
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.mft
File: Ts9TAHx5zF4vLXNWupEhp4wMdxQ.mft (raw, json)
Hash identifier: dsYOdu7nDFIAIX6jsJTpbpWQlBxxhB6u5fjq3i70uOo=
Subject key identifier: 4C:A8:08:26:EA:AB:51:78:F3:22:F1:CD:5A:B8:E1:9C:BE:4E:9E:00
Authority key identifier: 4E:CF:53:00:7C:79:CC:5E:2F:2D:73:56:BA:91:21:A7:8C:0C:77:14
Certificate issuer: /CN=4ecf53007c79cc5e2f2d7356ba9121a78c0c7714
Certificate serial: 019768174F3BA8956379BF25B3B0679FB39A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.mft
Manifest number: 15EA
Signing time: Fri 13 Jun 2025 07:00:47 +0000
Manifest this update: Fri 13 Jun 2025 07:00:47 +0000
Manifest next update: Sat 14 Jun 2025 07:00:47 +0000
Files and hashes: 1: 77nHJ74F1fFAwUbmMeRLrxeDdWA.roa (hash: 2Mtt2AaUFR4ZOfRNdKyuPT3cj2EQ+qy46BQe2ut00YY=)
2: G7v3pCkQ6hmfhpbVxzOwUWwmzDY.roa (hash: nVHjBCeWZEPbhgav/+qfuSQLmW0a+8zRMZx9D7jY6PU=)
3: Ts9TAHx5zF4vLXNWupEhp4wMdxQ.crl (hash: mRKlgxfND4ruBWcztjPbW2c18RFkDmyTkDtPtH7TyeQ=)
4: ZLnsYJrehSHy13eQaMRY1Tbep5I.roa (hash: beMY8QS7fWlkYI5VTaRGjskfF3hsi1HR7CrNo9yaWBM=)
5: jUW3uJuzvpMts6ZS_PpOE0-vHy4.roa (hash: QVsKQjI9Ob132etLfwnFEQDpraGA87DL9fvaD59Kiac=)
6: s2kaxqyHVyCTqaRomO4ohfBebsc.roa (hash: vuPF+RwNPBvTGLZXAOB0JJk86Umi+Vc+1JKtKmoQbqM=)
7: uOMM6E0bjpo9Z4Gp-nfqUv0VaVQ.roa (hash: B3I+niBmd/S5k5XR2KwNvCK0s1V+GTyHX32C34m4UZc=)
8: utyHAEFwJnyFPJNvun5WhnSWaes.roa (hash: 6wOcZjzxIP7txWQ7ykuvtlJ7+2Z7YXGjpvL74E0vFA8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 07:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:17:4f:3b:a8:95:63:79:bf:25:b3:b0:67:9f:b3:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ecf53007c79cc5e2f2d7356ba9121a78c0c7714
Validity
Not Before: Jun 13 07:00:47 2025 GMT
Not After : Jun 14 07:00:47 2025 GMT
Subject: CN=4ca80826eaab5178f322f1cd5ab8e19cbe4e9e00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:61:7d:a5:4d:d6:d3:29:09:17:1a:dd:75:03:
08:7c:b1:aa:41:d5:08:e6:ed:8b:4a:6c:48:73:d6:
6f:ef:ae:1c:9f:56:be:5a:b8:1f:6a:37:6a:70:cd:
fb:9a:cf:85:54:9b:35:26:bd:3f:93:1f:c6:68:54:
fd:e3:84:35:dc:a5:02:0b:b4:68:a2:e5:6b:b9:58:
b8:e8:87:c2:d0:d5:4a:07:cb:79:eb:e5:68:7c:01:
32:dc:de:79:19:ff:c2:29:c2:c1:09:c6:2c:f4:99:
79:54:af:12:b3:33:a3:4e:20:6a:c7:a4:3b:71:aa:
ac:87:2e:3e:72:9e:bc:ef:92:87:dd:0e:7c:69:a7:
a3:ca:e6:a0:4e:ec:5b:78:d5:e5:9a:f9:5c:75:38:
47:5c:c5:d3:33:8a:fa:71:dd:e8:db:fb:71:8b:41:
c7:7f:ef:bb:06:95:d1:42:19:a0:f0:33:22:ef:20:
f4:5e:f3:13:89:1a:35:38:e1:0c:7e:08:39:3b:1d:
07:ae:d7:a4:e2:dc:cb:e3:a8:34:f8:4f:53:6d:9d:
3f:4a:1c:25:a2:d8:ed:2f:a7:50:79:93:f5:d8:22:
22:cd:51:72:4e:9f:b6:04:59:41:81:d3:3c:f9:c9:
62:e9:c2:77:a8:8c:bf:e0:66:41:4a:08:6f:40:75:
dd:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:A8:08:26:EA:AB:51:78:F3:22:F1:CD:5A:B8:E1:9C:BE:4E:9E:00
X509v3 Authority Key Identifier:
keyid:4E:CF:53:00:7C:79:CC:5E:2F:2D:73:56:BA:91:21:A7:8C:0C:77:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:6a:f6:80:77:1a:73:e5:ac:90:bc:f7:38:24:da:5c:d5:6b:
12:78:a3:84:af:96:45:0c:4a:e8:25:6a:1e:99:cb:f8:d0:5f:
c4:dd:11:67:05:ab:91:35:97:f8:0c:25:d4:f4:1f:c4:fb:22:
5c:da:29:5e:8c:10:61:06:7b:25:8e:ec:af:0a:45:e4:df:82:
0a:09:1e:5f:d2:9d:3e:78:d6:c3:bd:c5:af:e7:09:84:cb:3a:
48:e7:99:83:65:8f:b0:20:6d:83:e1:08:f0:80:2a:87:d4:33:
5b:1c:ff:b5:e6:8f:4a:21:ba:b0:e3:de:38:95:ea:23:17:ee:
70:fa:b0:51:17:c6:05:30:a4:5e:c6:c9:42:27:15:7b:3f:5e:
55:73:60:54:0f:82:d9:8d:81:4e:7f:e1:4a:e7:a0:20:26:63:
d0:38:15:27:12:b7:bc:6d:b6:c1:5e:6d:4c:68:a0:86:b2:76:
fe:b4:20:55:04:7b:e2:70:4d:c4:59:16:8e:a6:d9:75:83:f1:
02:0b:e0:b6:2e:1d:3a:ca:8a:57:ca:01:c4:64:b6:b3:8b:ff:
95:1a:70:9e:87:70:e0:3b:1b:b7:7f:c3:2c:28:03:24:cd:45:
06:cf:92:d2:aa:a8:20:d9:38:84:2a:11:d0:aa:ec:5b:d5:b7:
c2:95:64:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 11:21:51 2025 by rpki-client