Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/95d780-baad-4db7-beb5-454599a4d22c/1/TYqYddfQ0SvEenC37emjymTYLTI.mft
File: TYqYddfQ0SvEenC37emjymTYLTI.mft (raw, json)
Hash identifier: /RhWZ4Om3w1F7d5i1nGgFJrOL4GXkYYWJM5hdkhyMkc=
Subject key identifier: 3C:E6:76:19:55:77:D4:49:C6:3C:40:26:FA:6D:81:76:76:84:E5:7D
Authority key identifier: 4D:8A:98:75:D7:D0:D1:2B:C4:7A:70:B7:ED:E9:A3:CA:64:D8:2D:32
Certificate issuer: /CN=4d8a9875d7d0d12bc47a70b7ede9a3ca64d82d32
Certificate serial: 019748550652E3A454B470AF29B1CE67690A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TYqYddfQ0SvEenC37emjymTYLTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/95d780-baad-4db7-beb5-454599a4d22c/1/TYqYddfQ0SvEenC37emjymTYLTI.mft
Manifest number: 0BF5
Signing time: Sat 07 Jun 2025 03:00:20 +0000
Manifest this update: Sat 07 Jun 2025 03:00:20 +0000
Manifest next update: Sun 08 Jun 2025 03:00:20 +0000
Files and hashes: 1: Qkkirv8lLJuTeoHE2XBshzOic18.roa (hash: JXSnxQgZnKW02ndUqgQ4ahHIPbZr+aCryUo1lSsSpVM=)
2: TYqYddfQ0SvEenC37emjymTYLTI.crl (hash: tbgdpxELB0MSxb6u3yM1dPA2SfLZxEDrWNMA7uG9CtM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/95d780-baad-4db7-beb5-454599a4d22c/1/TYqYddfQ0SvEenC37emjymTYLTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/95d780-baad-4db7-beb5-454599a4d22c/1/TYqYddfQ0SvEenC37emjymTYLTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/TYqYddfQ0SvEenC37emjymTYLTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:55:06:52:e3:a4:54:b4:70:af:29:b1:ce:67:69:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d8a9875d7d0d12bc47a70b7ede9a3ca64d82d32
Validity
Not Before: Jun 7 03:00:20 2025 GMT
Not After : Jun 8 03:00:20 2025 GMT
Subject: CN=3ce676195577d449c63c4026fa6d81767684e57d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:3f:a4:d3:7a:f2:a3:8b:27:da:b0:e6:b0:de:
a9:44:d2:a4:80:f2:e7:1a:90:a1:5b:8d:26:68:51:
75:6b:b6:58:a9:86:75:b0:ac:c4:d0:80:e3:a1:fd:
7d:24:2e:0f:a2:84:fd:85:05:0f:39:fe:bf:42:bc:
69:34:ef:e7:64:5f:d1:46:c9:44:c6:40:4e:d5:c0:
31:0d:15:81:df:25:9d:19:07:d7:6c:6f:03:de:54:
71:66:76:94:78:4c:67:e0:e2:bd:f3:8a:73:26:2f:
35:3d:95:40:d6:d7:a3:7d:99:40:62:27:af:89:74:
c4:13:fe:19:55:78:3a:d2:4b:79:b2:43:e8:e6:18:
04:80:fa:6d:43:98:52:64:d9:73:8a:50:fb:4f:67:
fc:8d:db:19:85:43:ac:55:70:90:a7:15:17:88:32:
29:06:63:25:fb:d5:83:ec:62:b9:57:a9:c1:ed:8e:
b6:c4:0f:55:e0:5d:3e:97:3b:35:fc:b9:6a:45:06:
37:6c:ed:b3:9d:38:66:9a:1e:22:7c:8e:77:8f:d6:
f5:8e:1e:fd:6b:cd:fb:33:ec:f7:a6:dd:35:7a:fb:
b7:bc:11:a1:d4:b5:1f:2d:eb:fb:60:1e:b8:f4:89:
78:3a:3f:e5:82:d7:c3:a6:2e:fe:ea:1d:8a:5f:ce:
ce:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:E6:76:19:55:77:D4:49:C6:3C:40:26:FA:6D:81:76:76:84:E5:7D
X509v3 Authority Key Identifier:
keyid:4D:8A:98:75:D7:D0:D1:2B:C4:7A:70:B7:ED:E9:A3:CA:64:D8:2D:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TYqYddfQ0SvEenC37emjymTYLTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/95d780-baad-4db7-beb5-454599a4d22c/1/TYqYddfQ0SvEenC37emjymTYLTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/95d780-baad-4db7-beb5-454599a4d22c/1/TYqYddfQ0SvEenC37emjymTYLTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:48:40:7f:8f:3d:1a:24:31:19:64:45:b3:6b:bf:d9:2c:7e:
ca:52:59:a5:0d:ca:bd:3d:14:42:2c:43:4d:c8:dd:1b:dd:33:
2b:dd:75:b1:61:6f:d7:2f:08:ff:13:0b:b5:28:3f:5b:51:a0:
27:88:3a:24:39:ee:f7:8b:d2:23:4d:1f:03:c4:88:73:26:24:
d6:de:0a:22:33:9a:49:ed:de:6f:57:ee:78:4e:88:04:56:5e:
8e:10:e8:8c:9d:82:5b:66:98:10:25:79:00:77:0f:4a:68:fb:
9b:06:7a:9c:51:9f:b6:e9:31:61:ef:c9:4b:f5:cf:f4:57:67:
83:bd:1e:18:d6:23:65:1b:b5:b5:9d:02:8a:81:bf:1f:70:b5:
db:c5:3d:90:47:11:5b:3e:0a:b7:4b:5b:9a:35:e7:f4:09:3b:
46:54:6b:3e:bd:fc:2d:98:66:c6:fa:1a:d8:0b:96:1b:e6:4a:
08:4f:1f:5b:9f:31:ac:8b:b4:28:4e:e0:5b:6e:61:37:16:3d:
07:97:86:29:bf:f2:67:84:34:2e:e1:ac:39:05:df:55:d5:a5:
54:0d:2c:0f:b1:e8:56:f3:c1:40:18:b4:34:4f:e7:5b:14:c6:
fe:6f:44:5c:7c:e1:ca:59:10:6d:37:95:74:eb:94:15:fc:8d:
63:2f:de:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 08:23:14 2025 by rpki-client