Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.mft
File: Ts9TAHx5zF4vLXNWupEhp4wMdxQ.mft (raw, json)
Hash identifier: hyCoA6XWhyM3FvQ4NUDQl4X1OPBpooDQyr1sZQSYV64=
Subject key identifier: 7C:82:62:84:EF:8E:EC:4A:D6:5D:43:20:5A:4B:FB:C9:58:C9:38:C4
Authority key identifier: 4E:CF:53:00:7C:79:CC:5E:2F:2D:73:56:BA:91:21:A7:8C:0C:77:14
Certificate issuer: /CN=4ecf53007c79cc5e2f2d7356ba9121a78c0c7714
Certificate serial: 019756B56B73261DE25FDB143F89B63B92F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.mft
Manifest number: 15E1
Signing time: Mon 09 Jun 2025 22:00:19 +0000
Manifest this update: Mon 09 Jun 2025 22:00:19 +0000
Manifest next update: Tue 10 Jun 2025 22:00:19 +0000
Files and hashes: 1: 77nHJ74F1fFAwUbmMeRLrxeDdWA.roa (hash: 2Mtt2AaUFR4ZOfRNdKyuPT3cj2EQ+qy46BQe2ut00YY=)
2: G7v3pCkQ6hmfhpbVxzOwUWwmzDY.roa (hash: nVHjBCeWZEPbhgav/+qfuSQLmW0a+8zRMZx9D7jY6PU=)
3: Ts9TAHx5zF4vLXNWupEhp4wMdxQ.crl (hash: /otJgwQfG2rPwDa4eIkFSV5f0nimrHoOiakDNQ0ege4=)
4: ZLnsYJrehSHy13eQaMRY1Tbep5I.roa (hash: beMY8QS7fWlkYI5VTaRGjskfF3hsi1HR7CrNo9yaWBM=)
5: jUW3uJuzvpMts6ZS_PpOE0-vHy4.roa (hash: QVsKQjI9Ob132etLfwnFEQDpraGA87DL9fvaD59Kiac=)
6: s2kaxqyHVyCTqaRomO4ohfBebsc.roa (hash: vuPF+RwNPBvTGLZXAOB0JJk86Umi+Vc+1JKtKmoQbqM=)
7: uOMM6E0bjpo9Z4Gp-nfqUv0VaVQ.roa (hash: B3I+niBmd/S5k5XR2KwNvCK0s1V+GTyHX32C34m4UZc=)
8: utyHAEFwJnyFPJNvun5WhnSWaes.roa (hash: 6wOcZjzxIP7txWQ7ykuvtlJ7+2Z7YXGjpvL74E0vFA8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 19:25:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:56:b5:6b:73:26:1d:e2:5f:db:14:3f:89:b6:3b:92:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ecf53007c79cc5e2f2d7356ba9121a78c0c7714
Validity
Not Before: Jun 9 22:00:19 2025 GMT
Not After : Jun 10 22:00:19 2025 GMT
Subject: CN=7c826284ef8eec4ad65d43205a4bfbc958c938c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:b9:2f:79:01:74:1a:96:2c:15:3f:b4:14:1c:
88:43:fc:0c:e8:e9:0a:69:db:bf:4f:16:b2:3f:1f:
5b:c7:bb:d8:2f:65:5a:b1:89:27:a2:5f:2e:02:a8:
60:e5:32:fd:8b:94:c0:58:c7:3e:0a:20:7e:87:90:
5f:dd:d0:ab:21:dd:1b:cf:6f:05:24:0a:66:b3:39:
5a:9d:3d:38:48:3f:4f:ae:5f:4a:b9:3f:8d:52:ff:
d5:c7:05:d0:3f:ee:08:06:45:cd:d0:60:22:e1:9a:
6b:f0:5f:07:51:c2:a8:a8:87:4f:fa:c4:64:24:a3:
1e:3e:55:64:41:05:4c:ec:41:9f:c6:8b:03:bb:79:
a6:d4:15:57:fb:bd:bf:41:0c:70:d5:06:cd:ee:e6:
8e:b2:97:29:a4:df:3d:77:52:a5:7f:9c:3a:3c:80:
ee:23:af:c3:e7:c1:6c:d0:cc:b4:47:a2:9c:46:ef:
55:4b:73:3b:7b:ec:03:54:4e:5d:5d:37:18:ee:1f:
2b:da:78:ad:a7:cb:91:79:fc:39:66:c6:5f:8f:e3:
50:1f:e7:d0:29:2a:0f:ce:82:51:f8:27:52:f8:25:
d7:3c:c7:bb:5a:d1:2d:f4:5c:f8:36:33:24:eb:4a:
e9:fb:92:a3:2a:0a:83:b1:09:bf:f9:81:52:a1:c0:
36:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:82:62:84:EF:8E:EC:4A:D6:5D:43:20:5A:4B:FB:C9:58:C9:38:C4
X509v3 Authority Key Identifier:
keyid:4E:CF:53:00:7C:79:CC:5E:2F:2D:73:56:BA:91:21:A7:8C:0C:77:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:e7:8f:6c:8b:1e:f6:18:c0:f8:ad:ac:a5:cd:52:38:6a:c2:
76:7a:c0:35:7a:6f:b1:80:b3:f0:45:7f:3e:eb:0b:d1:bf:51:
b4:46:2d:1f:5d:3e:ea:a3:23:9d:7c:3c:db:e9:b9:23:eb:25:
08:91:e7:91:20:65:d7:b4:d9:e9:6b:9a:69:42:f5:85:b6:66:
dd:34:08:cb:59:f2:e1:f6:79:69:c7:67:69:91:e7:15:75:bc:
3e:7c:a7:84:b5:72:57:26:30:29:6d:e9:09:bd:12:52:e4:53:
b9:02:91:55:43:f1:0d:5e:de:50:cc:62:5d:97:ff:cf:f9:cb:
f0:2c:bc:49:b5:87:ad:dd:b9:fa:c3:88:d0:90:dd:46:1e:67:
3c:6e:55:b5:15:56:b5:1c:f3:b5:7a:f5:ed:08:41:cf:d3:13:
11:86:74:e2:1a:f9:03:da:bb:17:e2:f0:79:18:bc:79:6f:d3:
40:2c:9e:94:4a:9a:0d:0f:a8:dc:71:ee:61:96:6e:a1:9a:6a:
1d:26:82:39:c4:da:51:3e:8e:40:77:ff:2a:1f:6d:b5:37:b8:
17:be:b8:d7:e5:d8:40:62:31:5e:6a:90:57:35:45:1a:9d:6e:
5e:4a:9c:9e:81:e2:f1:da:f6:d9:fa:f8:f2:c2:0c:e6:4e:70:
02:54:06:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 05:15:02 2025 by rpki-client