Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.mft
File: TahNJHzjfNzPBuFXHSJqK4Vne80.mft (raw, json)
Hash identifier: 72Z9km7IyaD2FNFfbmA2CRLv1fLPCalOFPI1IaLHX70=
Subject key identifier: 11:AC:82:98:D2:40:B9:1A:5F:DF:E9:EC:1B:F7:CE:E2:EE:F0:6D:4A
Authority key identifier: 4D:A8:4D:24:7C:E3:7C:DC:CF:06:E1:57:1D:22:6A:2B:85:67:7B:CD
Certificate issuer: /CN=4da84d247ce37cdccf06e1571d226a2b85677bcd
Certificate serial: 019748C3696F062B31C84C0E805327FB075C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TahNJHzjfNzPBuFXHSJqK4Vne80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.mft
Manifest number: 1595
Signing time: Sat 07 Jun 2025 05:00:55 +0000
Manifest this update: Sat 07 Jun 2025 05:00:55 +0000
Manifest next update: Sun 08 Jun 2025 05:00:55 +0000
Files and hashes: 1: 5Tj38Bsn0hJUYrmVNSahq5IYxas.roa (hash: GZ7T7PHhO62jK4WQFKNvOrwYNZYOPPS6icOBzwnz7nI=)
2: Dn1x9nqC0rA_VncF-BuvaeIn_Yc.roa (hash: HSjxAg+X+QFqjbXeKMYZbr1j8n6ewv+Jo99Iqhyk6hE=)
3: IhsNkpEObyOhrdScw0XLGeqSfjU.roa (hash: cYBkSPS8A7jki3ADlXunYLfb3jaAdvC2BeR0D6SyyQw=)
4: NGPkgc-gMBPWvfnpR_WESooqffM.roa (hash: h7f13JmtNSfs0kxRIebuhHcsUGxQLBWtTWJQue5vIeg=)
5: RLeyW7lqx5hu9s9VIH-LZ4c9FSQ.roa (hash: 8qkFZX4fO9IGCK+/hjULowdb/hcL+0qKwz4xQec6iUE=)
6: TahNJHzjfNzPBuFXHSJqK4Vne80.crl (hash: TZL+ReIjjMvRSeuuKnLxVNrnVIhs/ib2RBaEdOl3sMo=)
7: lRLrr8PrmpyLA1Ah6iT6M53B97s.roa (hash: KztLb5hpOs++pyJMXHsFQs+/mWS279OT4VXn2Nei8oY=)
8: pmDvMLO2RE0O4Ex_JrEkUC8Orjc.roa (hash: EobRSKgdMhfP9qw1zU6ZKGGyelmEJlJ7Zo4kdI4/8FI=)
9: sTgj5gtBXlZvbQkuD303wv14ZJM.roa (hash: 2lGTVGTpWSlL4AKzK4tCKidrFOFRYmSZ+Qh+p4OiuBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.mft
rsync://rpki.ripe.net/repository/DEFAULT/TahNJHzjfNzPBuFXHSJqK4Vne80.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 05:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:c3:69:6f:06:2b:31:c8:4c:0e:80:53:27:fb:07:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4da84d247ce37cdccf06e1571d226a2b85677bcd
Validity
Not Before: Jun 7 05:00:55 2025 GMT
Not After : Jun 8 05:00:55 2025 GMT
Subject: CN=11ac8298d240b91a5fdfe9ec1bf7cee2eef06d4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:32:49:73:28:f9:39:9f:89:75:c7:47:7c:a0:
ae:25:13:7a:4d:06:dd:7e:78:07:04:2d:a6:bc:cc:
d8:ff:d4:33:48:e5:d3:cd:ed:6f:03:91:85:f5:b7:
37:6f:b2:55:40:03:46:d7:cf:5b:2d:67:73:a8:da:
6a:04:bc:4c:43:76:a1:b2:db:31:5e:b0:83:42:64:
ac:62:78:c3:2a:16:65:10:d6:a4:4f:ea:9c:07:5a:
a9:98:4f:22:72:15:a8:6c:bd:57:a9:f6:2a:04:c1:
e4:51:60:ea:e5:9f:21:13:ca:39:72:91:93:68:cd:
d8:ad:d2:a8:d9:f5:a3:b7:fd:99:be:c7:48:5d:42:
ab:c4:a3:c8:2c:2c:f0:6f:27:d7:d8:29:ef:a0:6f:
6a:47:6a:32:76:35:d0:1a:58:40:d5:19:07:2b:5f:
c0:ce:de:f6:89:57:f6:69:59:b5:d7:69:ac:cb:91:
c8:34:48:35:5d:ba:78:c5:14:e2:19:b4:bf:d9:cc:
c9:8a:f0:06:41:76:bb:a2:86:e8:04:51:5d:a3:f6:
b0:0f:30:87:8a:e7:32:52:9e:38:62:16:03:f2:62:
9d:3c:26:4a:bf:82:c9:b8:f7:7a:35:3e:f1:01:da:
6e:c7:a7:fd:27:3a:cb:82:10:06:c4:10:86:1c:d0:
5e:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:AC:82:98:D2:40:B9:1A:5F:DF:E9:EC:1B:F7:CE:E2:EE:F0:6D:4A
X509v3 Authority Key Identifier:
keyid:4D:A8:4D:24:7C:E3:7C:DC:CF:06:E1:57:1D:22:6A:2B:85:67:7B:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TahNJHzjfNzPBuFXHSJqK4Vne80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:fc:ea:07:48:0e:e8:bf:bf:8a:e2:92:c6:b2:81:7c:80:4f:
da:39:71:03:94:14:19:d7:66:57:e2:3f:07:8f:67:97:d9:07:
27:ee:f8:f6:be:18:fb:73:b3:58:5b:94:2b:16:4f:62:4c:80:
19:d8:37:26:b6:a7:77:3b:b4:6a:23:5d:12:2b:62:ca:fd:65:
58:32:45:9c:8d:60:38:2f:9d:16:41:d6:ec:43:07:ae:ed:3e:
b3:54:12:8d:32:f2:86:b1:df:da:e2:ef:87:32:16:62:b8:60:
0f:9c:2c:4a:c6:18:06:49:fe:5b:a5:c9:16:b3:40:16:2e:4b:
96:62:5b:41:20:9d:8d:34:c6:2f:24:4f:69:e8:39:15:da:14:
e3:4c:c0:3d:20:33:6b:fd:71:3c:8a:8f:78:77:2d:82:87:e6:
a0:31:f7:bd:91:c5:37:22:f2:97:0e:22:e0:0b:03:a5:74:f8:
ef:f3:2c:7a:ab:1d:39:f1:ed:43:66:61:b0:3c:64:48:8b:cf:
92:18:86:2e:2a:dc:9e:64:6e:1e:73:ea:b7:d7:8a:e1:c0:ee:
be:cd:0d:45:b0:74:0b:6b:18:81:f6:e7:74:9a:37:ba:98:13:
06:60:ae:a5:99:14:6c:b7:f0:ff:7c:75:e5:ce:77:f0:99:f0:
73:7e:84:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:12:25 2025 by rpki-client