Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/262f40-48c7-43c6-9d83-1548ac1356be/1/tDqirb6dQEE3M58g_VhiPIo58TA.mft
File: tDqirb6dQEE3M58g_VhiPIo58TA.mft (raw, json)
Hash identifier: 2/P0YQnO4BP7p+8Us1PW+MlA9d+oJtOgTvMTRdqopes=
Subject key identifier: CC:DC:19:AB:AB:08:5E:2E:8E:E7:4C:14:52:49:F5:92:3D:84:92:4D
Authority key identifier: B4:3A:A2:AD:BE:9D:40:41:37:33:9F:20:FD:58:62:3C:8A:39:F1:30
Certificate issuer: /CN=b43aa2adbe9d404137339f20fd58623c8a39f130
Certificate serial: 0197462FB6CE81C744B7F3A5B98F95B83DF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDqirb6dQEE3M58g_VhiPIo58TA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/262f40-48c7-43c6-9d83-1548ac1356be/1/tDqirb6dQEE3M58g_VhiPIo58TA.mft
Manifest number: 0527
Signing time: Fri 06 Jun 2025 17:00:21 +0000
Manifest this update: Fri 06 Jun 2025 17:00:21 +0000
Manifest next update: Sat 07 Jun 2025 17:00:21 +0000
Files and hashes: 1: DR42yKGsjL2cx3Lp0nYZ2-J6QjI.roa (hash: SNpq+XJB/gPAUUzDmYBdIDihlauDEu/Coqako/V/GUw=)
2: tDqirb6dQEE3M58g_VhiPIo58TA.crl (hash: 3S9yGXXFAStRRRJc1zQBedxv1jc2hPcB87b3LjDHZqE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/262f40-48c7-43c6-9d83-1548ac1356be/1/tDqirb6dQEE3M58g_VhiPIo58TA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/262f40-48c7-43c6-9d83-1548ac1356be/1/tDqirb6dQEE3M58g_VhiPIo58TA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDqirb6dQEE3M58g_VhiPIo58TA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 17:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:2f:b6:ce:81:c7:44:b7:f3:a5:b9:8f:95:b8:3d:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b43aa2adbe9d404137339f20fd58623c8a39f130
Validity
Not Before: Jun 6 17:00:21 2025 GMT
Not After : Jun 7 17:00:21 2025 GMT
Subject: CN=ccdc19abab085e2e8ee74c145249f5923d84924d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:95:bf:2d:e0:7c:2d:94:85:1a:d9:84:7f:0a:
d7:82:e2:8a:22:ce:83:57:47:b9:77:96:20:a8:63:
7f:68:d4:4f:db:6f:75:ca:ae:a1:87:20:f2:07:14:
ec:56:41:ef:db:2c:07:db:6d:da:4f:ad:a5:cc:1a:
61:f4:0f:41:a3:4f:66:38:31:e2:21:5f:fa:a8:dd:
26:59:36:84:e6:0b:00:21:f1:21:8f:79:01:03:9b:
fb:6e:3a:ef:9c:89:af:6a:f3:b7:8e:9c:8d:8e:61:
2e:0f:31:90:39:4f:fb:dc:85:22:46:8e:24:4f:02:
cf:ab:c7:e8:1a:05:63:26:48:51:10:f3:0f:8e:9f:
06:72:1c:42:7b:5d:88:69:17:fd:23:a5:7e:d4:a8:
b8:30:fb:a7:eb:ae:6e:9c:9c:e5:7b:4e:4e:cc:ea:
1f:ef:5c:4a:dd:65:bc:48:7a:b0:3a:d1:08:57:d1:
0f:0a:83:c8:51:42:22:fe:ba:ac:f3:e9:80:ca:6e:
62:34:5d:d1:31:69:05:3d:70:07:5e:cd:90:3b:ba:
de:44:e0:1c:6a:ac:72:2a:b0:61:b2:9f:6f:d1:e8:
b7:40:4b:d6:25:23:c0:2a:72:54:c1:13:e8:68:37:
04:dc:23:96:df:f0:99:f9:e5:6e:a5:4d:9e:47:dc:
35:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:DC:19:AB:AB:08:5E:2E:8E:E7:4C:14:52:49:F5:92:3D:84:92:4D
X509v3 Authority Key Identifier:
keyid:B4:3A:A2:AD:BE:9D:40:41:37:33:9F:20:FD:58:62:3C:8A:39:F1:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDqirb6dQEE3M58g_VhiPIo58TA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/262f40-48c7-43c6-9d83-1548ac1356be/1/tDqirb6dQEE3M58g_VhiPIo58TA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/262f40-48c7-43c6-9d83-1548ac1356be/1/tDqirb6dQEE3M58g_VhiPIo58TA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:2f:7f:80:9e:9a:9a:d6:b9:4f:ec:34:4e:b5:bf:f2:83:a1:
da:68:00:88:87:83:da:e1:8a:47:ce:ac:30:d0:7d:5d:6b:c1:
e1:d4:4d:31:c4:3d:0e:a7:51:c7:4a:4c:43:a6:c9:bf:24:03:
1c:10:7c:65:4f:73:d8:0b:b3:b8:9b:81:c8:d7:37:14:42:df:
0a:fa:be:2c:48:92:c5:91:83:f8:26:75:10:69:4e:0e:1f:87:
72:55:df:a9:16:b3:8d:93:39:38:88:fc:94:ea:24:85:91:05:
ae:b7:78:61:fd:37:d2:50:9a:81:a2:9c:49:42:37:41:30:76:
18:01:d3:df:32:48:62:5d:de:74:a3:f0:ec:ed:22:81:02:02:
97:6b:ec:e7:7a:0e:75:2b:bd:f9:07:66:56:54:d2:71:73:58:
a1:a1:50:65:8f:50:5e:a6:29:53:4c:75:a3:44:0a:2e:2b:72:
ce:28:6e:2e:57:a7:fc:f7:d8:72:a6:fd:f3:31:cc:ba:92:ac:
47:8f:2a:42:2b:13:b8:c2:f7:98:ed:88:9d:33:32:85:0e:93:
c8:27:77:01:a3:ba:50:14:7f:7d:47:3a:10:9d:b6:2e:60:e3:
cc:74:7f:98:f0:28:39:e2:47:69:71:98:b0:a0:5b:39:8b:84:
53:0a:7c:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:18:12 2025 by rpki-client