Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/T9ZkbJPCl0eJ7O97REZW7mQWFyk.mft
File: T9ZkbJPCl0eJ7O97REZW7mQWFyk.mft (raw, json)
Hash identifier: U9/D27PCcMXUYoR+o8QfBUdNHrbxM65IMYRkkwFwNxQ=
Subject key identifier: 2B:2D:67:96:66:F9:A9:DC:03:77:15:21:5E:AA:AF:D2:4A:10:ED:2A
Authority key identifier: 4F:D6:64:6C:93:C2:97:47:89:EC:EF:7B:44:46:56:EE:64:16:17:29
Certificate issuer: /CN=4fd6646c93c2974789ecef7b444656ee64161729
Certificate serial: 01974DB25FF5F30FC9ECA11A831FC67C2925
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T9ZkbJPCl0eJ7O97REZW7mQWFyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/T9ZkbJPCl0eJ7O97REZW7mQWFyk.mft
Manifest number: 157E
Signing time: Sun 08 Jun 2025 04:00:24 +0000
Manifest this update: Sun 08 Jun 2025 04:00:24 +0000
Manifest next update: Mon 09 Jun 2025 04:00:24 +0000
Files and hashes: 1: HSxOpF8LeaRif88_oEZ4y7MBldM.roa (hash: n8DGCpnE1FwgPJK7R+0dK8cIDb4XdG2XSYHd7OuwJKU=)
2: T9ZkbJPCl0eJ7O97REZW7mQWFyk.crl (hash: QyNxejkRjUDTnWXcn6jAFscVvvAgrf9xa3E76XofPkY=)
3: W44szkVz920V6-JywE9vsVlLyvY.roa (hash: CydWhda8ET4rgRmemVZtuScSzfI/qh7Sm6ASW7UNUoE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/T9ZkbJPCl0eJ7O97REZW7mQWFyk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/T9ZkbJPCl0eJ7O97REZW7mQWFyk.mft
rsync://rpki.ripe.net/repository/DEFAULT/T9ZkbJPCl0eJ7O97REZW7mQWFyk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:b2:5f:f5:f3:0f:c9:ec:a1:1a:83:1f:c6:7c:29:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fd6646c93c2974789ecef7b444656ee64161729
Validity
Not Before: Jun 8 04:00:24 2025 GMT
Not After : Jun 9 04:00:24 2025 GMT
Subject: CN=2b2d679666f9a9dc037715215eaaafd24a10ed2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d1:e2:98:2d:a6:4d:28:5c:50:32:49:7d:5c:
aa:61:54:82:2f:82:61:db:c1:09:7d:b3:02:f8:0a:
3e:68:f0:a8:df:15:30:81:5c:7f:8e:29:fd:1c:92:
82:77:d4:e0:e4:f5:5b:d7:fa:58:d3:6a:f9:7a:0c:
2b:04:46:59:70:fb:d9:af:3d:43:e1:ea:ad:7e:4d:
0d:25:85:dd:8f:fb:3e:67:bd:2f:1c:52:a3:ce:c3:
24:4d:0d:02:8a:d0:9b:45:72:60:0a:4b:03:63:27:
57:76:77:22:e5:d0:81:f1:49:e4:17:0b:9b:f9:05:
fb:47:6b:d3:9f:87:3a:0f:48:fc:2a:ab:b3:a0:28:
bd:cc:96:6c:0c:dd:f5:08:76:21:d7:43:1e:f2:10:
d9:18:6b:ac:01:2a:1e:44:93:ad:4b:35:63:2d:df:
2b:d3:48:ef:41:c4:c0:46:03:42:14:db:07:01:20:
2b:8f:b2:80:fa:6a:2e:85:97:55:91:48:5d:3f:6d:
15:62:c6:30:57:ce:ed:d6:45:ad:73:c3:c7:7d:e7:
a4:2b:b6:df:12:ef:8f:f4:b4:30:55:2d:88:91:9f:
ab:bc:fd:23:a7:3d:83:9d:48:e8:52:e9:74:2c:47:
cb:70:d0:03:02:ea:63:54:df:84:f0:09:62:c9:63:
cc:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:2D:67:96:66:F9:A9:DC:03:77:15:21:5E:AA:AF:D2:4A:10:ED:2A
X509v3 Authority Key Identifier:
keyid:4F:D6:64:6C:93:C2:97:47:89:EC:EF:7B:44:46:56:EE:64:16:17:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T9ZkbJPCl0eJ7O97REZW7mQWFyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/T9ZkbJPCl0eJ7O97REZW7mQWFyk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/T9ZkbJPCl0eJ7O97REZW7mQWFyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:ee:3a:97:21:03:24:00:01:ae:9c:60:30:a4:f2:db:c5:d2:
cc:4b:02:1f:d6:50:aa:99:d8:7f:fe:0f:e8:e4:52:ae:ac:29:
79:40:f1:73:96:5d:66:99:9f:65:e8:eb:10:ea:dc:37:e7:45:
87:81:7e:e7:d9:d2:6b:2d:7b:70:b7:e5:c1:8f:27:da:cd:2f:
7e:8c:9c:77:5b:4e:6c:f2:f4:70:20:19:a9:b8:20:64:e6:73:
29:c6:66:ef:70:d4:68:73:79:f2:f2:3a:b1:13:7d:ed:b5:e9:
0e:46:77:60:42:fb:18:25:b9:8b:89:a8:dd:ca:93:9e:c5:4c:
bc:be:ac:d3:e3:ef:8f:d1:98:e7:2b:6b:08:34:17:34:69:1e:
1c:20:5f:c9:60:72:7b:f7:62:a3:f7:56:d4:c5:d6:a1:9e:48:
f6:6e:7d:88:93:44:00:16:2e:d9:ee:6f:dd:6a:0c:db:2d:87:
90:f5:8f:df:81:ef:d8:af:d6:9a:93:75:54:72:5f:2c:fa:8f:
f1:c1:3c:c4:d7:26:f1:e8:89:59:6b:13:18:6b:15:07:5f:92:
ea:91:3b:7c:fa:87:21:d2:f8:cb:68:04:64:f2:a9:93:af:bd:
10:2c:22:f6:eb:e4:e8:30:f1:be:17:d8:bb:5c:76:e7:1b:c3:
71:49:62:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:14:08 2025 by rpki-client