiM3xA02oHWBtw.mft
rsync://rpki.ripe.net/repository/DEFAULT/TBdAzvl0ncKw9fiM3xA02oHWBtw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:7b:ac:5b:da:20:de:9c:85:20:a7:2a:d4:b1:1f:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c1740cef9749dc2b0f5f88cdf1034da81d606dc
Validity
Not Before: Jun 8 03:00:40 2025 GMT
Not After : Jun 9 03:00:40 2025 GMT
Subject: CN=313de38af0f7c502779e510b60debb72fcb01162
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f7:ec:ce:81:5b:14:b7:f9:bf:28:80:59:8a:
2c:b3:f2:2f:51:c3:54:80:98:78:43:b7:8d:3a:30:
2e:79:19:96:57:53:3e:69:c1:52:c7:f5:b9:6f:ef:
65:a4:d1:5f:b2:86:3f:fc:3e:0c:56:6b:73:fa:23:
6e:0e:9e:01:a6:e5:a7:88:ab:fa:7d:ed:de:ec:fe:
3a:0f:14:79:5e:38:8a:d6:55:7f:6d:5c:ab:b7:9f:
f5:e1:e0:b6:3d:d6:e0:df:11:8b:4a:0c:c0:77:bb:
76:1b:b7:58:4d:57:ad:96:06:54:07:38:9c:21:14:
8e:7c:0a:04:db:9f:85:91:93:b4:a1:cc:88:e2:9e:
75:0b:5d:3a:65:22:2f:48:b8:c3:2d:ce:f8:bc:bf:
8e:98:53:ce:b3:10:a9:88:f7:6a:54:ff:1e:ac:c4:
a5:40:35:87:8e:4d:a1:0c:53:70:c7:17:93:6e:d9:
49:0b:a1:c8:b9:30:6d:9c:06:53:4c:5d:89:a2:33:
76:ae:27:b0:2f:8f:b2:28:82:7a:78:72:89:d6:04:
d3:05:b9:ad:55:90:b3:1f:2f:36:4a:20:ce:d7:a6:
42:14:a2:13:f9:5a:27:08:d4:49:02:b1:1d:eb:26:
8d:07:1f:a7:87:8e:6b:9b:23:9e:92:23:6a:ff:59:
d8:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:3D:E3:8A:F0:F7:C5:02:77:9E:51:0B:60:DE:BB:72:FC:B0:11:62
X509v3 Authority Key Identifier:
keyid:4C:17:40:CE:F9:74:9D:C2:B0:F5:F8:8C:DF:10:34:DA:81:D6:06:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TBdAzvl0ncKw9fiM3xA02oHWBtw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/1a15fa-ace6-464d-8969-e4928180033c/1/TBdAzvl0ncKw9fiM3xA02oHWBtw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/1a15fa-ace6-464d-8969-e4928180033c/1/TBdAzvl0ncKw9fiM3xA02oHWBtw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:f8:a6:f2:41:23:7c:14:7b:86:11:d2:57:f0:36:2c:72:ca:
3e:8a:38:e6:a9:b9:d3:d9:78:c5:86:17:ed:e3:08:36:74:8e:
21:42:b3:ee:88:02:49:e0:51:6d:5f:c8:a1:7a:be:7f:84:aa:
19:6e:67:2c:50:52:58:58:c5:fe:01:81:21:81:e8:97:3a:07:
54:96:21:8d:5d:40:61:5e:af:eb:36:31:7f:16:e0:f5:bc:8d:
4e:b0:50:57:42:d3:71:88:a1:24:64:e0:17:61:52:03:4e:e8:
fb:bf:fd:57:45:83:e7:97:9a:05:e1:b5:51:60:78:6b:53:97:
5b:7c:ee:d9:84:2a:36:97:7f:0d:be:b3:0c:15:4c:a6:bd:2f:
f5:d3:16:ea:e4:da:94:3d:87:99:93:6f:56:11:74:e1:e4:6c:
4b:7e:be:5d:62:20:05:6f:e5:1f:f2:2b:94:43:59:b3:57:b9:
15:67:a0:af:a8:fc:c7:7a:c3:a1:ef:de:f0:6d:12:94:61:81:
68:42:15:3e:9c:3a:45:73:81:d3:7a:b4:53:bd:56:66:3e:9d:
7a:cc:80:2e:4b:96:8e:14:6c:4a:98:8f:e3:c6:03:de:c8:59:
01:fd:7c:71:92:df:e8:6c:0c:ae:fd:08:02:2e:41:18:9e:95:
f7:fb:66:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 05:57:51 2025 by rpki-client