Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/65a4c2-34b3-4205-afd1-c5481db3718d/1/TSkoLUc3P5QvCti5HtlAk7Zuo68.mft
File: TSkoLUc3P5QvCti5HtlAk7Zuo68.mft (raw, json)
Hash identifier: roJejZURP37F8gyLtNS8jtWi7bmpWGRJP30ju9Pg0ts=
Subject key identifier: 08:90:83:63:F6:2C:2C:06:1B:34:29:CB:27:67:69:6D:58:32:88:DA
Authority key identifier: 4D:29:28:2D:47:37:3F:94:2F:0A:D8:B9:1E:D9:40:93:B6:6E:A3:AF
Certificate issuer: /CN=4d29282d47373f942f0ad8b91ed94093b66ea3af
Certificate serial: 019748FA33342D34C54EC828FC5692774E89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TSkoLUc3P5QvCti5HtlAk7Zuo68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/65a4c2-34b3-4205-afd1-c5481db3718d/1/TSkoLUc3P5QvCti5HtlAk7Zuo68.mft
Manifest number: 1505
Signing time: Sat 07 Jun 2025 06:00:46 +0000
Manifest this update: Sat 07 Jun 2025 06:00:46 +0000
Manifest next update: Sun 08 Jun 2025 06:00:46 +0000
Files and hashes: 1: 8G7CKA2HbZHRoNb9HaqBloS90vU.roa (hash: lDvm+Nsn5gFxpzefNnpEbQ5VLuNGtuV4rwnVopzkwq0=)
2: TSkoLUc3P5QvCti5HtlAk7Zuo68.crl (hash: 81o22X5nij3fN5H9sijtatSsQPIGtmzAPTszBOesgjk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/65a4c2-34b3-4205-afd1-c5481db3718d/1/TSkoLUc3P5QvCti5HtlAk7Zuo68.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/65a4c2-34b3-4205-afd1-c5481db3718d/1/TSkoLUc3P5QvCti5HtlAk7Zuo68.mft
rsync://rpki.ripe.net/repository/DEFAULT/TSkoLUc3P5QvCti5HtlAk7Zuo68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:33:34:2d:34:c5:4e:c8:28:fc:56:92:77:4e:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d29282d47373f942f0ad8b91ed94093b66ea3af
Validity
Not Before: Jun 7 06:00:46 2025 GMT
Not After : Jun 8 06:00:46 2025 GMT
Subject: CN=08908363f62c2c061b3429cb2767696d583288da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:06:2f:77:9f:d0:8a:7d:6a:55:b2:e0:4b:03:
96:2a:50:8d:94:c4:de:cf:c9:e6:ad:fb:bb:0d:df:
1d:98:f4:e4:82:da:fd:fb:86:75:ad:30:50:69:59:
d1:8b:1a:ee:af:39:ef:ec:58:77:84:ec:7c:62:d7:
75:d5:e3:2f:97:79:03:04:db:75:75:e7:eb:cb:ec:
e5:f7:62:44:f7:3c:17:c6:aa:74:85:d0:87:7a:e6:
7a:aa:51:d8:7b:91:73:02:fe:d7:48:e9:af:88:dc:
a1:5e:49:db:c3:8f:c4:1d:15:e5:eb:ab:a7:60:5a:
75:84:e2:4f:b0:30:4b:ce:37:c3:4e:cf:60:8f:a0:
8f:81:1d:19:c1:6a:09:2b:0c:c4:6f:53:47:bd:53:
fb:89:0f:27:94:4b:a4:6c:b5:6c:42:48:18:9b:cf:
5f:f1:2a:8d:a2:f9:de:30:ed:41:d8:91:73:f0:6a:
9e:89:a4:5c:f4:c9:8a:4a:d5:4d:46:56:4d:45:4e:
5b:41:a8:54:4a:60:a1:d4:0e:bb:0f:32:d2:a4:4f:
e7:61:0b:0b:ab:73:68:e2:a5:7d:07:52:e6:6d:a1:
2c:e4:59:66:a4:9e:dd:9c:e0:4b:97:6f:06:72:c7:
88:65:d5:8f:6f:6d:b7:0a:f9:65:8a:5c:e3:66:a2:
63:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:90:83:63:F6:2C:2C:06:1B:34:29:CB:27:67:69:6D:58:32:88:DA
X509v3 Authority Key Identifier:
keyid:4D:29:28:2D:47:37:3F:94:2F:0A:D8:B9:1E:D9:40:93:B6:6E:A3:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TSkoLUc3P5QvCti5HtlAk7Zuo68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/65a4c2-34b3-4205-afd1-c5481db3718d/1/TSkoLUc3P5QvCti5HtlAk7Zuo68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/65a4c2-34b3-4205-afd1-c5481db3718d/1/TSkoLUc3P5QvCti5HtlAk7Zuo68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:3e:87:9b:40:aa:39:90:44:28:38:59:ce:bf:a2:c8:18:3b:
fd:2a:7b:c7:43:eb:77:00:33:31:d2:2d:11:62:3e:de:85:52:
e6:65:99:a6:58:bb:e3:d1:e9:d0:5e:1e:e6:18:22:50:5a:fb:
7a:c0:16:b8:11:ca:ae:cb:e7:7f:80:23:e1:bc:43:d5:b6:4a:
f2:6d:8b:94:c0:e8:49:c9:e2:0e:32:94:92:b5:01:ec:63:c9:
77:cb:ed:76:55:31:cb:dc:43:0b:8e:5e:44:5b:23:85:0a:d1:
6b:2c:3a:91:4f:55:9e:2e:bc:57:7f:c5:22:58:1e:16:ad:2a:
0a:a9:c1:38:d4:cb:71:95:1b:74:69:13:8d:21:6e:dd:87:73:
da:cc:97:bb:4b:7b:03:85:25:c0:39:3b:a0:cf:bf:65:82:ac:
43:90:b1:15:db:2f:23:ca:42:3f:dd:3a:13:61:47:2f:fc:c7:
96:77:da:5a:94:ba:72:c6:dc:44:78:d3:07:23:b9:f9:2e:88:
30:86:dd:1e:c9:e9:39:63:9b:a8:67:46:27:fb:7c:a0:3e:1f:
6f:ce:60:65:0c:48:c2:af:c7:95:e2:43:5e:ca:c2:68:64:ba:
46:0d:b9:72:75:91:ff:a2:f2:9e:4f:a5:33:77:93:14:d2:78:
b7:63:be:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:14:31 2025 by rpki-client