Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.mft
File: tfGesN1I4bJJJJCLtbaEjMFnhUY.mft (raw, json)
Hash identifier: RWgp+kpYeos+lLNnRtjfVoiO0FHZrh5gOr/Fm0tq7A8=
Subject key identifier: BE:A1:71:34:E5:1A:5A:43:FF:03:4D:FD:6B:6C:7A:11:9A:22:93:AE
Authority key identifier: B5:F1:9E:B0:DD:48:E1:B2:49:24:90:8B:B5:B6:84:8C:C1:67:85:46
Certificate issuer: /CN=b5f19eb0dd48e1b24924908bb5b6848cc1678546
Certificate serial: 01974BFB7D101123E3567AB5B814DF1B89CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tfGesN1I4bJJJJCLtbaEjMFnhUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.mft
Manifest number: 157E
Signing time: Sat 07 Jun 2025 20:01:02 +0000
Manifest this update: Sat 07 Jun 2025 20:01:02 +0000
Manifest next update: Sun 08 Jun 2025 20:01:02 +0000
Files and hashes: 1: dMyCW0_TBkO1nYNBL_n11IKNaBI.roa (hash: WTKaBFp1QPSs1ROafjR4WJfZR1PRtcVHfjnPURoJWEQ=)
2: iWujOO5h_XVMHY2nSFxBko0o46E.roa (hash: hfZ0O6pRdbOdpr8hVRCYtXgEcI0jSP4lHjfs8kAt2hk=)
3: qrrQR7WuIleyYS2sO7I0VvjROUo.roa (hash: 4JE74Aq/xmpPqZIRbZrMja/xvjU3RSpM11pAC7vf4sE=)
4: tfGesN1I4bJJJJCLtbaEjMFnhUY.crl (hash: x+09vEPsYTjOp6kbdsgb++XvYazuSCd0LcZT29SJt/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.mft
rsync://rpki.ripe.net/repository/DEFAULT/tfGesN1I4bJJJJCLtbaEjMFnhUY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:fb:7d:10:11:23:e3:56:7a:b5:b8:14:df:1b:89:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5f19eb0dd48e1b24924908bb5b6848cc1678546
Validity
Not Before: Jun 7 20:01:02 2025 GMT
Not After : Jun 8 20:01:02 2025 GMT
Subject: CN=bea17134e51a5a43ff034dfd6b6c7a119a2293ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:4c:f7:7b:ba:24:4b:be:25:2c:73:b3:0b:57:
f6:9b:97:60:74:41:e6:25:e2:93:65:f7:7e:94:de:
64:89:91:41:01:b6:e8:98:9b:49:2b:cf:27:62:c7:
92:6d:66:97:9c:d1:c5:9e:e7:b1:e8:18:3a:e7:cf:
6a:3c:21:34:76:90:b3:8f:34:b3:d6:81:01:82:6f:
37:df:cb:44:3a:f4:12:dd:34:b1:6c:6f:d5:7b:cd:
3e:91:7c:81:fc:3b:f5:43:9c:2e:60:f5:da:88:b3:
4d:40:2d:e0:cb:ae:56:5d:77:28:6a:da:7c:9a:17:
22:0e:49:cb:32:3a:a3:15:b9:dd:15:be:b7:11:8c:
d2:c8:54:32:75:22:29:2c:8e:c3:7c:7a:d9:1a:a2:
55:34:97:14:d9:e1:89:11:03:8d:9f:75:47:56:ed:
8f:21:53:57:ca:3d:a9:3a:3c:1e:bc:50:c2:90:f1:
c1:7b:65:0f:d8:aa:e2:30:eb:f2:15:dd:32:e9:7d:
1b:3a:5e:77:09:df:bb:4a:21:3b:91:de:dc:c3:15:
7a:0e:28:39:a6:e5:2e:a7:a0:98:99:4c:0b:e7:fd:
51:d7:9d:3c:a9:03:a2:7b:56:5b:aa:24:3e:81:d7:
11:d2:42:f5:2a:5c:22:61:d4:ef:7a:f0:1e:41:d8:
d0:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:A1:71:34:E5:1A:5A:43:FF:03:4D:FD:6B:6C:7A:11:9A:22:93:AE
X509v3 Authority Key Identifier:
keyid:B5:F1:9E:B0:DD:48:E1:B2:49:24:90:8B:B5:B6:84:8C:C1:67:85:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tfGesN1I4bJJJJCLtbaEjMFnhUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:41:62:38:ac:6d:f3:72:df:18:bd:95:2d:bb:7f:cf:22:c5:
83:12:a2:3b:46:6c:3b:80:9b:66:e0:c8:94:2b:8b:c8:65:69:
3f:d0:a7:ae:6e:e4:5e:e1:59:1a:77:ba:f0:8d:ef:67:e0:2c:
49:4f:c4:51:57:88:0c:a1:a0:91:b9:a6:d6:1c:1d:ba:32:d8:
14:c6:fa:57:45:bd:70:57:e0:4e:78:41:f4:3f:9c:b1:1b:85:
cb:01:f7:4f:4a:55:d5:a4:ca:0e:66:43:4e:1d:ff:0a:27:ae:
0c:26:15:82:23:e9:3a:ec:64:6a:48:6e:7b:da:4f:08:54:57:
eb:48:c0:6c:7e:83:e1:ab:f0:2c:14:36:df:f5:25:d0:90:82:
8e:25:43:28:a2:2a:6e:3e:83:63:54:64:66:20:8e:31:db:5a:
19:1b:fb:ec:03:1b:32:41:38:6f:2b:5a:52:74:f2:95:8c:d6:
9f:2e:d0:d7:03:90:5f:01:ab:f9:01:ec:78:5b:74:1e:29:b8:
21:c4:66:ed:f5:30:07:b8:47:09:22:0b:92:cc:be:6e:8c:e5:
cc:8f:05:1e:35:44:8d:7f:65:f4:24:6c:60:bb:2b:09:39:d6:
25:9c:fa:59:d4:38:78:6a:7a:93:ce:93:c1:09:eb:92:34:0b:
e1:be:7f:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:20:39 2025 by rpki-client