Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e4d903-5baa-4341-9392-a3e481fb51b9/1/t_bDO_udlL0PdKc45_FtDp2gw7k.mft
File: t_bDO_udlL0PdKc45_FtDp2gw7k.mft (raw, json)
Hash identifier: m/qy5FjOEkb/lxp4O863aXpMlPpCKDLU38PehuHS2Ac=
Subject key identifier: 06:C2:50:CD:1E:CC:9D:A5:55:EE:E4:1E:BB:D8:15:B6:11:C8:8F:27
Authority key identifier: B7:F6:C3:3B:FB:9D:94:BD:0F:74:A7:38:E7:F1:6D:0E:9D:A0:C3:B9
Certificate issuer: /CN=b7f6c33bfb9d94bd0f74a738e7f16d0e9da0c3b9
Certificate serial: 01975FB8E514578318AA9BC726D982AA6C6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t_bDO_udlL0PdKc45_FtDp2gw7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e4d903-5baa-4341-9392-a3e481fb51b9/1/t_bDO_udlL0PdKc45_FtDp2gw7k.mft
Manifest number: 1559
Signing time: Wed 11 Jun 2025 16:00:41 +0000
Manifest this update: Wed 11 Jun 2025 16:00:41 +0000
Manifest next update: Thu 12 Jun 2025 16:00:41 +0000
Files and hashes: 1: dQipKZolIhGkhWFJoygF3CDiTvg.roa (hash: +eA96uDNL0C8CyvGH+7b3dtqwE+sSbn83k1fDZzMPtg=)
2: t_bDO_udlL0PdKc45_FtDp2gw7k.crl (hash: n2L0oNuSRaEyfPBfD3THdyWoampeUYPL7NKSL6Y89fQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/e4d903-5baa-4341-9392-a3e481fb51b9/1/t_bDO_udlL0PdKc45_FtDp2gw7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/e4d903-5baa-4341-9392-a3e481fb51b9/1/t_bDO_udlL0PdKc45_FtDp2gw7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/t_bDO_udlL0PdKc45_FtDp2gw7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 15:40:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5f:b8:e5:14:57:83:18:aa:9b:c7:26:d9:82:aa:6c:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7f6c33bfb9d94bd0f74a738e7f16d0e9da0c3b9
Validity
Not Before: Jun 11 16:00:41 2025 GMT
Not After : Jun 12 16:00:41 2025 GMT
Subject: CN=06c250cd1ecc9da555eee41ebbd815b611c88f27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:fc:3f:56:f4:eb:50:d6:03:a2:97:15:18:20:
0b:7b:52:ee:28:17:c7:e7:bd:d4:46:40:49:8e:5d:
4f:fa:f9:ab:0a:cc:76:16:d0:49:e9:74:7d:ca:95:
47:6d:fb:08:2b:85:7c:25:1a:8c:e7:de:fc:09:8c:
02:c8:ec:e6:92:55:6b:60:3c:a5:cc:97:d8:50:92:
90:4a:1f:b5:5b:cb:68:02:3c:c4:aa:ea:00:1f:25:
39:1b:aa:5a:36:8f:d3:03:2e:ab:59:ef:b3:32:9d:
eb:6e:18:ad:a9:d0:71:60:ca:56:6e:73:5d:05:6f:
f1:c5:e2:66:30:60:0a:45:9f:2f:ce:da:71:9b:cd:
97:61:74:cc:64:97:a5:49:99:3c:fe:d5:e6:cf:fb:
ab:a5:60:85:a2:fc:dc:79:b8:4b:a5:f2:d9:c6:66:
fc:ed:40:bf:e6:db:29:ca:7e:f8:e7:95:40:44:77:
7b:16:d1:00:95:d6:05:48:9b:f2:d9:a0:00:57:9c:
94:ac:ea:dc:08:df:3f:c2:26:08:75:38:3f:f1:35:
8f:7b:57:50:dc:41:c0:f1:79:ed:c4:99:92:45:cb:
c6:01:f0:85:90:96:79:ce:71:71:91:2b:99:ce:26:
3c:cc:ed:2d:68:da:14:de:a0:bf:85:18:ba:9d:8c:
96:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:C2:50:CD:1E:CC:9D:A5:55:EE:E4:1E:BB:D8:15:B6:11:C8:8F:27
X509v3 Authority Key Identifier:
keyid:B7:F6:C3:3B:FB:9D:94:BD:0F:74:A7:38:E7:F1:6D:0E:9D:A0:C3:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t_bDO_udlL0PdKc45_FtDp2gw7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e4d903-5baa-4341-9392-a3e481fb51b9/1/t_bDO_udlL0PdKc45_FtDp2gw7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e4d903-5baa-4341-9392-a3e481fb51b9/1/t_bDO_udlL0PdKc45_FtDp2gw7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:fa:89:19:15:91:68:af:12:23:cc:0d:57:43:e8:34:7e:25:
f5:a0:48:aa:64:e9:37:b7:ae:a8:5c:76:8f:b1:18:43:39:06:
55:bd:f3:dd:2b:e9:ec:07:8f:e4:2c:b2:41:3f:e6:c2:3e:da:
94:2b:70:0b:6a:eb:f7:0d:6c:d0:d8:a8:57:18:b3:44:e4:05:
6c:af:ba:99:cf:36:aa:f5:23:89:87:04:8b:23:7a:30:11:87:
95:4a:95:84:7b:fb:8c:c2:a5:fe:23:93:7b:01:f4:54:a7:05:
05:f0:29:c2:41:39:0f:dc:9a:b2:a5:66:03:24:da:36:21:64:
33:dc:0a:98:97:54:a4:ab:da:10:2a:3e:89:7f:b7:07:77:4f:
65:94:c0:29:e9:db:bb:41:99:12:97:c8:a0:0d:e8:36:c2:74:
9c:e8:9e:44:dd:e6:29:58:27:c0:18:aa:08:3f:4a:f5:14:c6:
45:aa:2b:47:37:a7:e1:76:c8:e2:6a:71:2f:45:6d:67:fd:b8:
3e:71:43:6a:57:17:6a:3b:ca:6d:a9:d4:50:b8:54:fa:70:6f:
60:bb:f8:84:15:a4:09:a4:92:58:d1:94:00:5a:95:1c:29:5d:
3f:45:77:c6:f6:fe:af:98:5b:c0:96:62:72:6f:d3:06:e0:39:
d3:42:1c:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 21:11:08 2025 by rpki-client