Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.mft
File: tOxsCl6-xYF9kbkeeaa8YTLrnSw.mft (raw, json)
Hash identifier: zKKeDPEZumja/E0gC5yHB3NzCgUdfHcaSRlcUXV3Dlo=
Subject key identifier: 61:AC:20:43:08:CA:27:08:9F:24:67:25:E9:19:64:7C:DE:82:BD:AE
Authority key identifier: B4:EC:6C:0A:5E:BE:C5:81:7D:91:B9:1E:79:A6:BC:61:32:EB:9D:2C
Certificate issuer: /CN=b4ec6c0a5ebec5817d91b91e79a6bc6132eb9d2c
Certificate serial: 019759EDEFAF0F912CB7D000478551582036
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tOxsCl6-xYF9kbkeeaa8YTLrnSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.mft
Manifest number: 1588
Signing time: Tue 10 Jun 2025 13:00:55 +0000
Manifest this update: Tue 10 Jun 2025 13:00:55 +0000
Manifest next update: Wed 11 Jun 2025 13:00:55 +0000
Files and hashes: 1: 0WgKhjREJrZPp5eivCc5Ledwy08.roa (hash: g1cMz695Vu5b1v4C7JspTc1yMqOrx6XRuND1g3o80ZU=)
2: c4XFDsuP3oiOPuoN5dW6Mp7swps.roa (hash: RShjOJ6yyL7rh4X46zYbqRc79tC1/dWZp0uZXHk88jM=)
3: tOxsCl6-xYF9kbkeeaa8YTLrnSw.crl (hash: EGCeEtDSJHRIXgy83ekH3YoqwEGPB7M9yOXBkYkqidg=)
4: x8qy1V86ggKXIYJ47lPp7-bEQ08.roa (hash: Tid2ObTc99hFnnGIy0KhVlQV4ZEsaX9AQcsvz/R/sw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tOxsCl6-xYF9kbkeeaa8YTLrnSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 13:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:59:ed:ef:af:0f:91:2c:b7:d0:00:47:85:51:58:20:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4ec6c0a5ebec5817d91b91e79a6bc6132eb9d2c
Validity
Not Before: Jun 10 13:00:55 2025 GMT
Not After : Jun 11 13:00:55 2025 GMT
Subject: CN=61ac204308ca27089f246725e919647cde82bdae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:10:a3:a2:59:f9:dd:01:d9:6b:5e:e6:90:43:
23:56:31:46:fa:63:56:76:02:4d:f2:96:f6:eb:a0:
d3:9e:78:a1:65:07:b5:69:27:19:9b:14:09:b4:f7:
5f:c2:1a:f3:f7:90:97:e6:85:d5:b3:c3:dc:d4:d3:
9a:ee:89:fd:f8:00:fd:fd:e8:33:db:e0:70:c8:33:
36:07:ce:14:ba:25:25:ab:10:2f:ef:31:d8:c0:2e:
b4:2d:3e:d7:54:1a:64:80:91:ca:2a:1a:b1:1b:f9:
6d:58:97:5c:22:07:bb:5c:5e:8c:94:55:7f:0f:b8:
56:5a:93:cc:44:73:18:a7:9b:d8:0e:f8:f9:8f:93:
8a:3a:81:40:3f:82:46:c3:0d:25:8b:65:0b:cb:9a:
ce:30:c2:31:34:c7:6f:b1:05:2d:89:66:71:d8:15:
d3:7c:0b:37:4a:ab:f6:5a:ec:43:63:3c:41:1a:a8:
fd:6c:dc:97:02:d1:39:b5:16:78:03:c4:46:59:fd:
ad:fa:be:f9:77:9e:5b:70:83:f9:35:a2:0b:47:17:
44:23:56:e7:dc:11:16:81:78:d4:3c:29:9d:24:75:
d3:84:dd:36:cb:4d:ab:3d:fe:ac:2e:25:f3:91:e0:
85:b4:a1:f5:58:a1:2e:2c:fe:9c:d5:07:69:0b:dc:
7a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:AC:20:43:08:CA:27:08:9F:24:67:25:E9:19:64:7C:DE:82:BD:AE
X509v3 Authority Key Identifier:
keyid:B4:EC:6C:0A:5E:BE:C5:81:7D:91:B9:1E:79:A6:BC:61:32:EB:9D:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tOxsCl6-xYF9kbkeeaa8YTLrnSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:1d:cc:36:dc:b7:bd:d2:f5:9e:f2:af:25:19:74:69:c7:da:
ed:3e:25:01:d1:b3:4e:2f:ef:51:51:48:dc:0e:bc:3f:71:0a:
c9:de:29:35:97:fe:70:c4:e7:44:01:c9:7f:60:96:cc:e2:5a:
26:60:08:58:b5:bf:82:e1:88:e1:7b:1d:9e:4f:d4:b6:d9:6c:
6d:c1:91:2c:e2:5e:7b:09:c5:fa:c0:a2:cd:d5:91:d2:2c:5f:
8b:72:46:e9:c6:8e:f3:3a:bd:8f:09:95:c1:a1:c4:3d:e1:bd:
a9:fd:2a:47:cc:35:c1:9d:e2:1a:56:7c:de:08:8a:92:ed:63:
14:bf:e3:42:a8:af:42:23:b8:bd:03:de:2b:ed:dd:67:00:24:
bd:d6:97:98:6f:81:de:24:8a:0c:0c:4a:49:45:7b:77:fa:10:
88:2e:cd:a7:f1:35:8d:83:56:92:50:97:a5:5c:73:e1:f6:5f:
be:53:56:6b:50:c9:b1:90:4a:96:30:c5:f0:f4:3c:6c:bd:31:
25:75:75:0b:4f:eb:83:9d:48:14:83:c6:32:ed:08:a3:a8:3c:
4a:f7:e4:37:66:99:80:70:9b:87:86:fd:67:bd:0d:bf:96:f9:
4c:a2:28:0c:d7:45:5d:a6:55:db:69:4f:21:4f:01:21:c0:8d:
c8:08:96:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 17:32:59 2025 by rpki-client