Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e5195d-6698-4604-9114-68b3768f50dc/1/TXaD1upTn-8ba22910ox0F5fCiM.mft
File: TXaD1upTn-8ba22910ox0F5fCiM.mft (raw, json)
Hash identifier: uz2rbNR/euxqCRAnfxlr/lrN9UmzuFl2movzTOv5Gfs=
Subject key identifier: 3A:68:2D:E6:41:DD:C4:35:D1:2F:B0:EC:15:D8:B9:A4:25:8B:F8:DD
Authority key identifier: 4D:76:83:D6:EA:53:9F:EF:1B:6B:6D:BD:D7:4A:31:D0:5E:5F:0A:23
Certificate issuer: /CN=4d7683d6ea539fef1b6b6dbdd74a31d05e5f0a23
Certificate serial: 019790374DEC5967E2F8B78DD9AE6BFBB48B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TXaD1upTn-8ba22910ox0F5fCiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/e5195d-6698-4604-9114-68b3768f50dc/1/TXaD1upTn-8ba22910ox0F5fCiM.mft
Manifest number: 15A5
Signing time: Sat 21 Jun 2025 02:00:32 +0000
Manifest this update: Sat 21 Jun 2025 02:00:32 +0000
Manifest next update: Sun 22 Jun 2025 02:00:32 +0000
Files and hashes: 1: 1-D4jJD807H-OPUYTDOT3Tu_JyS4.roa (hash: K7IM15aCA5aTJM5sDX4rMPreikAauQh+879R4GxfzqU=)
2: S1Ts1tmRBXYi-ijSPHwLnC2EFiI.roa (hash: RZYdWEyp7eB0JTzdxGKYT9kYsY0nvo8GSZ1zPOj2n8s=)
3: TXaD1upTn-8ba22910ox0F5fCiM.crl (hash: eaPDqPRWU90rnhSJiDOvDnaPBJdtibru910g4w2c6Y4=)
4: Wn6BmhQ3hHGpcUGcQYHufQoB9CY.roa (hash: 1bAtfl0eVf3wk/89WZI+rKZJtpHN1fJgLK/5hDxXP2c=)
5: zLqZByVIYZNIOabo6CqeO7mf32s.roa (hash: AeNmHam8UAG7xmWhKqSgZZxihx4CuxlxzvkEgAgfsmQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/e5195d-6698-4604-9114-68b3768f50dc/1/TXaD1upTn-8ba22910ox0F5fCiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/e5195d-6698-4604-9114-68b3768f50dc/1/TXaD1upTn-8ba22910ox0F5fCiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/TXaD1upTn-8ba22910ox0F5fCiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Jun 2025 02:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:90:37:4d:ec:59:67:e2:f8:b7:8d:d9:ae:6b:fb:b4:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d7683d6ea539fef1b6b6dbdd74a31d05e5f0a23
Validity
Not Before: Jun 21 02:00:32 2025 GMT
Not After : Jun 22 02:00:32 2025 GMT
Subject: CN=3a682de641ddc435d12fb0ec15d8b9a4258bf8dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:47:e8:d0:5f:c2:2c:2c:f8:de:c2:d3:4b:a8:
40:3a:d7:30:0b:42:bd:fd:7e:93:0e:d0:10:e6:87:
25:ef:a9:a7:6d:75:cb:25:0a:34:7d:68:90:ba:c1:
27:02:31:73:ea:4f:09:4e:4c:ec:8f:53:57:32:aa:
99:b0:6c:40:b7:3c:3d:04:4e:56:59:ac:41:08:28:
24:2a:23:ec:a2:37:03:80:0d:46:30:18:52:17:69:
f8:ae:27:1a:7f:0b:79:fb:37:83:d2:3b:c5:60:9e:
d8:6a:d1:3a:9a:4a:ce:f7:7b:d1:2e:4e:61:8c:fd:
4d:71:01:b2:1b:fc:73:e1:a5:c0:fb:e2:28:4b:ad:
89:ee:ce:22:bc:1b:a5:ee:be:5f:04:a9:32:bd:94:
5e:71:94:a3:61:db:96:c0:c8:53:c1:87:c3:bb:2f:
9d:e7:23:c4:3d:9e:5a:b6:34:cd:31:63:ad:84:ec:
6a:8d:7b:0f:82:d9:05:41:2f:c2:12:71:5a:9e:b6:
88:f4:3c:ce:8d:f7:c3:02:96:86:d7:4e:3a:83:a0:
75:7e:8e:a1:04:a2:ed:55:df:a6:7f:0c:71:3e:56:
8d:86:23:48:29:b1:5c:14:52:98:4a:1d:2c:05:e0:
9d:d8:7a:35:0f:17:74:6e:c9:84:d6:8e:16:58:99:
f2:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:68:2D:E6:41:DD:C4:35:D1:2F:B0:EC:15:D8:B9:A4:25:8B:F8:DD
X509v3 Authority Key Identifier:
keyid:4D:76:83:D6:EA:53:9F:EF:1B:6B:6D:BD:D7:4A:31:D0:5E:5F:0A:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TXaD1upTn-8ba22910ox0F5fCiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e5195d-6698-4604-9114-68b3768f50dc/1/TXaD1upTn-8ba22910ox0F5fCiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e5195d-6698-4604-9114-68b3768f50dc/1/TXaD1upTn-8ba22910ox0F5fCiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:8b:e2:c6:e3:6a:c3:dc:94:df:dd:e3:b1:79:90:24:90:6a:
63:07:4d:02:81:70:9d:67:20:66:29:d2:90:c4:01:16:75:87:
56:76:47:94:b4:62:81:7f:6f:84:20:05:3e:c9:e9:c7:d0:e2:
0c:6b:02:24:1d:f5:d0:2c:8c:f6:a4:2f:65:36:a1:90:d4:76:
7a:45:21:0d:ca:1a:f4:ee:64:dd:65:f8:ee:21:df:f1:78:c9:
55:80:87:11:0a:6f:ae:ac:46:8b:0e:d3:1b:1e:0a:9c:64:7b:
7e:e2:c1:c9:07:47:bd:06:d9:48:9a:c9:90:1f:f1:e6:22:49:
c9:cd:37:05:f4:44:64:15:25:5e:28:39:01:cf:0a:62:c8:f0:
31:8d:f6:55:a3:b4:57:6d:c4:29:88:5b:9e:e5:ae:7c:95:02:
da:75:1d:c8:4a:0f:ff:9e:82:21:09:85:71:3a:27:86:86:0b:
43:5e:3f:10:8e:ec:07:f9:35:f3:67:41:6b:e1:51:86:de:c2:
b8:69:e5:cc:21:64:4d:56:38:4c:c2:34:d5:b3:6f:1c:a9:c6:
06:f7:11:15:9b:9c:0f:c7:7c:ff:ff:8a:8c:57:27:42:b6:d2:
f9:e8:d6:12:fa:83:7f:6a:a9:1f:10:c0:a9:c6:45:38:6a:48:
3d:e2:ac:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 09:23:29 2025 by rpki-client