Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/171cea-3d78-4513-ad49-5a905af507c3/1/tu2bXLS2SGbDg97kV2v_P_h1JC0.mft
File: tu2bXLS2SGbDg97kV2v_P_h1JC0.mft (raw, json)
Hash identifier: 89VO7gnQxMxdVPRMnNNdoxICrsAChweSU3TzPnLmAHc=
Subject key identifier: 6C:56:D4:C3:56:CA:17:CA:33:BF:9C:98:07:65:F3:11:9C:EC:9D:DE
Authority key identifier: B6:ED:9B:5C:B4:B6:48:66:C3:83:DE:E4:57:6B:FF:3F:F8:75:24:2D
Certificate issuer: /CN=b6ed9b5cb4b64866c383dee4576bff3ff875242d
Certificate serial: 01974F3344DE281986209346DE30A852AB7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tu2bXLS2SGbDg97kV2v_P_h1JC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/171cea-3d78-4513-ad49-5a905af507c3/1/tu2bXLS2SGbDg97kV2v_P_h1JC0.mft
Manifest number: 0CF7
Signing time: Sun 08 Jun 2025 11:00:49 +0000
Manifest this update: Sun 08 Jun 2025 11:00:49 +0000
Manifest next update: Mon 09 Jun 2025 11:00:49 +0000
Files and hashes: 1: Cr7WIZXJqqSxx1MgWk3fJvY56gA.roa (hash: W0p2Ng/L4A+CUhGlPSgje47dkJ8+aMEjdUAnh4zo9Rc=)
2: tu2bXLS2SGbDg97kV2v_P_h1JC0.crl (hash: qivHUcHv9njIvfcK7AoXTqyH3O11zJx3btKU3KzS2ko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/171cea-3d78-4513-ad49-5a905af507c3/1/tu2bXLS2SGbDg97kV2v_P_h1JC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/171cea-3d78-4513-ad49-5a905af507c3/1/tu2bXLS2SGbDg97kV2v_P_h1JC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/tu2bXLS2SGbDg97kV2v_P_h1JC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 11:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:33:44:de:28:19:86:20:93:46:de:30:a8:52:ab:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6ed9b5cb4b64866c383dee4576bff3ff875242d
Validity
Not Before: Jun 8 11:00:49 2025 GMT
Not After : Jun 9 11:00:49 2025 GMT
Subject: CN=6c56d4c356ca17ca33bf9c980765f3119cec9dde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:dc:e5:d4:ab:a2:44:c7:cb:21:bb:9e:38:e3:
82:d2:eb:21:ed:0b:d8:f7:45:13:8c:88:b1:3e:8f:
e1:7f:ac:fe:f3:6c:d8:3d:12:54:ed:f1:f9:46:98:
10:9d:51:bf:16:91:2b:67:b8:a3:fa:fc:6e:4e:cc:
ec:9b:e9:c2:c7:b0:e7:22:1b:0d:7f:df:69:90:42:
c9:ca:1e:d9:f5:d0:55:54:b9:09:1d:86:df:2c:74:
c4:f0:57:66:1d:4f:ab:0c:a2:a6:49:98:fb:c1:4f:
c8:62:be:2f:79:fd:c3:cb:52:6a:08:ee:ff:6f:40:
d1:69:93:51:1d:3e:0c:d8:61:06:84:95:78:cb:4f:
2a:30:3d:2f:0a:ae:7b:a1:9b:a2:d8:28:cd:d1:a9:
3c:ec:d2:50:fe:db:f7:a5:d7:1f:91:b4:55:ac:a4:
41:d2:9e:74:48:a4:98:d9:af:28:48:8a:5b:03:f4:
f1:9f:c5:60:3e:36:5b:6c:8a:83:84:3d:4f:33:73:
30:07:eb:d5:81:a4:86:83:23:ab:35:ad:9b:5f:6c:
db:a9:44:d4:ab:8a:35:76:3e:c9:07:b7:46:38:2c:
11:7a:01:f6:37:f7:54:e1:fd:f0:6c:66:ab:72:a4:
83:bd:aa:54:2c:fc:21:99:20:ae:ad:6a:98:5a:93:
fa:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:56:D4:C3:56:CA:17:CA:33:BF:9C:98:07:65:F3:11:9C:EC:9D:DE
X509v3 Authority Key Identifier:
keyid:B6:ED:9B:5C:B4:B6:48:66:C3:83:DE:E4:57:6B:FF:3F:F8:75:24:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tu2bXLS2SGbDg97kV2v_P_h1JC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/171cea-3d78-4513-ad49-5a905af507c3/1/tu2bXLS2SGbDg97kV2v_P_h1JC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/171cea-3d78-4513-ad49-5a905af507c3/1/tu2bXLS2SGbDg97kV2v_P_h1JC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:eb:b8:31:91:2d:dd:e1:8c:b6:7d:28:a2:39:92:49:39:2b:
ca:a0:95:1b:53:8b:5b:2e:e1:5a:23:f6:56:d0:f3:b2:43:f6:
12:ab:fe:62:7f:a9:c7:d2:d9:eb:83:05:e7:aa:f7:55:bf:90:
2c:5c:38:07:51:22:7a:9f:69:6b:bf:0a:91:00:82:06:1f:82:
07:71:16:31:4a:28:d5:63:ff:0c:5f:01:ec:23:af:35:c1:69:
86:03:be:12:0c:80:05:41:8d:ec:ed:86:07:89:39:ff:e8:a5:
59:6f:d6:50:31:f1:ca:35:db:d4:c5:3f:82:af:b8:77:c7:8a:
40:0a:f7:5d:bb:db:70:46:b0:77:42:1a:c6:cb:36:05:8e:0d:
0c:27:da:98:3b:2c:39:cd:b8:60:3c:0c:b9:e4:d6:26:17:e3:
31:8a:0b:93:f8:95:4e:6d:b2:a5:36:fc:f5:ef:c5:84:6d:e1:
fa:c2:a7:dc:c1:0e:aa:60:a6:26:4a:2e:b5:6f:ee:17:30:5c:
a0:cb:3c:7d:3c:05:a5:1f:85:0d:b4:cd:f8:80:ec:0e:f5:0f:
0b:93:5d:f3:15:89:c1:b4:9c:47:89:b8:17:0d:2a:41:7d:47:
b0:8a:18:56:65:ce:60:af:a6:7c:29:5c:56:b2:24:b1:e0:dc:
89:6c:3f:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 14:32:17 2025 by rpki-client