Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/0cfe3e-729f-4418-9cf4-863daecfc2e8/1/tPpNCBs2iH8-XKZTf3Rp7uIdca4.mft
File: tPpNCBs2iH8-XKZTf3Rp7uIdca4.mft (raw, json)
Hash identifier: 2qY7bDHCBw0jKWlgbrYSz5RMIUbj37zm+ROcWCH45+s=
Subject key identifier: A9:61:58:11:62:AE:F5:E2:AF:F4:A1:68:9F:E6:96:4C:3F:B7:79:DA
Authority key identifier: B4:FA:4D:08:1B:36:88:7F:3E:5C:A6:53:7F:74:69:EE:E2:1D:71:AE
Certificate issuer: /CN=b4fa4d081b36887f3e5ca6537f7469eee21d71ae
Certificate serial: 01974AE85284006E5EE6DD73F699760998D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPpNCBs2iH8-XKZTf3Rp7uIdca4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/0cfe3e-729f-4418-9cf4-863daecfc2e8/1/tPpNCBs2iH8-XKZTf3Rp7uIdca4.mft
Manifest number: 157F
Signing time: Sat 07 Jun 2025 15:00:28 +0000
Manifest this update: Sat 07 Jun 2025 15:00:28 +0000
Manifest next update: Sun 08 Jun 2025 15:00:28 +0000
Files and hashes: 1: HeDUncvNrC9DXvqHmX3LCuEEQFk.roa (hash: pkL8awVC+vif3Sv8BEo/gQroGPTBLCBBOJrEXIA/gLU=)
2: tPpNCBs2iH8-XKZTf3Rp7uIdca4.crl (hash: 3V0OZILvseSDzlcS/XOpJsVxYi4dXbndXOtmxH7xPtU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/0cfe3e-729f-4418-9cf4-863daecfc2e8/1/tPpNCBs2iH8-XKZTf3Rp7uIdca4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/0cfe3e-729f-4418-9cf4-863daecfc2e8/1/tPpNCBs2iH8-XKZTf3Rp7uIdca4.mft
rsync://rpki.ripe.net/repository/DEFAULT/tPpNCBs2iH8-XKZTf3Rp7uIdca4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 15:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:e8:52:84:00:6e:5e:e6:dd:73:f6:99:76:09:98:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4fa4d081b36887f3e5ca6537f7469eee21d71ae
Validity
Not Before: Jun 7 15:00:28 2025 GMT
Not After : Jun 8 15:00:28 2025 GMT
Subject: CN=a961581162aef5e2aff4a1689fe6964c3fb779da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4b:a7:6c:89:c2:02:6c:96:d2:13:df:2d:03:
c3:b8:39:56:b2:9f:f5:c0:3c:ae:65:6c:12:88:d0:
c0:10:70:27:4e:36:51:0d:b7:f4:d8:3e:89:aa:1b:
ee:4f:9d:70:74:a1:b3:de:11:b3:12:88:dc:c5:70:
f4:03:61:70:df:11:c1:d1:79:1e:53:65:73:9d:5e:
1d:40:5a:33:13:78:c8:a3:02:31:d0:3b:d8:2c:b9:
e2:c6:92:1f:78:5b:8b:86:1f:34:3e:89:39:17:52:
bd:3e:ad:ad:1d:4d:8c:07:e7:72:23:49:2c:0b:03:
a0:60:14:8a:e1:d6:1d:76:cd:b9:a5:ea:c3:0c:93:
2d:7d:03:f7:ab:b2:ca:69:c6:61:1d:ea:d7:6b:71:
d3:ae:09:cb:0b:8c:8d:98:ff:e2:9f:ec:08:47:af:
1d:cb:69:49:72:55:22:fc:31:1f:ff:ba:74:fb:ee:
ca:73:b6:09:3d:96:41:00:e1:c3:10:e7:06:0b:1b:
b1:1b:b8:05:3e:93:fc:da:21:2a:ff:3e:3d:f8:76:
10:86:be:aa:8f:db:0f:e7:ed:f9:1d:51:32:0d:43:
5e:30:d0:e2:1f:8b:37:21:96:68:c2:32:10:5f:b6:
91:c3:00:27:13:23:00:ad:f2:6d:86:e2:13:9b:4a:
1c:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:61:58:11:62:AE:F5:E2:AF:F4:A1:68:9F:E6:96:4C:3F:B7:79:DA
X509v3 Authority Key Identifier:
keyid:B4:FA:4D:08:1B:36:88:7F:3E:5C:A6:53:7F:74:69:EE:E2:1D:71:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPpNCBs2iH8-XKZTf3Rp7uIdca4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/0cfe3e-729f-4418-9cf4-863daecfc2e8/1/tPpNCBs2iH8-XKZTf3Rp7uIdca4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/0cfe3e-729f-4418-9cf4-863daecfc2e8/1/tPpNCBs2iH8-XKZTf3Rp7uIdca4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:6c:27:bc:9e:1f:fb:ec:5d:b8:fb:f7:94:65:5f:5d:b6:d7:
24:5d:d4:3a:1a:97:a1:9b:27:f2:e3:fd:13:2f:f7:89:15:b7:
57:95:0c:8a:c4:dd:d4:e3:05:41:49:db:bb:f6:14:05:25:d0:
bf:7d:2c:e3:1d:31:55:45:cf:ec:eb:b1:06:c1:28:4b:a6:e4:
9f:8b:87:4c:5c:f4:54:d4:53:f5:f7:5a:79:c7:d3:68:ff:b8:
1d:a9:b3:91:e6:8e:d1:30:a0:e5:8f:a4:b7:7a:cc:b3:59:71:
b3:8a:24:ed:3b:f4:ad:3a:e8:5c:fc:a7:61:28:27:ef:c6:e6:
be:11:5e:48:ad:f1:c1:ae:88:f3:f1:cd:e1:82:7f:0d:fd:74:
01:b6:ab:03:ea:43:74:fa:27:48:85:61:ad:68:ab:e1:c5:82:
48:db:60:85:af:d9:a1:a5:13:9d:70:91:3d:48:df:1f:2c:8f:
7b:41:e2:e6:1f:b0:2c:f2:f1:35:c3:48:d1:c4:69:fc:f9:96:
33:74:3d:e2:b8:c8:93:90:dc:20:7d:ec:b7:85:b4:68:34:be:
0e:5e:b2:d2:5f:f2:f5:45:c4:93:a0:d6:19:6d:79:45:0a:09:
91:3b:09:90:bf:aa:56:42:bb:38:6c:ec:53:a1:6b:36:6b:dd:
b2:e6:b5:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:34:59 2025 by rpki-client