Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/7e7ee7-1bd4-4435-871f-6cf8e567ff1c/1/tNc6atd6j4WbQD2yznFegtHPMv4.mft
File: tNc6atd6j4WbQD2yznFegtHPMv4.mft (raw, json)
Hash identifier: AQde5cCgQqRPMqaEbd2ouUv+BAFSA9ycBeguYkgkCpM=
Subject key identifier: 38:D5:10:A2:DB:53:3E:18:7A:73:40:4E:B5:ED:22:F1:06:CE:3C:1E
Authority key identifier: B4:D7:3A:6A:D7:7A:8F:85:9B:40:3D:B2:CE:71:5E:82:D1:CF:32:FE
Certificate issuer: /CN=b4d73a6ad77a8f859b403db2ce715e82d1cf32fe
Certificate serial: 01974AB15467F52569C25CDF9E122E5B4D5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tNc6atd6j4WbQD2yznFegtHPMv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/7e7ee7-1bd4-4435-871f-6cf8e567ff1c/1/tNc6atd6j4WbQD2yznFegtHPMv4.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 14:00:24 +0000
Manifest this update: Sat 07 Jun 2025 14:00:24 +0000
Manifest next update: Sun 08 Jun 2025 14:00:24 +0000
Files and hashes: 1: YO-tGwbdqI4YYY7I1KqnEaElBoQ.roa (hash: XZFdc4B2lVuIwGuWp8Gzl21H5s/bjgOkXy1zS/FUzmY=)
2: r8uOOwHL3Wt4pGrUJebg8yZ8WaY.roa (hash: Eioa5I9ONK/XZQXZG+CzeC8xkMTpLpCoDVH43Ycxzzc=)
3: tNc6atd6j4WbQD2yznFegtHPMv4.crl (hash: nxlvw89LniwsQDJ+3vFhz5fuKtnXDVj3MijvOWJkJPo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/7e7ee7-1bd4-4435-871f-6cf8e567ff1c/1/tNc6atd6j4WbQD2yznFegtHPMv4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/7e7ee7-1bd4-4435-871f-6cf8e567ff1c/1/tNc6atd6j4WbQD2yznFegtHPMv4.mft
rsync://rpki.ripe.net/repository/DEFAULT/tNc6atd6j4WbQD2yznFegtHPMv4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:b1:54:67:f5:25:69:c2:5c:df:9e:12:2e:5b:4d:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4d73a6ad77a8f859b403db2ce715e82d1cf32fe
Validity
Not Before: Jun 7 14:00:24 2025 GMT
Not After : Jun 8 14:00:24 2025 GMT
Subject: CN=38d510a2db533e187a73404eb5ed22f106ce3c1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d1:32:0c:d1:79:ba:e3:dd:b9:16:06:31:a2:
93:87:c0:ae:5f:3e:82:35:9b:64:56:6e:c0:7e:ae:
c8:c5:ba:26:d4:d5:29:60:dc:73:43:ca:7f:b3:b7:
74:5c:28:b6:80:cd:9c:7e:8c:f2:46:88:6a:59:f4:
72:62:8d:84:2a:58:2d:b3:58:1d:95:ca:a8:ae:0c:
14:75:68:09:86:f4:3a:e7:08:33:f5:7e:2a:aa:83:
1b:6f:68:3c:37:b6:70:52:3a:bd:cb:bf:61:a5:bf:
f0:f4:5d:e4:cf:c8:6d:e3:34:d8:78:6c:4d:39:1d:
5b:26:89:df:63:3f:6f:65:fe:a2:46:75:1c:87:d8:
8e:30:ae:af:94:30:87:d9:ad:51:cf:d3:18:b2:a1:
80:34:73:3a:7f:ad:92:24:33:f0:a4:f2:54:b2:da:
fb:15:d5:72:50:a0:b4:87:98:47:15:fe:cc:67:b8:
d2:ba:db:27:3f:d8:3e:f4:a3:7c:55:3f:a7:3a:31:
e9:4e:a2:f1:20:f4:ed:36:24:fc:a1:bd:23:b0:a3:
2e:12:57:ef:1a:53:41:14:67:84:3d:6d:77:6d:1d:
b5:e1:2b:cf:e4:0b:c1:49:6f:99:8f:8f:5a:f2:83:
93:b7:b2:9b:18:a4:0d:91:94:69:70:2b:6f:db:7c:
76:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:D5:10:A2:DB:53:3E:18:7A:73:40:4E:B5:ED:22:F1:06:CE:3C:1E
X509v3 Authority Key Identifier:
keyid:B4:D7:3A:6A:D7:7A:8F:85:9B:40:3D:B2:CE:71:5E:82:D1:CF:32:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tNc6atd6j4WbQD2yznFegtHPMv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/7e7ee7-1bd4-4435-871f-6cf8e567ff1c/1/tNc6atd6j4WbQD2yznFegtHPMv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/7e7ee7-1bd4-4435-871f-6cf8e567ff1c/1/tNc6atd6j4WbQD2yznFegtHPMv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:db:cb:13:bf:0a:9b:99:26:10:68:52:1a:b5:ee:b9:74:42:
67:2b:b0:5d:bc:62:33:26:83:28:67:57:b8:09:51:27:be:ae:
19:98:ee:d0:6e:45:fc:19:e4:1f:f0:9a:d6:64:2a:46:7a:3c:
51:d3:45:4b:58:b3:7f:e0:9b:fb:4e:65:89:19:00:26:ba:88:
e1:6c:c0:74:3e:bc:78:00:a6:3c:2a:94:74:d4:92:6d:33:a5:
fd:a4:e5:c4:d4:fa:26:5b:ff:ec:54:e7:6e:ac:4a:fa:60:b3:
e6:2f:74:3d:50:1d:b0:70:b7:a2:9b:8e:c5:01:5d:0d:35:6b:
cf:41:ec:b0:f3:1c:64:a3:16:38:32:e7:4c:e4:d0:01:40:e4:
12:0b:49:e0:60:be:0e:8a:25:64:c1:ca:31:c0:c5:99:64:0f:
90:7e:87:ed:a8:bc:ed:38:ac:40:d8:ea:ad:24:03:b5:92:b3:
4a:ea:ac:9a:ff:5c:87:da:21:48:55:56:ee:1a:81:37:4c:51:
d0:cd:fa:c8:e4:ea:58:36:a0:c6:d7:5d:7d:fc:77:3e:a9:fa:
e3:6d:e9:97:fe:3f:f3:66:cb:5a:71:ec:58:53:1c:93:b1:1c:
fd:c6:37:a1:29:dc:93:b3:c5:27:fd:43:8e:fa:a6:a3:15:fa:
d6:fa:2f:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:41:37 2025 by rpki-client