Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/359179-4ac2-431c-9531-0b7a33dd5b56/1/tFBkwayGkOLHepWaUCVG6YvNNyc.mft
File: tFBkwayGkOLHepWaUCVG6YvNNyc.mft (raw, json)
Hash identifier: u0ccxZvtHNIvGAwBzCMOzZd+xcpLnosXXER4TQOnHhw=
Subject key identifier: 66:AD:36:9C:07:DC:C0:FC:46:DF:2F:22:10:01:86:6A:95:37:F3:0B
Authority key identifier: B4:50:64:C1:AC:86:90:E2:C7:7A:95:9A:50:25:46:E9:8B:CD:37:27
Certificate issuer: /CN=b45064c1ac8690e2c77a959a502546e98bcd3727
Certificate serial: 01974A7B61F0AB06D38858F5776FFD80693C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFBkwayGkOLHepWaUCVG6YvNNyc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/359179-4ac2-431c-9531-0b7a33dd5b56/1/tFBkwayGkOLHepWaUCVG6YvNNyc.mft
Manifest number: 0BFD
Signing time: Sat 07 Jun 2025 13:01:29 +0000
Manifest this update: Sat 07 Jun 2025 13:01:29 +0000
Manifest next update: Sun 08 Jun 2025 13:01:29 +0000
Files and hashes: 1: _INaZ6DycFqZuVm42lkSOfz9oRs.roa (hash: N1fFaEC6dFW7nNDOY6nEbXrF6dJ7s2tSPU9xB9zA38k=)
2: tFBkwayGkOLHepWaUCVG6YvNNyc.crl (hash: sWCtEB/EP90bGL+/rlrdrw/aXHkjQjVujuGmfypfb3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/359179-4ac2-431c-9531-0b7a33dd5b56/1/tFBkwayGkOLHepWaUCVG6YvNNyc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/359179-4ac2-431c-9531-0b7a33dd5b56/1/tFBkwayGkOLHepWaUCVG6YvNNyc.mft
rsync://rpki.ripe.net/repository/DEFAULT/tFBkwayGkOLHepWaUCVG6YvNNyc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7b:61:f0:ab:06:d3:88:58:f5:77:6f:fd:80:69:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b45064c1ac8690e2c77a959a502546e98bcd3727
Validity
Not Before: Jun 7 13:01:29 2025 GMT
Not After : Jun 8 13:01:29 2025 GMT
Subject: CN=66ad369c07dcc0fc46df2f221001866a9537f30b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:87:82:14:b5:d9:53:e2:6e:95:a0:0f:41:68:
3b:f4:c5:7e:4a:26:b2:b6:1f:c9:2e:fa:18:1b:3f:
29:44:99:f3:e4:c1:00:9e:65:d9:77:14:9d:2d:ee:
55:23:f9:b4:09:d9:aa:5a:a6:74:20:34:79:66:be:
e1:ee:d5:0f:37:88:c1:11:1a:23:c3:b5:34:3d:a7:
0d:8e:b8:7f:04:ee:53:f0:a0:eb:dd:3d:e4:10:50:
6e:a9:52:91:60:f5:8b:18:74:32:df:f2:0b:a6:32:
b7:c4:d0:1c:e2:9e:2c:2a:4e:11:53:91:16:54:c3:
02:ca:b8:77:f1:f5:b0:6b:36:21:05:12:0c:2d:c8:
37:44:c6:93:74:41:f3:5c:44:ee:81:fc:15:38:a6:
75:cd:24:cf:60:6f:59:63:ce:cd:67:21:22:4f:8a:
ec:28:ab:cc:a1:01:f5:f5:aa:2b:d7:7c:17:a9:c8:
c2:5f:32:98:57:bb:be:24:34:67:f7:cd:8a:67:0e:
58:fd:da:3d:27:76:ef:aa:7c:0a:32:8b:8e:01:80:
0a:8f:a9:b6:df:eb:9b:1c:9d:da:ef:3c:cc:03:3c:
b9:55:22:8a:16:c2:a2:7d:73:c8:ae:cd:c9:d6:a4:
85:41:29:32:85:a0:8f:17:e6:14:8f:db:0b:d3:c9:
54:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:AD:36:9C:07:DC:C0:FC:46:DF:2F:22:10:01:86:6A:95:37:F3:0B
X509v3 Authority Key Identifier:
keyid:B4:50:64:C1:AC:86:90:E2:C7:7A:95:9A:50:25:46:E9:8B:CD:37:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFBkwayGkOLHepWaUCVG6YvNNyc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/359179-4ac2-431c-9531-0b7a33dd5b56/1/tFBkwayGkOLHepWaUCVG6YvNNyc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/359179-4ac2-431c-9531-0b7a33dd5b56/1/tFBkwayGkOLHepWaUCVG6YvNNyc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:af:09:9a:70:db:59:b1:77:20:0d:1d:dc:c2:1e:5a:8b:4a:
a1:5e:38:3f:dd:63:0e:db:d4:2c:d7:09:97:a2:6b:55:44:bd:
0f:1c:98:35:e7:78:c0:d3:48:b9:00:46:af:50:ee:1f:6d:13:
94:ad:73:27:c2:44:65:42:d0:e6:73:ee:e3:13:d7:1b:08:9a:
cb:c5:63:de:b5:dd:4d:33:0e:5f:b3:b7:eb:e7:b9:8a:3b:23:
4e:2d:bb:9b:7f:49:b0:bf:82:8d:a8:9c:f0:47:51:17:08:c2:
6b:a0:00:1c:7e:a3:81:7c:5b:a1:ff:f6:a1:6a:92:b7:94:14:
1f:1f:e3:8f:4e:51:ae:61:0a:4d:a8:e8:14:ac:02:20:bd:56:
3d:ed:0a:97:6d:c0:22:82:ba:7b:cd:d6:6e:46:a0:d8:c9:47:
af:db:f4:ac:93:ef:1e:ee:f0:e8:36:89:c7:05:fe:78:f7:66:
33:e0:cf:99:31:53:b7:54:96:18:f0:41:84:cb:20:5b:55:62:
5e:99:74:4a:34:bf:e7:fe:c7:2c:b5:96:e2:34:26:39:ed:72:
2e:6b:9b:4f:3b:72:91:fd:ad:cc:86:87:db:70:3c:be:f9:f8:
41:76:e0:46:e1:13:87:5a:73:51:d9:4c:42:02:1e:5e:28:ec:
ba:0b:29:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:12:53 2025 by rpki-client