Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.mft
File: TSPi7bMh4ailzp7j4tlapA8N6KA.mft (raw, json)
Hash identifier: CdGobGxsWI1oNd6JhU80ExpRjvAbIDeUOZi2qffIuno=
Subject key identifier: 2D:EF:DD:57:DC:3F:32:3E:78:9D:D0:9F:2E:61:4D:28:ED:6D:9B:45
Authority key identifier: 4D:23:E2:ED:B3:21:E1:A8:A5:CE:9E:E3:E2:D9:5A:A4:0F:0D:E8:A0
Certificate issuer: /CN=4d23e2edb321e1a8a5ce9ee3e2d95aa40f0de8a0
Certificate serial: 01974AB171622B07BE71A0CF51916E0E4C38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TSPi7bMh4ailzp7j4tlapA8N6KA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.mft
Manifest number: 0A33
Signing time: Sat 07 Jun 2025 14:00:32 +0000
Manifest this update: Sat 07 Jun 2025 14:00:32 +0000
Manifest next update: Sun 08 Jun 2025 14:00:32 +0000
Files and hashes: 1: E8fqlMMExB61QIsEKMENcZNpWcs.roa (hash: BmnUAt4AevLzEKuzLNe+ibP+z5vcZguaEireBbRJdHM=)
2: TSPi7bMh4ailzp7j4tlapA8N6KA.crl (hash: AFff8ER1NYO406+XqyUtInQd7Q+g4LUAEo4O86wVQ/4=)
3: gXlhbbxVLQVqCMGvhejieNdtoBY.roa (hash: 8u7C6SqKmEB/oIEa7cYGrPkrur0B3bFj0WV0Kh36+qQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.mft
rsync://rpki.ripe.net/repository/DEFAULT/TSPi7bMh4ailzp7j4tlapA8N6KA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 14:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:b1:71:62:2b:07:be:71:a0:cf:51:91:6e:0e:4c:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d23e2edb321e1a8a5ce9ee3e2d95aa40f0de8a0
Validity
Not Before: Jun 7 14:00:32 2025 GMT
Not After : Jun 8 14:00:32 2025 GMT
Subject: CN=2defdd57dc3f323e789dd09f2e614d28ed6d9b45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:8e:5b:61:17:3e:ef:9d:3d:c8:6f:5f:74:c1:
03:d7:50:85:1e:9d:2c:65:17:24:79:e7:ac:33:04:
89:33:4a:07:4f:0a:da:b5:66:5f:54:86:85:00:80:
98:c3:e7:b2:ef:ab:f5:f6:ca:94:79:b1:6e:84:15:
73:aa:e5:6f:e2:f7:c5:8b:83:1a:b3:0b:d0:b1:72:
19:f7:38:08:d9:07:5b:8e:c6:17:82:4f:9d:be:2f:
39:f2:31:d3:5f:3c:16:0a:6e:e8:2c:6e:c9:61:d4:
5f:90:f6:6e:f6:15:74:f4:10:17:ba:20:29:68:d4:
83:ee:44:8f:81:13:e4:54:40:ab:26:2d:86:ef:3f:
e5:4d:24:2f:84:7c:8a:17:cc:63:a9:c2:30:b7:83:
c3:84:71:61:0b:7e:aa:7f:a6:a6:d6:f1:98:95:95:
c1:8d:01:5e:41:14:e4:7a:d8:1a:19:70:88:a2:c3:
ce:b2:69:90:20:a3:4b:c7:bf:b2:3a:91:0f:db:ab:
d7:d5:a0:ef:e7:7a:63:09:b3:5b:5e:cb:29:e9:16:
3e:75:ca:7b:1d:72:e3:9a:fc:27:fc:9a:38:a5:1a:
0c:a9:df:8b:dd:6e:97:57:31:0f:b8:85:f4:70:8e:
b4:11:8a:d8:35:a2:ce:8c:95:0e:78:b9:c1:94:2d:
a3:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:EF:DD:57:DC:3F:32:3E:78:9D:D0:9F:2E:61:4D:28:ED:6D:9B:45
X509v3 Authority Key Identifier:
keyid:4D:23:E2:ED:B3:21:E1:A8:A5:CE:9E:E3:E2:D9:5A:A4:0F:0D:E8:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TSPi7bMh4ailzp7j4tlapA8N6KA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:c1:d9:45:b4:75:b2:80:bb:9b:95:03:9c:68:bf:b6:4b:e4:
98:54:b2:8b:d6:98:87:ef:03:11:4c:33:b2:7d:a6:84:94:29:
6f:09:07:67:da:ad:5f:d5:f9:d4:4f:4a:51:62:98:a9:67:9e:
61:43:5f:03:a7:1f:3e:27:72:e6:78:f7:bb:6a:2c:c6:dd:c5:
c7:b2:29:c5:fe:5d:7f:fa:e9:2f:9a:11:05:47:ff:6c:36:8e:
c9:5a:9b:4d:20:81:1c:0a:59:a7:bf:16:79:79:e8:41:e0:19:
dd:40:7a:65:a4:5d:3c:cb:d1:ee:9d:d4:12:a7:b8:dd:f8:56:
eb:2b:a4:79:76:67:f1:20:da:b4:19:b9:fb:db:9f:ae:78:03:
f9:44:37:cb:33:e3:5e:08:dc:87:e7:a2:9f:a5:bb:14:63:98:
47:9f:81:45:3f:e0:23:06:28:48:86:6e:8f:f0:0c:2d:a7:76:
c4:94:d4:a6:d9:f4:22:65:56:5f:af:bf:5e:e9:2f:80:6b:d0:
c4:67:63:90:15:28:ad:9f:9b:5d:7a:d8:74:9c:47:3d:25:bf:
fd:8c:c6:49:bb:0d:9c:fd:b4:26:10:bc:cc:38:d3:02:4b:23:
60:7c:8a:70:01:08:a6:bb:68:5b:49:70:b3:a5:8f:84:25:f3:
df:78:a8:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:27:17 2025 by rpki-client