Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/b8e5c4-38eb-445f-b036-c37790e6d482/1/Tu9qrm-6XGGmFzmvyrVaYiZuie4.mft
File: Tu9qrm-6XGGmFzmvyrVaYiZuie4.mft (raw, json)
Hash identifier: hgcKxvNewS2WlNav7PGwiqety62X6UW8knzjemXiWGQ=
Subject key identifier: FF:BD:0F:CE:E2:34:27:95:6C:78:8F:13:11:06:9B:5A:FA:66:23:F7
Authority key identifier: 4E:EF:6A:AE:6F:BA:5C:61:A6:17:39:AF:CA:B5:5A:62:26:6E:89:EE
Certificate issuer: /CN=4eef6aae6fba5c61a61739afcab55a62266e89ee
Certificate serial: 019754FE5181E072D659B67AF275C5A10D0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tu9qrm-6XGGmFzmvyrVaYiZuie4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e5c4-38eb-445f-b036-c37790e6d482/1/Tu9qrm-6XGGmFzmvyrVaYiZuie4.mft
Manifest number: 157B
Signing time: Mon 09 Jun 2025 14:00:42 +0000
Manifest this update: Mon 09 Jun 2025 14:00:42 +0000
Manifest next update: Tue 10 Jun 2025 14:00:42 +0000
Files and hashes: 1: EsNde2nZ0dUcA8Xoq5-tHg_EXc8.roa (hash: EuB6IqBcAAWKbULQ1dsjzb0/Ucv72mc0J9mJsdHmCGA=)
2: Tu9qrm-6XGGmFzmvyrVaYiZuie4.crl (hash: 91ZUe++1N/TXALCbhvYU4j+ywUFgwAviFpI0Ict+4xo=)
3: eUaNjbQ13AL_bdj9OsodbJhievk.roa (hash: vqTtUX/Z4j6GrRJo/zNXECftqpV9YIa2rqV3Ge4NXvs=)
4: occ86qiOIs73r7C894le5tLORUc.roa (hash: vjqBb3FygjXd34w4UXc66ToikB55Yx9gYxFBgH7Uvw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e5c4-38eb-445f-b036-c37790e6d482/1/Tu9qrm-6XGGmFzmvyrVaYiZuie4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e5c4-38eb-445f-b036-c37790e6d482/1/Tu9qrm-6XGGmFzmvyrVaYiZuie4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tu9qrm-6XGGmFzmvyrVaYiZuie4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 14:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:54:fe:51:81:e0:72:d6:59:b6:7a:f2:75:c5:a1:0d:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4eef6aae6fba5c61a61739afcab55a62266e89ee
Validity
Not Before: Jun 9 14:00:42 2025 GMT
Not After : Jun 10 14:00:42 2025 GMT
Subject: CN=ffbd0fcee23427956c788f1311069b5afa6623f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c6:36:f7:43:68:3a:d8:b9:7f:c0:45:8a:cf:
6a:da:a5:27:41:f9:ae:f7:2c:7d:c7:34:06:db:6f:
d6:19:89:47:e2:99:cd:ea:7f:0c:28:d4:17:37:c6:
5b:c3:98:9e:42:59:f3:7b:dc:c9:34:c3:8b:71:53:
ce:89:64:66:72:a5:79:d9:71:61:f6:e8:53:81:f0:
9a:8a:30:48:9c:42:2e:58:7a:da:32:8f:0d:8b:1c:
26:49:37:70:cb:d6:c5:63:76:44:3f:78:2c:2e:6d:
d2:34:5f:ba:2a:91:62:74:16:56:f7:cd:83:cb:6f:
57:be:ed:2a:ba:6d:c3:27:d3:bd:b5:3c:28:c7:22:
2e:3f:48:3b:97:f8:c0:cc:1c:65:a7:ed:27:1f:b3:
98:ff:bf:e0:e4:59:cb:7a:04:89:52:39:ac:c5:65:
ea:4c:74:1f:ed:86:b9:76:67:78:60:f1:db:e2:18:
74:af:bb:7d:81:d1:45:28:58:d1:5c:98:ef:ac:95:
ba:4a:4b:6c:b4:33:a9:3e:43:c9:78:55:8d:bd:4c:
ba:fc:08:e9:0b:44:7e:56:62:70:d5:87:9d:96:0b:
e9:17:19:a0:c5:a1:c5:5b:ae:ac:37:af:2c:56:15:
4b:4c:df:50:0b:2b:45:6b:5d:cf:c9:bc:28:4f:32:
54:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:BD:0F:CE:E2:34:27:95:6C:78:8F:13:11:06:9B:5A:FA:66:23:F7
X509v3 Authority Key Identifier:
keyid:4E:EF:6A:AE:6F:BA:5C:61:A6:17:39:AF:CA:B5:5A:62:26:6E:89:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tu9qrm-6XGGmFzmvyrVaYiZuie4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e5c4-38eb-445f-b036-c37790e6d482/1/Tu9qrm-6XGGmFzmvyrVaYiZuie4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e5c4-38eb-445f-b036-c37790e6d482/1/Tu9qrm-6XGGmFzmvyrVaYiZuie4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:4e:ec:ac:72:4d:9d:6c:27:3a:ba:99:27:9d:49:d9:3d:e4:
b1:a2:f8:1b:5d:11:da:8c:47:dd:d0:91:43:76:a7:d9:87:1e:
90:d9:2a:25:f0:f5:b9:ef:c4:ab:a9:06:1d:9e:05:7b:de:3a:
de:7f:c8:b1:6e:a0:dc:d5:b3:b3:7a:7f:1f:ad:63:9c:ce:52:
b3:f9:5b:4f:92:f5:e8:cf:e6:66:d6:a8:1c:32:1e:00:94:dc:
00:2c:d2:65:fd:15:5d:ba:86:5a:04:d9:b1:c3:82:25:3a:95:
28:d3:6d:ca:b7:30:d5:05:32:e8:4f:8d:6b:2f:50:13:f5:ea:
b0:da:b3:50:c1:3f:82:27:df:59:d1:e3:5b:0b:54:f9:cc:db:
93:07:fa:c3:59:7d:69:14:ca:26:d1:50:48:9b:9f:3b:e0:c3:
05:3a:ee:b3:0d:1e:de:2f:12:bf:cf:7b:45:bf:5c:0f:0b:88:
47:4b:9f:f2:72:3d:d1:50:00:30:aa:4e:51:0d:d0:d4:b3:4d:
a1:39:e2:d6:7b:e4:63:2a:58:18:d9:d1:b9:49:02:c8:2c:6f:
e7:c9:d8:32:3a:b4:a0:aa:c5:dd:99:87:31:92:60:58:e1:45:
ca:e8:76:8e:e0:a4:48:ac:f8:b8:b2:70:12:76:4e:dc:85:c2:
7b:59:e0:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 00:17:43 2025 by rpki-client