Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/1f82e5-3098-453a-af64-cab717a809e7/1/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.mft
File: tmd58gVbJU9dWzKS7q8N1Xl3N6Y.mft (raw, json)
Hash identifier: +1ZFcV71kPiq+yl5jQsQWL6Jc6kShCmjUlO0h2RPcLU=
Subject key identifier: 91:42:6A:05:53:8D:D5:73:70:F3:81:C0:BE:38:C7:CC:7B:04:A5:F5
Authority key identifier: B6:67:79:F2:05:5B:25:4F:5D:5B:32:92:EE:AF:0D:D5:79:77:37:A6
Certificate issuer: /CN=b66779f2055b254f5d5b3292eeaf0dd5797737a6
Certificate serial: 019771BF168CF7D0D4251B32FAA476819641
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/1f82e5-3098-453a-af64-cab717a809e7/1/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.mft
Manifest number: 0AEC
Signing time: Sun 15 Jun 2025 04:00:37 +0000
Manifest this update: Sun 15 Jun 2025 04:00:37 +0000
Manifest next update: Mon 16 Jun 2025 04:00:37 +0000
Files and hashes: 1: DWyS6ktuYXD1HWtRdim_tw6aAHw.roa (hash: ZpPs8QmClGInLrYdfgabA/tiTnRpT7Agrz+vwk6fAyc=)
2: ebklZqmx0-dRJX-3stcdCCjPSZQ.roa (hash: oxCqtL4IdqqluHjcszErTou8uGJlC2MCnMVsPPzgZCM=)
3: tmd58gVbJU9dWzKS7q8N1Xl3N6Y.crl (hash: /AHZ6j0pOsWZMXhZ4IgVoNKmRUYCzoyCCXcg53P6Qxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/1f82e5-3098-453a-af64-cab717a809e7/1/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/1f82e5-3098-453a-af64-cab717a809e7/1/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:bf:16:8c:f7:d0:d4:25:1b:32:fa:a4:76:81:96:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b66779f2055b254f5d5b3292eeaf0dd5797737a6
Validity
Not Before: Jun 15 04:00:37 2025 GMT
Not After : Jun 16 04:00:37 2025 GMT
Subject: CN=91426a05538dd57370f381c0be38c7cc7b04a5f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:24:2e:4e:ca:3c:ab:1d:d8:c3:06:d8:76:10:
f1:2f:10:b9:dc:79:cd:b1:b6:77:6c:60:a0:82:b1:
e0:e5:d9:d0:fd:f7:0e:be:5b:61:d1:27:e5:1a:a4:
49:0d:56:15:09:b0:cb:dd:f2:26:ce:fb:5c:e8:4c:
49:3d:e3:d2:30:2c:1c:94:4a:a1:fc:4c:15:03:2f:
51:ae:52:ba:52:aa:54:3d:a7:bd:73:b2:13:b3:8a:
ff:d3:7c:c6:58:0a:0b:37:c5:8d:fa:7b:b4:cb:28:
05:8d:9e:79:3a:3f:0f:62:f5:8c:6a:7a:96:27:5f:
08:1f:ab:1e:15:66:7d:e8:59:8a:9a:96:b9:3a:d9:
64:77:61:16:ad:b3:c7:ee:6b:36:ee:41:89:e9:b0:
54:df:7e:d7:81:62:6d:12:ba:2c:b0:56:cd:4d:f6:
60:01:44:57:b4:c2:bc:62:4a:52:e6:02:c5:13:b1:
41:7d:d2:24:a7:03:9d:34:9c:64:6c:d7:59:52:f3:
ab:8b:c9:1e:84:99:97:b0:ba:ff:9b:b3:49:58:fd:
cf:22:d2:98:5e:ce:73:41:be:f8:ff:a8:cb:75:93:
38:0a:22:f4:a7:0a:e1:f0:67:db:ca:52:cd:ac:2e:
a2:1f:bd:d5:1a:af:80:7c:33:fa:a2:55:fd:1c:d9:
54:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:42:6A:05:53:8D:D5:73:70:F3:81:C0:BE:38:C7:CC:7B:04:A5:F5
X509v3 Authority Key Identifier:
keyid:B6:67:79:F2:05:5B:25:4F:5D:5B:32:92:EE:AF:0D:D5:79:77:37:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/1f82e5-3098-453a-af64-cab717a809e7/1/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/1f82e5-3098-453a-af64-cab717a809e7/1/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d7:58:b9:9b:24:6d:32:ac:5c:a0:df:05:89:88:f0:3f:1d:b7:
27:f4:a0:0c:93:0f:ae:b0:96:35:c0:18:a7:0d:9c:df:5c:60:
c6:0c:f7:be:b1:a6:8c:55:bf:46:65:23:07:1e:9d:92:b7:13:
3e:04:0e:36:01:9c:f8:b6:5b:62:84:5f:df:7b:94:40:5c:bc:
cf:89:cd:50:1b:03:fa:60:e2:45:31:60:f1:0b:31:55:2c:f9:
fa:3c:ae:ce:d6:7b:59:d8:49:ee:46:6b:cd:77:d8:4a:0a:8f:
ae:71:c3:ac:3f:d1:18:ae:17:68:5d:1d:4a:64:47:ec:01:ba:
5a:38:42:4d:82:0a:81:34:b3:e7:1c:aa:9d:2a:bb:eb:9a:34:
25:40:bb:64:18:be:a5:a4:7c:b9:fd:13:8c:ed:c6:83:44:43:
46:ce:bf:58:e1:65:21:68:a5:49:41:a8:0f:e3:98:02:35:2d:
25:ab:8b:a4:a0:7d:f2:71:6a:2e:33:2f:b3:44:70:bc:54:0b:
e0:2d:f7:71:94:55:ad:71:9c:c5:15:17:f3:08:fd:d0:86:10:
93:4a:48:21:c6:00:f6:77:1d:53:c7:c7:8e:d5:cd:8e:ea:42:
5e:b6:1c:29:94:f0:59:45:59:bc:fb:b1:68:b4:ac:dc:bb:99:
2c:fd:b3:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:10:12 2025 by rpki-client