Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/e6f13e-ebeb-4e26-9f91-8183751813d9/1/tTsKRfBg4Q7M8Sa29mdYm4AyjJU.mft
File: tTsKRfBg4Q7M8Sa29mdYm4AyjJU.mft (raw, json)
Hash identifier: YXEiDi19+65bBcI6EKmwFe0zjfvVL89lHPZ/Nt3ie1o=
Subject key identifier: 7E:04:F4:AB:75:F6:A7:92:C8:BB:C6:F6:0C:DE:1F:70:49:A0:DD:94
Authority key identifier: B5:3B:0A:45:F0:60:E1:0E:CC:F1:26:B6:F6:67:58:9B:80:32:8C:95
Certificate issuer: /CN=b53b0a45f060e10eccf126b6f667589b80328c95
Certificate serial: 0197499EF67B70A6314CBDBBC9A469A9B6D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tTsKRfBg4Q7M8Sa29mdYm4AyjJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/e6f13e-ebeb-4e26-9f91-8183751813d9/1/tTsKRfBg4Q7M8Sa29mdYm4AyjJU.mft
Manifest number: 0F78
Signing time: Sat 07 Jun 2025 09:00:43 +0000
Manifest this update: Sat 07 Jun 2025 09:00:43 +0000
Manifest next update: Sun 08 Jun 2025 09:00:43 +0000
Files and hashes: 1: QmuYhMxVHMJMwyzvnCygHs-m3Zo.roa (hash: /n3/bE2lrLZKCXuOWQR91nGS2U+GVup7q9CGUuChZsQ=)
2: tTsKRfBg4Q7M8Sa29mdYm4AyjJU.crl (hash: K7fDh4H6c4pcfiz2gmGYdCYVPbsEsg3udEA3ZsAbpgk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/e6f13e-ebeb-4e26-9f91-8183751813d9/1/tTsKRfBg4Q7M8Sa29mdYm4AyjJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/e6f13e-ebeb-4e26-9f91-8183751813d9/1/tTsKRfBg4Q7M8Sa29mdYm4AyjJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tTsKRfBg4Q7M8Sa29mdYm4AyjJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:9e:f6:7b:70:a6:31:4c:bd:bb:c9:a4:69:a9:b6:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b53b0a45f060e10eccf126b6f667589b80328c95
Validity
Not Before: Jun 7 09:00:43 2025 GMT
Not After : Jun 8 09:00:43 2025 GMT
Subject: CN=7e04f4ab75f6a792c8bbc6f60cde1f7049a0dd94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:2d:4f:d5:64:cf:28:32:7b:fe:e1:17:60:1f:
e1:cc:b1:2e:94:c6:20:17:dc:0f:1d:80:ac:1a:b7:
27:08:15:f1:bf:d2:0b:77:f7:e5:f6:6d:2f:3d:96:
99:11:8b:e4:e4:97:d3:69:88:e6:fa:14:f8:de:61:
a4:20:c6:71:21:e7:55:09:c5:cd:84:0d:ad:f2:81:
92:f3:e1:1d:29:0c:b8:72:1c:23:83:a1:09:48:c1:
9c:32:0e:c1:cb:09:56:cc:4b:ac:1d:7f:27:ec:95:
30:2f:30:2b:f2:b6:b9:41:03:24:e4:16:5d:33:2b:
0e:54:5e:9f:d8:69:26:82:73:07:91:84:21:6c:f1:
08:da:9e:70:87:09:73:50:94:66:79:b4:b7:59:2e:
69:e3:1e:53:49:de:d5:29:df:66:d3:b3:97:4b:cc:
47:e7:a1:9f:c9:5e:42:30:38:02:be:53:21:b9:a6:
92:5a:50:19:85:0b:26:57:75:3b:a4:78:a9:e7:03:
32:a5:f1:19:d3:3e:bf:01:13:51:cc:69:8e:2b:f6:
81:e0:39:77:64:16:22:a2:7c:e3:13:f6:9c:1b:b1:
e3:ad:29:63:4f:61:e8:2f:98:44:ef:d8:ca:33:57:
47:21:2b:cf:6e:29:4b:d5:e4:0f:04:3a:bd:6a:93:
a1:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:04:F4:AB:75:F6:A7:92:C8:BB:C6:F6:0C:DE:1F:70:49:A0:DD:94
X509v3 Authority Key Identifier:
keyid:B5:3B:0A:45:F0:60:E1:0E:CC:F1:26:B6:F6:67:58:9B:80:32:8C:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tTsKRfBg4Q7M8Sa29mdYm4AyjJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e6f13e-ebeb-4e26-9f91-8183751813d9/1/tTsKRfBg4Q7M8Sa29mdYm4AyjJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e6f13e-ebeb-4e26-9f91-8183751813d9/1/tTsKRfBg4Q7M8Sa29mdYm4AyjJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:c2:9d:6e:01:4c:e0:48:c5:1b:29:23:57:19:41:c3:91:8b:
b4:8c:37:d8:70:aa:43:03:20:f3:8f:a1:b8:d0:59:b1:5d:cb:
4b:ba:37:39:a8:df:04:08:9a:a7:3f:e4:23:6d:d2:73:a6:11:
29:35:89:d9:08:01:f2:ce:12:bb:80:6b:4d:06:3f:8b:da:40:
e7:68:c1:ab:8a:55:d2:fa:c6:93:d5:92:dd:59:26:ba:e7:41:
5c:6d:00:e7:aa:d6:9d:e4:73:3c:cb:f6:b4:0d:20:81:47:71:
ad:7b:54:2e:29:71:90:07:68:d1:04:ea:01:18:97:27:0a:d2:
d2:1a:76:58:4f:6e:53:49:ed:ec:f3:0e:e1:66:fc:c3:73:74:
7e:1a:ac:aa:96:a3:0a:e9:79:38:46:51:38:a3:62:e0:7a:1b:
88:83:db:ce:60:fe:bf:dd:a2:04:e5:37:05:11:32:3d:24:45:
5d:56:ef:9f:b0:e2:38:fc:52:c6:ed:7b:dc:e5:4d:46:ca:88:
1f:91:b3:a7:15:1f:46:04:48:0e:70:94:98:5a:7a:af:af:47:
3e:04:79:54:07:32:ca:3c:5f:c3:6e:86:ac:61:50:6e:d4:3d:
2e:6a:9e:73:fd:50:3d:64:38:1b:3a:45:c7:21:09:f6:76:bf:
31:a8:28:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 12:30:38 2025 by rpki-client