Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/03a325-a169-44ce-84ec-5728fb24bf0e/1/tDJYoYz00SKOXHkHDfpjMRaDIMU.mft
File: tDJYoYz00SKOXHkHDfpjMRaDIMU.mft (raw, json)
Hash identifier: rbSbL8VceHmAcPq2Ywy6yMPBAVQkSCRmWiFWl5lVNqE=
Subject key identifier: F3:F7:1F:B5:36:A5:CA:F8:B5:5D:CD:3D:74:83:14:FE:34:A3:D7:77
Authority key identifier: B4:32:58:A1:8C:F4:D1:22:8E:5C:79:07:0D:FA:63:31:16:83:20:C5
Certificate issuer: /CN=b43258a18cf4d1228e5c79070dfa6331168320c5
Certificate serial: 019745543D23EE9F1DFDF687B5F20486B2B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDJYoYz00SKOXHkHDfpjMRaDIMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/03a325-a169-44ce-84ec-5728fb24bf0e/1/tDJYoYz00SKOXHkHDfpjMRaDIMU.mft
Manifest number: 13BD
Signing time: Fri 06 Jun 2025 13:00:37 +0000
Manifest this update: Fri 06 Jun 2025 13:00:37 +0000
Manifest next update: Sat 07 Jun 2025 13:00:37 +0000
Files and hashes: 1: 28g4Blr7nuSyJeVmwy4cGLK9eb8.roa (hash: Q3uRjW4ymMVkt8l5TduM8mGnhXb4GzyvEHZ5j93is8c=)
2: psNnDsOb3MJQFpyT8HfsVNSnwog.roa (hash: KJkUgz1VxvV5lZj00xJ9seKTuebHbMbR6MJlSYq/h5Q=)
3: tDJYoYz00SKOXHkHDfpjMRaDIMU.crl (hash: 1RrDQWMVhfX57GXTgu0GrOns4RhIRTZM3sKd8l62q5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/03a325-a169-44ce-84ec-5728fb24bf0e/1/tDJYoYz00SKOXHkHDfpjMRaDIMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/03a325-a169-44ce-84ec-5728fb24bf0e/1/tDJYoYz00SKOXHkHDfpjMRaDIMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDJYoYz00SKOXHkHDfpjMRaDIMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 13:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:45:54:3d:23:ee:9f:1d:fd:f6:87:b5:f2:04:86:b2:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b43258a18cf4d1228e5c79070dfa6331168320c5
Validity
Not Before: Jun 6 13:00:37 2025 GMT
Not After : Jun 7 13:00:37 2025 GMT
Subject: CN=f3f71fb536a5caf8b55dcd3d748314fe34a3d777
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a1:e2:78:92:e6:70:eb:f6:ed:3d:05:43:ec:
6d:38:43:29:26:67:b0:03:b4:7e:32:60:33:0d:da:
12:33:8f:62:ea:6e:6b:72:cb:90:b0:c8:01:2c:9c:
5b:ef:ad:98:bb:2a:5c:40:d7:1b:db:76:d1:53:9a:
6c:e6:1a:22:34:25:00:64:66:8c:97:fd:04:39:1c:
4a:86:53:0e:97:2b:0e:e7:a4:f8:12:ee:c4:ab:4b:
e8:25:7a:9c:bd:59:14:c2:69:4b:3c:ff:d3:58:0e:
37:8b:4e:c7:b3:b6:6e:a1:18:b0:b9:dd:db:e5:d5:
d6:76:95:d0:26:ac:37:82:39:ac:4d:33:d1:cf:56:
83:57:1e:27:2f:30:3f:5d:ad:ff:b3:67:3c:44:13:
87:b4:6d:d9:7f:c9:4b:7a:fe:00:42:94:24:d3:b4:
81:bc:81:d2:a4:1d:49:5e:eb:24:d6:22:ba:29:25:
61:78:ba:76:0d:ea:ac:b4:2e:ab:c2:b1:64:27:cb:
86:30:51:81:04:22:7f:b8:76:4a:74:63:56:0b:b9:
b4:55:b1:1e:92:d3:73:da:d1:f3:40:c7:61:e1:01:
d9:a3:8e:06:b2:9f:32:48:ff:93:54:41:c9:c0:a5:
8d:d9:41:8d:9c:a9:fb:12:1a:42:ca:b2:f8:4c:73:
fe:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:F7:1F:B5:36:A5:CA:F8:B5:5D:CD:3D:74:83:14:FE:34:A3:D7:77
X509v3 Authority Key Identifier:
keyid:B4:32:58:A1:8C:F4:D1:22:8E:5C:79:07:0D:FA:63:31:16:83:20:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDJYoYz00SKOXHkHDfpjMRaDIMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/03a325-a169-44ce-84ec-5728fb24bf0e/1/tDJYoYz00SKOXHkHDfpjMRaDIMU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/03a325-a169-44ce-84ec-5728fb24bf0e/1/tDJYoYz00SKOXHkHDfpjMRaDIMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:f2:a7:5c:ef:cf:fc:b9:34:62:3c:59:05:1c:41:a3:6f:c9:
6d:8b:e6:95:af:66:0b:17:44:06:70:b9:dc:59:b9:92:1e:ec:
ee:12:af:4d:20:ba:54:53:db:5e:32:44:47:2e:17:a1:55:33:
70:cb:3d:18:d4:82:76:79:1f:a3:e7:10:1a:61:a4:e2:8f:78:
72:24:c7:1d:3d:bb:81:df:63:43:74:35:7f:5a:7e:f7:c4:db:
7d:8f:7f:bb:54:01:63:de:61:98:79:fc:7d:f2:83:84:e3:5e:
e1:07:ef:ad:29:a0:1d:c8:9e:cb:ff:6e:70:e5:44:57:71:de:
fc:e8:f4:b2:9d:12:4c:9f:0b:44:23:40:10:a1:78:96:8f:01:
0c:6c:53:f0:bf:0d:37:74:17:e6:09:f5:c6:84:9f:5e:93:bc:
99:17:49:9f:4d:16:9f:d7:b5:0f:ab:cb:48:da:9e:b0:e4:8e:
7c:86:3f:d8:c1:ac:d1:0d:ea:c5:b1:a3:51:6b:57:d5:21:3e:
48:8b:b9:2b:21:01:16:a5:c5:6e:62:95:70:c3:af:f6:46:dd:
a6:61:d8:7c:4f:30:8b:58:1a:32:fb:48:ee:71:e9:50:49:f4:
b2:42:f9:52:e7:29:32:4d:30:a2:f2:8e:ed:0c:d5:ee:95:b9:
49:7a:72:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 19:39:14 2025 by rpki-client