Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.mft
File: tOxsCl6-xYF9kbkeeaa8YTLrnSw.mft (raw, json)
Hash identifier: /ZB3EV1S1I6xO5WWQsWD99jjly1fKPVMl4irpWUI4Cc=
Subject key identifier: 7C:86:BA:24:29:EC:4A:A8:5C:5E:FE:A3:94:3F:EB:BE:99:26:C3:53
Authority key identifier: B4:EC:6C:0A:5E:BE:C5:81:7D:91:B9:1E:79:A6:BC:61:32:EB:9D:2C
Certificate issuer: /CN=b4ec6c0a5ebec5817d91b91e79a6bc6132eb9d2c
Certificate serial: 01975BDD0AB6D8196939358901A86EC28AB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tOxsCl6-xYF9kbkeeaa8YTLrnSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.mft
Manifest number: 1589
Signing time: Tue 10 Jun 2025 22:01:42 +0000
Manifest this update: Tue 10 Jun 2025 22:01:42 +0000
Manifest next update: Wed 11 Jun 2025 22:01:42 +0000
Files and hashes: 1: 0WgKhjREJrZPp5eivCc5Ledwy08.roa (hash: g1cMz695Vu5b1v4C7JspTc1yMqOrx6XRuND1g3o80ZU=)
2: c4XFDsuP3oiOPuoN5dW6Mp7swps.roa (hash: RShjOJ6yyL7rh4X46zYbqRc79tC1/dWZp0uZXHk88jM=)
3: tOxsCl6-xYF9kbkeeaa8YTLrnSw.crl (hash: SSnLazlxkN7E1oRRACb/50eOhmBy/vcwHWQeethqo/w=)
4: x8qy1V86ggKXIYJ47lPp7-bEQ08.roa (hash: Tid2ObTc99hFnnGIy0KhVlQV4ZEsaX9AQcsvz/R/sw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tOxsCl6-xYF9kbkeeaa8YTLrnSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 20:45:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5b:dd:0a:b6:d8:19:69:39:35:89:01:a8:6e:c2:8a:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4ec6c0a5ebec5817d91b91e79a6bc6132eb9d2c
Validity
Not Before: Jun 10 22:01:42 2025 GMT
Not After : Jun 11 22:01:42 2025 GMT
Subject: CN=7c86ba2429ec4aa85c5efea3943febbe9926c353
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:4e:24:8f:fd:64:6d:f3:f1:e9:e4:a3:be:84:
1e:64:cf:bd:cf:b9:e2:b7:fc:49:79:1a:53:b4:5d:
8c:ed:b7:00:de:bd:bf:db:9f:cf:c7:56:64:0b:e8:
7d:fd:49:fa:e6:8e:83:17:e9:7a:05:34:9d:f4:7e:
49:31:0e:e4:b2:2e:94:82:11:b7:f1:f3:e8:b6:1e:
80:21:19:6d:84:e3:57:b7:59:43:b0:e7:2e:53:86:
bf:dc:3f:4a:3e:91:f3:f6:16:6f:4f:e5:53:e1:e0:
ee:1b:26:a2:b5:2f:58:68:b7:eb:31:b3:88:c1:87:
5b:6e:55:b2:5f:76:8a:10:8b:49:cd:39:7d:0e:79:
7a:e5:11:71:87:ab:83:c4:8f:03:cd:b2:bd:8f:c4:
9d:6a:88:62:52:36:a3:5d:4e:fd:e4:d7:85:7a:90:
5f:1b:01:74:13:17:73:48:a6:32:af:69:45:e1:bc:
cf:4e:25:46:06:8d:3e:24:07:ae:1d:29:b5:c4:d0:
89:54:7c:d0:53:5d:6c:78:2e:b3:b2:80:2d:38:75:
17:fd:b2:12:e2:6e:c2:5a:cd:80:7c:94:f1:75:42:
d0:7f:d9:d6:9e:b7:de:53:78:4a:87:d4:2b:fd:ac:
f0:be:e3:4a:fa:05:79:d3:9a:66:9d:f8:65:73:97:
cc:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:86:BA:24:29:EC:4A:A8:5C:5E:FE:A3:94:3F:EB:BE:99:26:C3:53
X509v3 Authority Key Identifier:
keyid:B4:EC:6C:0A:5E:BE:C5:81:7D:91:B9:1E:79:A6:BC:61:32:EB:9D:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tOxsCl6-xYF9kbkeeaa8YTLrnSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:65:95:f5:6c:12:ac:38:47:d0:ed:15:df:c7:6a:9c:42:dc:
fe:e5:74:3f:65:9a:5f:e8:fc:15:d2:ab:9d:5c:d2:40:a3:81:
bd:c5:4e:57:32:ce:60:be:09:cb:ed:b0:65:fd:87:4d:cd:4e:
03:63:5b:e9:79:a9:27:9b:75:b1:78:b2:95:89:84:b6:20:71:
f2:19:30:0a:b9:bb:6e:fc:9f:ed:02:96:cf:61:cc:00:50:7d:
99:43:30:c5:df:7a:fa:b7:87:9f:ac:0e:0c:f7:ce:b6:a8:66:
58:b6:80:d1:11:bd:ac:9c:a9:fc:72:72:73:ca:30:3a:6f:ab:
1b:80:27:a1:0e:2b:8c:35:e1:61:58:60:dd:dd:db:d6:6b:ed:
25:e8:3c:8d:33:f9:f2:e8:4f:f2:b6:8d:2c:56:1b:c1:f3:63:
78:1a:77:9d:3f:5e:b3:97:2e:41:8c:1d:ad:7c:cd:b3:9c:1a:
ef:78:0c:2a:c8:7b:b3:fe:40:84:ff:63:21:9e:ab:3b:2a:5c:
bf:fa:99:74:1e:3f:6e:eb:2b:6f:2a:81:7f:4a:06:47:28:9b:
8d:11:5d:d7:e1:67:3f:65:d2:57:53:3c:0d:a0:89:73:ec:f8:
d9:a3:09:ee:de:f8:fd:bc:57:c4:db:97:a2:7a:d6:ff:b2:0f:
9c:50:0b:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdb3Qq22BlpOTWJAahuwoqzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0ZWM2YzBhNWViZWM1ODE3ZDkxYjkxZTc5YTZiYzYxMzJl
YjlkMmMwHhcNMjUwNjEwMjIwMTQyWhcNMjUwNjExMjIwMTQyWjAzMTEwLwYDVQQD
Eyg3Yzg2YmEyNDI5ZWM0YWE4NWM1ZWZlYTM5NDNmZWJiZTk5MjZjMzUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0U4kj/1kbfPx6eSjvoQeZM+9z7ni
t/xJeRpTtF2M7bcA3r2/25/Px1ZkC+h9/Un65o6DF+l6BTSd9H5JMQ7ksi6UghG3
8fPoth6AIRlthONXt1lDsOcuU4a/3D9KPpHz9hZvT+VT4eDuGyaitS9YaLfrMbOI
wYdbblWyX3aKEItJzTl9Dnl65RFxh6uDxI8DzbK9j8SdaohiUjajXU795NeFepBf
GwF0ExdzSKYyr2lF4bzPTiVGBo0+JAeuHSm1xNCJVHzQU11seC6zsoAtOHUX/bIS
4m7CWs2AfJTxdULQf9nWnrfeU3hKh9Qr/azwvuNK+gV505pmnfhlc5fMxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHyGuiQp7EqoXF7+o5Q/676ZJsNTMB8GA1UdIwQY
MBaAFLTsbApevsWBfZG5HnmmvGEy650sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdE94c0NsNi14WUY5a2JrZWVhYThZVExyblN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC8yMDk3NGQtNjQwMy00MTA3LWE3NWIt
MTNmYjdhNTEzMGNhLzEvdE94c0NsNi14WUY5a2JrZWVhYThZVExyblN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC8yMDk3NGQtNjQwMy00MTA3LWE3NWItMTNmYjdhNTEzMGNh
LzEvdE94c0NsNi14WUY5a2JrZWVhYThZVExyblN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjmWV9WwS
rDhH0O0V38dqnELc/uV0P2WaX+j8FdKrnVzSQKOBvcVOVzLOYL4Jy+2wZf2HTc1O
A2Nb6XmpJ5t1sXiylYmEtiBx8hkwCrm7bvyf7QKWz2HMAFB9mUMwxd96+reHn6wO
DPfOtqhmWLaA0RG9rJyp/HJyc8owOm+rG4AnoQ4rjDXhYVhg3d3b1mvtJeg8jTP5
8uhP8raNLFYbwfNjeBp3nT9es5cuQYwdrXzNs5wa73gMKsh7s/5AhP9jIZ6rOypc
v/qZdB4/busrbyqBf0oGRyibjRFd1+FnP2XSV1M8DaCJc+z42aMJ7t74/bxXxNuX
onrW/7IPnFAL+A==
-----END CERTIFICATE-----
Generated at Wed Jun 11 05:13:13 2025 by rpki-client