Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/259418-5e74-4df0-82a0-f9e75308754f/1/tmlTqin4JZqgLBImpGzgnt1Fzp0.mft
File: tmlTqin4JZqgLBImpGzgnt1Fzp0.mft (raw, json)
Hash identifier: d1VgcwL2jegJLXWw7HeGc4mGU6iWY/YQeblU2d+9gAk=
Subject key identifier: 97:23:84:D5:4D:BE:10:47:61:EC:62:53:29:EA:12:2F:8D:EC:63:65
Authority key identifier: B6:69:53:AA:29:F8:25:9A:A0:2C:12:26:A4:6C:E0:9E:DD:45:CE:9D
Certificate issuer: /CN=b66953aa29f8259aa02c1226a46ce09edd45ce9d
Certificate serial: 01976929E3C054C2A92D33BA23A867829D03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tmlTqin4JZqgLBImpGzgnt1Fzp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/259418-5e74-4df0-82a0-f9e75308754f/1/tmlTqin4JZqgLBImpGzgnt1Fzp0.mft
Manifest number: 42
Signing time: Fri 13 Jun 2025 12:00:42 +0000
Manifest this update: Fri 13 Jun 2025 12:00:42 +0000
Manifest next update: Sat 14 Jun 2025 12:00:42 +0000
Files and hashes: 1: pqvRnrkHquypsw02knASEmaM8CA.roa (hash: iRr4/5L2X3HFedqB9qSGokTGPgu0NihU0rX3BfoQgdM=)
2: tmlTqin4JZqgLBImpGzgnt1Fzp0.crl (hash: z9Nwbj5s5Nfnq0FJJvejXN0Xb+7ny1kwt1F6AkxVbnc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/259418-5e74-4df0-82a0-f9e75308754f/1/tmlTqin4JZqgLBImpGzgnt1Fzp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/259418-5e74-4df0-82a0-f9e75308754f/1/tmlTqin4JZqgLBImpGzgnt1Fzp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/tmlTqin4JZqgLBImpGzgnt1Fzp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 07:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:29:e3:c0:54:c2:a9:2d:33:ba:23:a8:67:82:9d:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b66953aa29f8259aa02c1226a46ce09edd45ce9d
Validity
Not Before: Jun 13 12:00:42 2025 GMT
Not After : Jun 14 12:00:42 2025 GMT
Subject: CN=972384d54dbe104761ec625329ea122f8dec6365
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1a:04:a1:58:40:0d:69:39:2c:19:06:f4:7b:
5d:fe:5f:8c:c8:d5:d3:12:75:c8:dd:c0:f1:ff:1c:
d9:4d:1e:c9:bf:37:11:bc:9e:d8:79:70:c8:ea:9f:
ba:60:c1:29:79:d5:69:fd:ca:4a:1c:a2:f6:5a:f7:
4e:d4:81:81:3f:45:63:8f:69:96:50:4e:0c:39:9f:
59:d8:c9:8c:b0:b2:13:46:5c:4c:1b:35:60:8f:1d:
9c:c2:67:f4:e8:c9:70:ca:2e:53:a3:6f:d9:a8:a5:
32:7b:af:99:6e:54:de:e2:5a:52:c0:13:36:8c:f9:
41:42:15:c9:e2:43:58:c2:a0:a8:7e:42:fe:91:fc:
66:1d:a3:75:92:7b:18:7a:47:13:e2:0e:63:e5:03:
d8:5d:11:d6:da:a5:63:60:1e:d9:b0:1f:31:65:24:
44:f8:8e:26:20:8c:75:8d:9d:82:01:0b:4a:33:a9:
1a:01:a4:6c:95:36:8e:cf:b0:97:b1:8d:34:81:bc:
3f:c6:86:74:c9:13:e4:e6:4d:c5:1d:df:91:13:53:
c3:a5:ae:d0:fc:97:1e:d0:56:ae:8c:68:5f:b5:36:
bd:36:2d:19:a0:7a:42:bd:60:69:73:f9:99:85:43:
59:2a:d2:8e:3e:d8:0e:75:34:c1:6e:9c:f9:89:dd:
51:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:23:84:D5:4D:BE:10:47:61:EC:62:53:29:EA:12:2F:8D:EC:63:65
X509v3 Authority Key Identifier:
keyid:B6:69:53:AA:29:F8:25:9A:A0:2C:12:26:A4:6C:E0:9E:DD:45:CE:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tmlTqin4JZqgLBImpGzgnt1Fzp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/259418-5e74-4df0-82a0-f9e75308754f/1/tmlTqin4JZqgLBImpGzgnt1Fzp0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/259418-5e74-4df0-82a0-f9e75308754f/1/tmlTqin4JZqgLBImpGzgnt1Fzp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:63:cc:5b:f7:71:81:f2:bc:15:50:cd:12:bf:8d:be:ec:25:
91:61:52:92:46:8f:9f:38:4e:70:fd:20:e5:2b:a8:f4:21:2e:
0e:95:33:a9:46:d7:55:99:b9:22:3b:6c:79:4b:2d:6b:a9:95:
55:90:94:e4:4f:ad:26:aa:08:87:7a:3c:5e:a3:aa:c6:5f:97:
75:bf:bd:9e:d2:88:d2:1c:e9:1d:7d:44:52:b0:43:0f:c7:46:
cc:fe:3a:08:a5:35:84:a7:69:74:5e:31:58:d8:9d:71:80:02:
0a:3c:2d:20:27:12:e9:67:6d:f9:16:b3:dd:09:bd:85:20:c4:
c9:ed:71:b8:18:1b:1b:59:5f:f1:1b:84:7d:15:18:7a:79:31:
6a:88:f2:20:c4:92:25:fd:2b:3b:62:98:c6:86:12:d4:c9:7d:
d0:d4:c9:1c:63:09:98:7f:f7:7c:08:f0:e0:19:8f:56:23:0a:
f0:64:9a:a1:c3:59:9b:ad:21:bd:33:63:b2:15:ff:ac:86:97:
e3:58:0f:a5:66:6b:a8:65:91:87:4f:5c:cd:41:e6:01:0c:be:
c9:ec:d2:97:03:24:f8:46:cb:31:2b:1c:0f:a2:73:71:fe:d3:
18:cb:a3:5d:fc:b0:1f:e7:4d:94:32:b7:40:a7:e0:5a:06:a6:
0e:d8:53:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 14:00:59 2025 by rpki-client