Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/2a6eaa-e437-43bc-972e-3e3bfaa190df/1/TcvvBq0F_W5ufnsQhMsdfWXmQm8.mft
File: TcvvBq0F_W5ufnsQhMsdfWXmQm8.mft (raw, json)
Hash identifier: 7om69klYYav9xECZEAP4rquvPrL/TfU7xnf7mX3sfsk=
Subject key identifier: D6:D7:D0:91:9F:97:E3:B6:75:D1:4F:63:FF:D7:EC:04:1B:3E:72:B7
Authority key identifier: 4D:CB:EF:06:AD:05:FD:6E:6E:7E:7B:10:84:CB:1D:7D:65:E6:42:6F
Certificate issuer: /CN=4dcbef06ad05fd6e6e7e7b1084cb1d7d65e6426f
Certificate serial: 019753B4E43829AA8F45C41BF55E14E557C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TcvvBq0F_W5ufnsQhMsdfWXmQm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/2a6eaa-e437-43bc-972e-3e3bfaa190df/1/TcvvBq0F_W5ufnsQhMsdfWXmQm8.mft
Manifest number: 0F9C
Signing time: Mon 09 Jun 2025 08:00:53 +0000
Manifest this update: Mon 09 Jun 2025 08:00:53 +0000
Manifest next update: Tue 10 Jun 2025 08:00:53 +0000
Files and hashes: 1: TcvvBq0F_W5ufnsQhMsdfWXmQm8.crl (hash: 29Yq9X5KW01AzXaC0rU0kTR7ClPv5PqNTdTkSmlZyZs=)
2: WDEZ3ZaDac1rHXOITo0Y0_gA1WA.roa (hash: 2eqZynI8QAeqviBK64M0ctiXcb1WfCdmlsqvsre2oAM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/2a6eaa-e437-43bc-972e-3e3bfaa190df/1/TcvvBq0F_W5ufnsQhMsdfWXmQm8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/2a6eaa-e437-43bc-972e-3e3bfaa190df/1/TcvvBq0F_W5ufnsQhMsdfWXmQm8.mft
rsync://rpki.ripe.net/repository/DEFAULT/TcvvBq0F_W5ufnsQhMsdfWXmQm8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:53:b4:e4:38:29:aa:8f:45:c4:1b:f5:5e:14:e5:57:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dcbef06ad05fd6e6e7e7b1084cb1d7d65e6426f
Validity
Not Before: Jun 9 08:00:53 2025 GMT
Not After : Jun 10 08:00:53 2025 GMT
Subject: CN=d6d7d0919f97e3b675d14f63ffd7ec041b3e72b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:aa:08:cc:82:83:29:5e:e0:0b:32:fc:8f:2a:
de:98:c7:b7:38:fa:56:33:bd:52:7c:63:a1:29:65:
f1:79:77:19:a4:26:51:bc:43:79:32:56:df:7b:af:
94:db:84:de:21:e2:1b:ee:e0:05:79:f0:df:c4:5d:
3b:db:10:89:b2:27:ca:d9:34:95:c7:5e:8a:46:ee:
20:85:53:a1:6a:46:82:cc:8b:93:7b:dc:6b:c0:70:
a2:79:ed:9f:8a:b4:53:53:d5:10:ec:bc:0b:67:a0:
3c:d3:5c:aa:06:37:f5:d9:f4:a7:85:8a:45:b0:95:
c4:60:84:21:38:4f:08:7d:a4:50:18:54:2e:dd:2c:
f2:49:a2:f2:7f:a5:1e:4d:01:8f:1a:66:d4:ae:a3:
1c:9d:63:fe:89:dc:33:0f:ea:74:04:f5:d7:1b:b0:
88:da:23:49:17:b9:2e:46:26:d9:64:d4:a4:87:b3:
64:75:00:b4:7f:f7:dc:89:70:5e:c2:48:6e:f5:18:
77:75:19:58:8f:b4:fe:44:c2:3a:b6:1a:d4:9e:2d:
5b:64:55:b6:e6:6d:6d:22:0a:f3:9a:d4:b1:81:b7:
d1:c7:be:cc:dc:59:a1:17:f8:83:3d:38:db:8e:af:
dd:12:98:78:59:f5:64:2d:93:10:a6:f3:20:1e:dc:
f2:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:D7:D0:91:9F:97:E3:B6:75:D1:4F:63:FF:D7:EC:04:1B:3E:72:B7
X509v3 Authority Key Identifier:
keyid:4D:CB:EF:06:AD:05:FD:6E:6E:7E:7B:10:84:CB:1D:7D:65:E6:42:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TcvvBq0F_W5ufnsQhMsdfWXmQm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/2a6eaa-e437-43bc-972e-3e3bfaa190df/1/TcvvBq0F_W5ufnsQhMsdfWXmQm8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/2a6eaa-e437-43bc-972e-3e3bfaa190df/1/TcvvBq0F_W5ufnsQhMsdfWXmQm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:ec:08:25:62:0f:c8:bd:4b:73:25:1c:94:64:78:0f:41:a3:
d3:73:2c:2f:7b:76:cd:9c:05:8b:8e:9a:ed:27:bb:87:38:61:
80:ef:cb:ba:57:f9:31:8b:f7:0c:da:bd:d7:f6:33:d1:8d:95:
2a:c4:01:88:65:e2:71:16:01:3e:54:af:8c:4b:7b:bd:ba:47:
6b:3d:d4:f4:d3:04:cf:6e:0d:08:ce:d0:a4:36:73:3f:1c:90:
9d:e1:a1:00:6a:13:88:20:ef:de:3e:f0:0b:d5:40:1d:35:2b:
af:22:f9:d2:64:60:0c:18:f4:2b:c8:fe:27:56:f6:0a:6a:2d:
fb:b8:bb:79:f5:33:bc:90:a5:c1:60:03:6b:0f:7b:ce:3c:47:
12:ef:48:e2:e0:97:78:df:6f:80:f1:dd:a8:a9:fa:ba:57:38:
b9:59:24:a3:c7:3f:cc:b5:81:44:e5:d5:83:ef:89:8f:ff:f5:
99:73:d4:04:2c:a6:21:1d:23:a1:28:2e:46:d9:e1:aa:f7:58:
d3:a3:76:de:28:a4:ee:39:5e:2e:c2:dc:5a:03:3d:c0:84:71:
1f:25:19:2c:e7:64:b0:24:29:45:aa:dd:93:5b:55:dd:1c:23:
59:04:70:30:6d:72:63:e9:77:15:1c:b8:56:ee:4b:bc:dc:9e:
35:88:ab:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 11:20:31 2025 by rpki-client