Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/02f9bb-6e6a-478a-bac8-5911fe63af79/1/TeT5Z3HZH4fCG-nwDRIDJ_W78uo.mft
File: TeT5Z3HZH4fCG-nwDRIDJ_W78uo.mft (raw, json)
Hash identifier: Aj2v3g1h5hp6D9vEaEkRNU/jJoH+rLK+944J13QtBGY=
Subject key identifier: 2D:81:00:BF:2A:59:5D:AE:BC:FB:5B:83:35:73:84:14:EE:0D:3E:BC
Authority key identifier: 4D:E4:F9:67:71:D9:1F:87:C2:1B:E9:F0:0D:12:03:27:F5:BB:F2:EA
Certificate issuer: /CN=4de4f96771d91f87c21be9f00d120327f5bbf2ea
Certificate serial: 019752A1C92023C4B5603E9999B03771B91E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TeT5Z3HZH4fCG-nwDRIDJ_W78uo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/02f9bb-6e6a-478a-bac8-5911fe63af79/1/TeT5Z3HZH4fCG-nwDRIDJ_W78uo.mft
Manifest number: 147E
Signing time: Mon 09 Jun 2025 03:00:23 +0000
Manifest this update: Mon 09 Jun 2025 03:00:23 +0000
Manifest next update: Tue 10 Jun 2025 03:00:23 +0000
Files and hashes: 1: TeT5Z3HZH4fCG-nwDRIDJ_W78uo.crl (hash: X58Z51uA6KxIJpPwzUWF3li3M4fO+SWxJjAaAkL7Ncc=)
2: gLQdUENVXGMq4s0E2-s0exbZJTQ.roa (hash: qPXxxb8wbYIQ57DIruVSOJKF4C7lGWbN67ERbUHU99A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/02f9bb-6e6a-478a-bac8-5911fe63af79/1/TeT5Z3HZH4fCG-nwDRIDJ_W78uo.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/02f9bb-6e6a-478a-bac8-5911fe63af79/1/TeT5Z3HZH4fCG-nwDRIDJ_W78uo.mft
rsync://rpki.ripe.net/repository/DEFAULT/TeT5Z3HZH4fCG-nwDRIDJ_W78uo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:52:a1:c9:20:23:c4:b5:60:3e:99:99:b0:37:71:b9:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4de4f96771d91f87c21be9f00d120327f5bbf2ea
Validity
Not Before: Jun 9 03:00:23 2025 GMT
Not After : Jun 10 03:00:23 2025 GMT
Subject: CN=2d8100bf2a595daebcfb5b8335738414ee0d3ebc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:7d:18:a3:70:a5:56:2c:3c:e6:73:6d:e4:8b:
36:8a:16:de:65:80:7f:2e:03:de:92:5f:9f:90:3e:
fd:db:97:c4:81:d5:d1:f5:9e:37:d3:0a:4d:4c:a2:
7e:73:88:d7:37:13:de:f9:77:c7:77:46:95:df:ff:
2e:d3:1b:95:a7:fd:5e:db:dc:54:d4:d9:25:9a:76:
a2:31:05:92:8b:44:40:99:f9:41:cb:51:f6:4f:a2:
93:70:e3:59:71:de:c7:a8:56:71:f5:89:35:4a:62:
11:b4:1b:e3:dc:c4:20:36:53:3e:c7:df:ad:f4:3f:
55:be:aa:b5:28:cd:50:a7:6e:87:6f:2b:09:1b:45:
85:25:df:25:f4:96:d9:39:65:4f:fb:af:33:74:5e:
45:b5:b2:71:7d:92:53:90:ac:14:86:61:43:bf:7e:
5e:61:8e:01:62:92:94:59:da:b4:59:fa:bf:7c:be:
1b:98:a7:9e:52:a8:d6:89:a0:73:1a:a5:94:aa:10:
09:3a:2c:05:7e:bd:99:1b:93:84:0f:b7:8c:c7:f5:
18:49:d1:73:a8:4e:ee:43:d5:4d:69:9e:8e:57:27:
7b:f6:e5:1e:18:9c:e2:0f:ab:d0:18:81:fb:80:f6:
47:26:9a:fa:10:dc:5f:1a:d9:45:25:bf:86:64:55:
a5:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:81:00:BF:2A:59:5D:AE:BC:FB:5B:83:35:73:84:14:EE:0D:3E:BC
X509v3 Authority Key Identifier:
keyid:4D:E4:F9:67:71:D9:1F:87:C2:1B:E9:F0:0D:12:03:27:F5:BB:F2:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TeT5Z3HZH4fCG-nwDRIDJ_W78uo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/02f9bb-6e6a-478a-bac8-5911fe63af79/1/TeT5Z3HZH4fCG-nwDRIDJ_W78uo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/02f9bb-6e6a-478a-bac8-5911fe63af79/1/TeT5Z3HZH4fCG-nwDRIDJ_W78uo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:af:db:77:ba:12:40:f5:f0:29:a4:76:19:c4:b4:84:9e:bf:
22:c0:19:28:ed:4d:61:04:f8:d3:fe:b7:95:8d:65:a2:5f:1d:
04:49:d9:af:24:e2:c5:12:a2:aa:48:c7:30:5b:a8:b5:4c:e2:
c1:de:96:83:39:7a:71:75:b2:7b:86:0f:ab:bb:22:ab:cc:e6:
3e:50:44:f9:91:71:13:8a:d7:74:80:c2:90:5a:16:66:79:d1:
21:d7:42:2d:28:76:69:b5:25:3d:b5:8d:5d:df:fe:0d:0e:ef:
0c:c7:ed:e5:48:37:35:c9:dd:bc:61:23:24:39:6d:2c:eb:df:
5c:47:72:a6:f3:82:c0:1c:c2:d5:86:09:20:aa:9d:73:19:42:
b7:3d:e8:a5:b4:36:fe:fd:7d:5f:04:13:85:5f:62:8f:fd:3d:
a3:0b:68:65:9d:67:cb:9b:5b:cc:66:2a:a6:d9:8e:cd:59:2f:
db:60:d7:1c:21:35:a2:26:d0:2b:f4:de:3e:db:47:35:6e:a7:
c8:0d:4c:20:74:f4:32:fd:c4:60:9f:3d:65:9f:d7:0f:09:21:
a2:1b:c5:09:26:15:14:3f:b0:cc:2c:a0:57:0f:e0:61:11:2e:
9b:a2:78:0f:1f:44:7b:36:0a:30:7d:17:cf:2a:ba:35:5d:9e:
d8:0a:d0:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 10:25:05 2025 by rpki-client