Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/3182ce-9d2f-4b22-abcd-acd9a2eca33f/1/tAyVhnwwhMTBai_rtGZRCQ8yR-Q.mft
File: tAyVhnwwhMTBai_rtGZRCQ8yR-Q.mft (raw, json)
Hash identifier: a+VwooEKXxGWL0ElLQq6w6lYnAjv0H/wARrFP0Vdc78=
Subject key identifier: D8:00:71:71:F1:D1:88:37:3A:AE:9B:F8:46:C5:41:C5:57:62:94:D9
Authority key identifier: B4:0C:95:86:7C:30:84:C4:C1:6A:2F:EB:B4:66:51:09:0F:32:47:E4
Certificate issuer: /CN=b40c95867c3084c4c16a2febb46651090f3247e4
Certificate serial: 019766CDD8C5E2C60577C079D271F6176B67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tAyVhnwwhMTBai_rtGZRCQ8yR-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/3182ce-9d2f-4b22-abcd-acd9a2eca33f/1/tAyVhnwwhMTBai_rtGZRCQ8yR-Q.mft
Manifest number: 0C09
Signing time: Fri 13 Jun 2025 01:00:55 +0000
Manifest this update: Fri 13 Jun 2025 01:00:55 +0000
Manifest next update: Sat 14 Jun 2025 01:00:55 +0000
Files and hashes: 1: lEEZzzybqBVZbE52j1UTaBha8S8.roa (hash: M0ghNe8I1TZs4KtvQ8xKIi7A+x2ciHjaRyld8EsOpko=)
2: tAyVhnwwhMTBai_rtGZRCQ8yR-Q.crl (hash: P4ZCt/YPrZoCAhcmViZNvWRB1FEPM2J9mT/mLXMWLAM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/3182ce-9d2f-4b22-abcd-acd9a2eca33f/1/tAyVhnwwhMTBai_rtGZRCQ8yR-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/3182ce-9d2f-4b22-abcd-acd9a2eca33f/1/tAyVhnwwhMTBai_rtGZRCQ8yR-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/tAyVhnwwhMTBai_rtGZRCQ8yR-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 22:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:66:cd:d8:c5:e2:c6:05:77:c0:79:d2:71:f6:17:6b:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b40c95867c3084c4c16a2febb46651090f3247e4
Validity
Not Before: Jun 13 01:00:55 2025 GMT
Not After : Jun 14 01:00:55 2025 GMT
Subject: CN=d8007171f1d188373aae9bf846c541c5576294d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:90:a9:cc:21:d0:e9:b7:21:cb:6f:e2:f1:9c:
66:d1:4c:11:78:19:03:b2:ca:05:cf:41:d1:2c:dc:
ee:62:10:59:7b:f0:12:ac:c0:aa:a5:6a:62:06:35:
c3:7f:1e:6c:49:94:50:b3:2c:c4:12:69:7a:ce:fd:
ee:af:91:8f:56:45:04:8e:33:de:57:3d:9f:52:96:
62:de:c6:b8:95:3f:15:1f:a3:77:c4:35:06:87:74:
96:c1:66:03:d5:9f:22:3e:a3:43:13:24:5c:b1:80:
c9:5b:5e:5e:3c:69:46:4b:20:4a:51:1e:de:60:38:
8a:4a:7f:4f:c4:c7:cb:7e:00:2a:e7:bf:79:08:d3:
18:1f:72:b3:03:7c:73:05:a0:85:b9:bc:a0:6b:d7:
7e:da:da:75:1f:6f:1d:60:a1:87:9c:20:ba:ca:75:
7a:16:f9:04:16:76:0b:1b:14:85:fc:40:af:7d:c2:
1e:83:88:48:f3:c5:ba:b2:6b:f7:d4:3a:c8:0b:95:
32:69:d5:fc:07:9e:e6:76:65:5e:85:65:93:e0:c2:
83:d0:7b:b9:66:88:7a:a4:79:8e:08:0b:42:94:d7:
8b:15:03:83:d6:56:fc:a1:5f:b9:21:79:7b:c3:54:
5b:30:94:c3:45:74:08:94:16:88:35:b4:83:81:59:
1a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:00:71:71:F1:D1:88:37:3A:AE:9B:F8:46:C5:41:C5:57:62:94:D9
X509v3 Authority Key Identifier:
keyid:B4:0C:95:86:7C:30:84:C4:C1:6A:2F:EB:B4:66:51:09:0F:32:47:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tAyVhnwwhMTBai_rtGZRCQ8yR-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/3182ce-9d2f-4b22-abcd-acd9a2eca33f/1/tAyVhnwwhMTBai_rtGZRCQ8yR-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/3182ce-9d2f-4b22-abcd-acd9a2eca33f/1/tAyVhnwwhMTBai_rtGZRCQ8yR-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:86:20:0f:91:06:db:22:3a:88:52:5a:49:8b:bf:d0:b6:25:
85:2a:ba:08:33:5d:c2:96:cb:a9:c0:fb:f2:28:f6:99:29:6b:
1b:73:87:c7:7c:2e:4b:7a:7b:b3:a1:51:09:2b:4e:19:41:91:
17:9f:f5:a1:39:20:c3:a4:b2:d5:83:28:89:a0:f4:90:53:87:
a4:1c:f4:40:b1:ec:ac:d7:9b:9f:44:d6:30:de:d8:3d:59:64:
a4:69:42:15:61:4d:b1:8f:68:fa:2f:56:8e:11:ec:ba:2d:53:
7b:ea:33:7e:6c:7b:68:34:90:8e:49:5f:a2:23:f1:f5:4b:62:
34:0f:4b:24:0e:2c:98:cc:b7:9e:5a:e3:f3:2e:51:d2:4c:48:
93:7c:2e:6c:04:84:5d:a2:6d:3b:78:30:7f:8d:52:40:8d:e3:
7c:96:80:7a:ec:d6:ac:d0:3d:a2:74:67:ba:6b:03:a1:2a:58:
f9:5a:a7:0a:bb:92:95:d1:96:72:1a:64:b5:75:e2:98:e9:bc:
cf:5e:14:3c:95:2b:b8:3c:b1:54:b1:89:70:9d:a7:d4:e9:fb:
5f:50:c5:8e:be:cf:18:10:b3:42:67:7f:de:ee:08:c2:a4:56:
75:c3:89:4a:69:53:49:d0:0b:9d:28:04:0a:76:93:3a:57:35:
82:c1:0b:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 06:52:16 2025 by rpki-client