Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.mft
File: Ts9TAHx5zF4vLXNWupEhp4wMdxQ.mft (raw, json)
Hash identifier: zIUh2ePaYAILgFxPrhJFX5RHmpuhedLeSIoJHLooh04=
Subject key identifier: 60:9D:FC:DB:42:A9:43:35:0F:61:3C:79:3F:3E:27:F1:46:87:71:0A
Authority key identifier: 4E:CF:53:00:7C:79:CC:5E:2F:2D:73:56:BA:91:21:A7:8C:0C:77:14
Certificate issuer: /CN=4ecf53007c79cc5e2f2d7356ba9121a78c0c7714
Certificate serial: 01975E6F3C1725A2687DB8636BDC90123D39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.mft
Manifest number: 15E5
Signing time: Wed 11 Jun 2025 10:00:37 +0000
Manifest this update: Wed 11 Jun 2025 10:00:37 +0000
Manifest next update: Thu 12 Jun 2025 10:00:37 +0000
Files and hashes: 1: 77nHJ74F1fFAwUbmMeRLrxeDdWA.roa (hash: 2Mtt2AaUFR4ZOfRNdKyuPT3cj2EQ+qy46BQe2ut00YY=)
2: G7v3pCkQ6hmfhpbVxzOwUWwmzDY.roa (hash: nVHjBCeWZEPbhgav/+qfuSQLmW0a+8zRMZx9D7jY6PU=)
3: Ts9TAHx5zF4vLXNWupEhp4wMdxQ.crl (hash: HLjOSg7KlhFwd2GuT3mn9xQDbfx2KuNS3U5vmPryHWs=)
4: ZLnsYJrehSHy13eQaMRY1Tbep5I.roa (hash: beMY8QS7fWlkYI5VTaRGjskfF3hsi1HR7CrNo9yaWBM=)
5: jUW3uJuzvpMts6ZS_PpOE0-vHy4.roa (hash: QVsKQjI9Ob132etLfwnFEQDpraGA87DL9fvaD59Kiac=)
6: s2kaxqyHVyCTqaRomO4ohfBebsc.roa (hash: vuPF+RwNPBvTGLZXAOB0JJk86Umi+Vc+1JKtKmoQbqM=)
7: uOMM6E0bjpo9Z4Gp-nfqUv0VaVQ.roa (hash: B3I+niBmd/S5k5XR2KwNvCK0s1V+GTyHX32C34m4UZc=)
8: utyHAEFwJnyFPJNvun5WhnSWaes.roa (hash: 6wOcZjzxIP7txWQ7ykuvtlJ7+2Z7YXGjpvL74E0vFA8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 08:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5e:6f:3c:17:25:a2:68:7d:b8:63:6b:dc:90:12:3d:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ecf53007c79cc5e2f2d7356ba9121a78c0c7714
Validity
Not Before: Jun 11 10:00:37 2025 GMT
Not After : Jun 12 10:00:37 2025 GMT
Subject: CN=609dfcdb42a943350f613c793f3e27f14687710a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:1b:7c:52:3b:db:6d:5d:04:21:b2:ff:d7:17:
39:0e:67:53:3c:7e:05:ca:49:4b:73:33:e3:b5:4b:
d2:e2:55:20:b2:b8:cd:be:98:07:a9:eb:e7:83:fc:
f9:5c:76:93:24:32:61:40:5c:f9:b9:0a:8c:0d:a7:
84:9e:23:13:5c:fc:43:75:c5:57:ec:b0:71:d1:df:
5b:60:e9:9b:5a:49:41:98:34:79:f7:93:b0:03:05:
73:95:e9:4c:41:1b:ee:9c:17:1e:21:f2:05:5b:91:
b8:af:a5:21:43:76:79:07:b8:a4:36:78:73:30:c6:
64:6c:4c:ad:de:6a:af:83:34:60:55:d8:bd:b6:bd:
c3:c9:5e:92:8a:52:10:bd:47:6c:1c:6d:06:90:55:
87:96:ab:e8:2e:c3:56:53:b8:7c:fe:ef:60:f6:62:
d2:dc:83:12:74:0c:55:f0:ff:53:b4:f3:74:32:ca:
d2:a3:6b:5c:cd:47:df:bc:05:12:42:2b:b0:e4:ec:
70:74:49:e0:44:75:ee:61:58:f5:18:6f:ea:a4:cc:
dc:ba:f2:61:9d:42:94:26:52:a8:4e:02:18:02:7c:
f9:e4:96:36:07:d6:a6:e1:de:bb:5e:42:b9:34:ba:
1e:01:46:9a:75:04:21:d8:cd:f6:23:e1:6a:92:8d:
39:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:9D:FC:DB:42:A9:43:35:0F:61:3C:79:3F:3E:27:F1:46:87:71:0A
X509v3 Authority Key Identifier:
keyid:4E:CF:53:00:7C:79:CC:5E:2F:2D:73:56:BA:91:21:A7:8C:0C:77:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:eb:3c:61:63:95:8d:60:db:30:1f:e1:1c:1c:ba:ac:3a:28:
62:6a:9b:37:d5:aa:3d:02:f2:d6:48:55:3e:35:2a:09:64:d5:
ca:75:9d:2d:1b:b5:fb:d6:36:33:ca:c5:b1:ee:e2:39:6d:65:
a6:42:d0:f1:88:62:aa:ae:fb:12:b2:27:fd:97:87:f1:37:c1:
d1:c1:5c:43:e2:cf:46:e2:86:e1:64:69:85:6b:54:f3:09:3e:
9c:14:18:aa:ba:96:c3:a4:00:fb:82:57:d3:72:71:e2:f5:f4:
25:71:22:26:c5:d7:6c:76:7f:bd:9e:47:f9:22:8c:e5:f5:8b:
45:28:71:e3:42:c0:4f:f7:4c:c5:10:6c:96:4c:51:59:2d:11:
52:7d:9f:f3:a9:6c:04:d0:22:e4:21:08:16:d9:9c:5b:05:99:
03:25:d6:ac:c4:96:ea:15:7a:b4:21:1f:d5:75:6d:db:fe:14:
b0:67:19:65:21:1c:07:f3:3a:b0:16:92:48:bf:2a:c8:a7:8e:
3a:23:f4:7f:80:74:ed:13:10:b4:bf:0b:1f:45:a7:f5:2a:0b:
84:1f:77:4a:4b:9f:a2:90:71:a1:10:e5:01:8e:f6:d6:1b:7c:
d0:16:09:6f:c6:7d:09:37:ea:92:e9:73:c5:89:dc:cd:27:40:
a2:0c:ac:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 14:40:34 2025 by rpki-client