Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/d6513d-2d53-4022-8360-3117989601ad/1/tKIIXH3jtZgha4n7Dysdkw3mbBk.mft
File: tKIIXH3jtZgha4n7Dysdkw3mbBk.mft (raw, json)
Hash identifier: 0vF7NRefjd5h7bPM8hB0gelOItyxfnISXquMJrDMgNI=
Subject key identifier: 65:55:DC:9F:EE:66:55:86:67:21:57:84:A6:F1:B8:8D:40:39:D6:8F
Authority key identifier: B4:A2:08:5C:7D:E3:B5:98:21:6B:89:FB:0F:2B:1D:93:0D:E6:6C:19
Certificate issuer: /CN=b4a2085c7de3b598216b89fb0f2b1d930de66c19
Certificate serial: 01974DE99D11E0E6B07AB495562099D4028B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tKIIXH3jtZgha4n7Dysdkw3mbBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/d6513d-2d53-4022-8360-3117989601ad/1/tKIIXH3jtZgha4n7Dysdkw3mbBk.mft
Manifest number: 1554
Signing time: Sun 08 Jun 2025 05:00:45 +0000
Manifest this update: Sun 08 Jun 2025 05:00:45 +0000
Manifest next update: Mon 09 Jun 2025 05:00:45 +0000
Files and hashes: 1: Bm5UACtbnF-zdFYjA8vPOBqvgzc.roa (hash: TLMH3v0yPGvBQf4sp02A0ciC7nkIzxuyV+cC5oHQvcg=)
2: KygTuxQFGUD5ATwC-VI56P0_KW8.roa (hash: +kPqhnKnrFZGjWfktqCyP4orZXjdv9+6M6sRVLgaUrA=)
3: kH7H7auuv6q7VTDiT7be_vcY-1Q.roa (hash: M4+McdjIhgE1/SI8bKbvFu1HsdzjwaQszRqVGjqa+wM=)
4: tKIIXH3jtZgha4n7Dysdkw3mbBk.crl (hash: B3IHFW9OIlWRRSWjujXVLD4V9LG1iVIiqaYHlA0NDZ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/d6513d-2d53-4022-8360-3117989601ad/1/tKIIXH3jtZgha4n7Dysdkw3mbBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/d6513d-2d53-4022-8360-3117989601ad/1/tKIIXH3jtZgha4n7Dysdkw3mbBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/tKIIXH3jtZgha4n7Dysdkw3mbBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:e9:9d:11:e0:e6:b0:7a:b4:95:56:20:99:d4:02:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4a2085c7de3b598216b89fb0f2b1d930de66c19
Validity
Not Before: Jun 8 05:00:45 2025 GMT
Not After : Jun 9 05:00:45 2025 GMT
Subject: CN=6555dc9fee66558667215784a6f1b88d4039d68f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c2:0d:f3:6c:aa:14:6f:e9:73:33:14:30:5d:
e7:20:82:d3:59:75:3f:6b:37:74:13:b4:c0:32:1a:
3a:e7:ea:45:ca:6e:c4:19:22:18:a1:7b:da:23:f1:
0b:85:22:f6:70:c1:84:29:36:d5:98:f0:2f:00:44:
79:61:50:0f:82:e2:db:2c:d4:0c:22:ac:88:21:76:
c2:a4:40:5a:9c:2d:f7:f0:76:d3:7c:a9:c6:4c:fa:
53:bf:50:4c:dd:a0:9f:cf:e2:fe:5d:02:b1:3b:1d:
b6:a6:39:ef:da:0a:5a:03:52:56:27:5f:dc:86:98:
14:52:11:82:81:f4:29:ac:f1:ad:e8:87:62:25:2c:
59:d9:99:b8:23:72:e7:68:e2:eb:eb:6c:69:36:be:
f4:ca:69:78:d8:45:ca:4f:02:04:e4:f3:4b:42:9d:
5c:58:84:7d:22:87:4f:15:a1:0e:ec:c9:e9:4c:3e:
5d:d6:07:ee:fd:11:87:9b:0a:bc:01:b2:74:a5:81:
d1:36:e7:0a:cd:8c:60:79:2e:2c:75:ec:37:b8:02:
97:c8:61:79:c0:de:2b:89:12:16:f0:27:32:af:f3:
4a:97:54:25:0b:dc:3e:92:0d:c2:14:47:d8:73:ed:
c1:9a:0d:35:a2:b4:50:c4:31:d3:74:2b:47:c9:39:
03:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:55:DC:9F:EE:66:55:86:67:21:57:84:A6:F1:B8:8D:40:39:D6:8F
X509v3 Authority Key Identifier:
keyid:B4:A2:08:5C:7D:E3:B5:98:21:6B:89:FB:0F:2B:1D:93:0D:E6:6C:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tKIIXH3jtZgha4n7Dysdkw3mbBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d6513d-2d53-4022-8360-3117989601ad/1/tKIIXH3jtZgha4n7Dysdkw3mbBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d6513d-2d53-4022-8360-3117989601ad/1/tKIIXH3jtZgha4n7Dysdkw3mbBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:ba:ed:73:41:3e:dc:de:85:21:5d:4a:d8:66:e0:35:da:85:
03:f2:a5:50:1a:9f:dc:30:0a:5e:8c:de:9a:f8:9a:70:5f:dd:
74:39:22:e5:89:f4:02:44:46:aa:6e:76:33:da:b6:f7:21:f9:
33:d0:81:60:c0:e7:02:6e:16:e7:e2:3a:55:dc:2a:b4:48:54:
46:ae:54:54:07:42:ea:52:ab:59:df:6f:e3:6a:2f:3f:82:2a:
93:94:18:38:05:6d:0b:c7:eb:9d:e2:5f:71:8a:6d:02:f8:a2:
58:9c:f2:b6:71:33:4e:f2:dc:aa:04:4d:42:bc:d2:ff:66:f9:
ac:af:af:67:60:46:1d:eb:f3:8b:fa:93:7a:5d:c3:ab:88:3e:
0c:d5:41:43:17:35:f1:f5:c6:5a:c5:de:e4:47:8a:ad:5f:b0:
e5:55:61:f0:f7:f8:8b:ae:46:b2:21:34:d7:76:80:86:84:7c:
c0:91:ab:87:bb:be:60:92:e5:44:6a:e6:bc:69:6c:fb:46:44:
51:cf:89:2c:7a:8e:91:9c:be:8e:26:80:c1:7b:3f:3f:78:d9:
24:6a:1c:67:45:ab:c2:66:69:f7:fa:68:34:1b:3f:86:30:41:
d1:75:86:8b:79:f3:10:d5:1c:66:06:bb:d8:2d:b7:68:55:72:
05:46:d2:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:48:04 2025 by rpki-client