Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/TMxgSVsqNNiSEcwceVJOq2G6FlY.mft
File: TMxgSVsqNNiSEcwceVJOq2G6FlY.mft (raw, json)
Hash identifier: e5VjKmCxTJ2Ng4dbOlDmgce9GQDE+wNpBlVxlnmS6R4=
Subject key identifier: 59:AB:F4:18:23:0E:E1:2E:D0:F4:98:BE:5C:46:F4:DD:69:86:93:A6
Authority key identifier: 4C:CC:60:49:5B:2A:34:D8:92:11:CC:1C:79:52:4E:AB:61:BA:16:56
Certificate issuer: /CN=4ccc60495b2a34d89211cc1c79524eab61ba1656
Certificate serial: 01974931658ACA0FFF4A56B83217BD134247
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TMxgSVsqNNiSEcwceVJOq2G6FlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/TMxgSVsqNNiSEcwceVJOq2G6FlY.mft
Manifest number: 157C
Signing time: Sat 07 Jun 2025 07:01:03 +0000
Manifest this update: Sat 07 Jun 2025 07:01:03 +0000
Manifest next update: Sun 08 Jun 2025 07:01:03 +0000
Files and hashes: 1: LHdFFtkhND-G29Bb5TNwX3ZX6HI.roa (hash: 5JCuzcczihsYGo60q4ytQ60HO2vUMA1Wb8XrWH6WiqE=)
2: TMxgSVsqNNiSEcwceVJOq2G6FlY.crl (hash: O6v+FRn+kJ4y9035kRxudIZzhj26nxTxEsZHpzuAnjc=)
3: VYrJyKdSTfJ9aOSPJMCRhItn6O0.roa (hash: EVl6QPoQm24Wnsg0W0HBnWjfCtTCiCv6xfCekdHCwzI=)
4: XGm_swis7gPqLxLCw4_WpqKe8Ac.roa (hash: HuoRGpzlvzmJtj6Rn/56OaSHzb/3wfWOGTlv62srzB8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/TMxgSVsqNNiSEcwceVJOq2G6FlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/TMxgSVsqNNiSEcwceVJOq2G6FlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/TMxgSVsqNNiSEcwceVJOq2G6FlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:31:65:8a:ca:0f:ff:4a:56:b8:32:17:bd:13:42:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ccc60495b2a34d89211cc1c79524eab61ba1656
Validity
Not Before: Jun 7 07:01:03 2025 GMT
Not After : Jun 8 07:01:03 2025 GMT
Subject: CN=59abf418230ee12ed0f498be5c46f4dd698693a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d9:62:40:49:b8:6c:95:45:6e:c9:c4:ac:82:
cd:64:b3:6f:18:4f:b1:d0:ea:7c:99:8f:e6:5e:90:
06:06:99:4b:44:0e:74:3f:7f:40:40:35:55:30:1b:
04:f8:da:1c:70:38:58:b1:ae:31:6c:b1:7c:3c:24:
60:e1:4a:b7:7e:42:77:aa:ca:01:03:ce:08:05:a4:
07:ca:74:0a:91:12:6b:81:7e:bb:7f:6f:07:a5:a0:
e4:80:86:ac:3e:94:d5:4c:c7:d3:ce:2d:b4:cb:43:
79:0a:37:ae:4d:58:44:68:17:3c:a3:77:f1:05:2f:
d6:04:d7:2c:78:26:ce:6d:0e:b8:b1:96:6f:71:8e:
ff:c3:1c:c3:6e:ec:d6:83:db:bf:e8:39:8b:5a:b6:
f2:db:4b:63:a7:20:8d:95:f4:ee:45:9f:46:cc:0b:
f6:ca:06:15:5c:84:af:29:14:13:75:79:d7:3f:ea:
2a:0e:a0:2f:89:47:75:3c:0a:8a:81:90:a6:de:53:
19:5a:85:62:3d:36:68:04:84:d6:a9:88:35:64:7e:
12:08:aa:1e:95:36:2f:b6:c2:3f:6e:aa:fb:ee:c7:
78:a7:cc:97:1b:75:57:40:c5:5e:34:c9:ec:8e:7e:
64:53:29:69:03:b4:bd:eb:ed:9e:c9:d5:cd:97:f0:
ba:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:AB:F4:18:23:0E:E1:2E:D0:F4:98:BE:5C:46:F4:DD:69:86:93:A6
X509v3 Authority Key Identifier:
keyid:4C:CC:60:49:5B:2A:34:D8:92:11:CC:1C:79:52:4E:AB:61:BA:16:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TMxgSVsqNNiSEcwceVJOq2G6FlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/TMxgSVsqNNiSEcwceVJOq2G6FlY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/TMxgSVsqNNiSEcwceVJOq2G6FlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:47:6e:80:89:b3:ae:89:b8:be:c6:e2:44:82:29:e9:b3:b4:
99:8d:2b:93:da:50:d4:71:16:ac:e9:44:b8:e7:4a:5e:29:ff:
17:84:8b:ec:b4:e0:a6:86:7d:9a:f6:4a:08:ef:99:36:93:5f:
f9:5b:b0:97:39:d1:1e:f0:c4:c6:c7:17:63:10:9f:79:20:68:
fe:b8:49:71:40:d0:c6:bb:6a:ad:3d:0a:28:16:78:a7:32:b1:
4c:33:38:18:19:1c:4f:24:71:12:e0:0d:3f:64:37:b2:3f:73:
f4:48:c7:bd:c1:a9:83:46:ce:54:6d:c1:8e:e9:3e:95:21:2c:
d4:be:e7:f7:36:df:4b:ed:11:2b:a4:d5:03:9a:ca:58:07:9a:
8d:3e:0e:32:07:83:42:41:41:7c:e1:df:cf:24:27:b7:06:6b:
6d:16:52:85:92:c3:dd:92:01:05:2e:5c:88:64:c5:10:08:17:
99:0a:11:c7:68:af:1f:fc:e4:b7:52:1e:60:5f:87:5e:b7:b1:
cc:05:d0:a6:4a:6d:86:b4:d1:0a:66:b9:66:44:cd:e0:24:18:
1b:5e:da:e7:38:8d:d0:cb:2d:b4:3b:e1:97:3b:cf:89:9e:9a:
1e:6c:ca:89:3a:5b:3a:22:1e:a1:4e:e6:38:a8:d7:63:da:4a:
49:15:1c:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:54:53 2025 by rpki-client