Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/0e3d64-f290-4893-9a40-c9e141333d58/1/tT2fG8Pw2QttzR6fb9HlBhiOp8I.mft
File: tT2fG8Pw2QttzR6fb9HlBhiOp8I.mft (raw, json)
Hash identifier: xCWuJ8mfi1rNCzFfuv7kVH/tiwk8yqC+ViGS0+so9Co=
Subject key identifier: E1:BD:BE:DD:63:7A:21:8A:4F:B3:57:2C:D6:7B:AD:81:0B:64:22:24
Authority key identifier: B5:3D:9F:1B:C3:F0:D9:0B:6D:CD:1E:9F:6F:D1:E5:06:18:8E:A7:C2
Certificate issuer: /CN=b53d9f1bc3f0d90b6dcd1e9f6fd1e506188ea7c2
Certificate serial: 019771F648A3797F6C57FF50E53BC58405EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tT2fG8Pw2QttzR6fb9HlBhiOp8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/0e3d64-f290-4893-9a40-c9e141333d58/1/tT2fG8Pw2QttzR6fb9HlBhiOp8I.mft
Manifest number: 0832
Signing time: Sun 15 Jun 2025 05:00:55 +0000
Manifest this update: Sun 15 Jun 2025 05:00:55 +0000
Manifest next update: Mon 16 Jun 2025 05:00:55 +0000
Files and hashes: 1: P4_VmIDFfqYiDiPBdVVMzIA4LMY.roa (hash: fbL8P+MktK6PkeO1KtnH7o+BeC/FNslw8AAfJjr38OY=)
2: WKELc_W8mdXUUZ324MSWDeu1wXI.roa (hash: 0tteI0ps1fiC7XdrvhsFyeYnjz3rCzmXkLHL3vxN7GA=)
3: tT2fG8Pw2QttzR6fb9HlBhiOp8I.crl (hash: BUoJx+x7KcKXcOGizvbrdNn60GRrCv2tMtc+E2lVe+c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/0e3d64-f290-4893-9a40-c9e141333d58/1/tT2fG8Pw2QttzR6fb9HlBhiOp8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/0e3d64-f290-4893-9a40-c9e141333d58/1/tT2fG8Pw2QttzR6fb9HlBhiOp8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/tT2fG8Pw2QttzR6fb9HlBhiOp8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:f6:48:a3:79:7f:6c:57:ff:50:e5:3b:c5:84:05:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b53d9f1bc3f0d90b6dcd1e9f6fd1e506188ea7c2
Validity
Not Before: Jun 15 05:00:55 2025 GMT
Not After : Jun 16 05:00:55 2025 GMT
Subject: CN=e1bdbedd637a218a4fb3572cd67bad810b642224
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:43:ec:d4:cf:a9:f4:d2:e5:cf:6f:fb:9b:db:
81:60:48:62:85:dc:e1:63:d9:f1:4f:6b:1e:01:a3:
bf:b3:88:41:69:e4:c6:f0:c1:97:e7:2e:2e:c5:b4:
03:93:c2:b1:1a:28:dd:2f:64:1f:40:c5:eb:f4:7b:
b7:2c:bc:9e:98:20:06:f4:45:1d:55:1b:f2:11:18:
60:e6:62:79:c7:70:ec:7b:29:11:75:f4:21:f1:1f:
3d:4c:ce:9b:fb:23:90:42:07:44:d7:19:6c:c7:71:
a5:ba:6f:66:74:d8:8c:a3:7c:7c:3e:f3:ba:f9:37:
45:92:1e:6c:7f:38:f8:e8:36:c5:54:a0:76:00:8b:
4d:38:4f:51:81:08:a8:ce:8d:b8:75:e8:8c:5a:63:
6e:09:d6:60:73:b4:c0:0b:3b:df:12:ac:8c:db:84:
9b:1c:f2:5a:0a:9f:18:8e:d9:dc:97:72:e5:fe:04:
65:48:a3:c3:85:fd:a9:90:6d:94:1f:dd:02:8e:75:
8d:e9:4b:90:92:c2:4c:6e:2e:26:d9:6a:81:96:82:
d2:bc:a9:64:15:ea:74:0c:7b:b9:6f:2e:4d:bf:b5:
aa:01:98:4b:eb:08:f0:5f:1c:cf:e5:35:40:4d:ee:
97:5d:b3:93:54:6a:fa:d8:c5:ae:88:97:fb:3c:76:
ea:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:BD:BE:DD:63:7A:21:8A:4F:B3:57:2C:D6:7B:AD:81:0B:64:22:24
X509v3 Authority Key Identifier:
keyid:B5:3D:9F:1B:C3:F0:D9:0B:6D:CD:1E:9F:6F:D1:E5:06:18:8E:A7:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tT2fG8Pw2QttzR6fb9HlBhiOp8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/0e3d64-f290-4893-9a40-c9e141333d58/1/tT2fG8Pw2QttzR6fb9HlBhiOp8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/0e3d64-f290-4893-9a40-c9e141333d58/1/tT2fG8Pw2QttzR6fb9HlBhiOp8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:4a:c4:34:32:c4:94:c1:ba:55:0b:37:6f:24:67:c5:19:15:
1e:57:65:01:c3:0f:9c:e6:fe:65:16:c8:c2:76:f6:80:d0:59:
2e:19:f2:d6:7c:55:56:30:58:ab:ea:15:a8:34:e6:b4:36:06:
3d:51:65:3c:c4:a0:08:9d:9a:71:fc:0d:e1:a6:11:29:4e:95:
77:23:ab:ea:64:3b:d0:32:fb:92:26:90:39:18:f3:84:79:d1:
c5:07:93:53:14:19:9b:c6:ea:50:76:a6:70:8d:7d:c9:33:8e:
02:ea:84:f9:bf:1a:75:03:f4:52:ad:67:5d:97:8b:44:4d:ea:
33:71:7b:a5:5d:65:bf:30:13:ee:06:c8:52:6f:1c:db:c2:c4:
c0:07:9d:4c:84:3c:2e:d8:4d:b2:db:a4:8d:03:50:ec:cf:7f:
d7:5a:dd:42:dd:2d:38:04:93:04:b5:0f:5a:6a:8b:98:76:bc:
62:19:ed:a1:bc:d1:85:36:71:13:7c:ba:d7:fd:90:b4:17:17:
25:7c:8a:50:4a:70:ad:22:e6:29:d4:04:e0:bc:b7:77:59:5f:
c8:f2:ac:b6:d0:bd:65:e1:26:5d:4b:6d:a6:c9:06:34:86:a2:
c8:8c:44:e0:b4:28:67:b7:a4:b1:c4:e5:a7:fb:63:f7:b0:bc:
4a:5f:bb:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:35:43 2025 by rpki-client