Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/ad9e9c-aca2-480c-82e8-06faf1496693/1/_Tq5WEdps0xpXg7zvkAN5chwX1g.mft
File: _Tq5WEdps0xpXg7zvkAN5chwX1g.mft (raw, json)
Hash identifier: o/3btrZp/U8snIHwufi6x99ZVx5LCUX9cMBq6DqbYUU=
Subject key identifier: 92:3E:FB:2F:B2:96:3A:C9:95:B8:F9:7B:06:A6:DE:B5:EE:1C:AB:1D
Authority key identifier: FD:3A:B9:58:47:69:B3:4C:69:5E:0E:F3:BE:40:0D:E5:C8:70:5F:58
Certificate issuer: /CN=fd3ab9584769b34c695e0ef3be400de5c8705f58
Certificate serial: 0197778A57FC2A515DBC20287D7F069B250F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Tq5WEdps0xpXg7zvkAN5chwX1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/ad9e9c-aca2-480c-82e8-06faf1496693/1/_Tq5WEdps0xpXg7zvkAN5chwX1g.mft
Manifest number: 019C
Signing time: Mon 16 Jun 2025 07:00:44 +0000
Manifest this update: Mon 16 Jun 2025 07:00:44 +0000
Manifest next update: Tue 17 Jun 2025 07:00:44 +0000
Files and hashes: 1: _Tq5WEdps0xpXg7zvkAN5chwX1g.crl (hash: lJOrBB8J+amNE55U5g29x+s6gJY3tpkiEDw0wmdaU0g=)
2: mm8C4Ou63If70LPWFRCmCNEI28c.roa (hash: g2mAP9bfs0Z2vFldLFVJmnHsqx5+Iksx21QgfS4cMys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/ad9e9c-aca2-480c-82e8-06faf1496693/1/_Tq5WEdps0xpXg7zvkAN5chwX1g.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/ad9e9c-aca2-480c-82e8-06faf1496693/1/_Tq5WEdps0xpXg7zvkAN5chwX1g.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Tq5WEdps0xpXg7zvkAN5chwX1g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:77:8a:57:fc:2a:51:5d:bc:20:28:7d:7f:06:9b:25:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd3ab9584769b34c695e0ef3be400de5c8705f58
Validity
Not Before: Jun 16 07:00:44 2025 GMT
Not After : Jun 17 07:00:44 2025 GMT
Subject: CN=923efb2fb2963ac995b8f97b06a6deb5ee1cab1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:99:78:48:69:7c:d3:b5:c7:78:ad:25:99:9a:
34:cb:c0:ad:5e:3f:5e:cf:ba:b5:9c:c4:f1:34:92:
43:61:b5:31:be:cb:3f:73:d5:9c:03:81:28:f4:1e:
10:64:f4:bb:ed:72:79:b5:07:9a:12:de:8c:09:98:
b3:fb:4d:d2:55:49:35:7f:d8:05:80:80:bf:04:16:
37:72:a9:5b:19:d6:ec:2f:26:b6:fc:3e:ed:c2:11:
36:fc:9f:47:42:48:a1:30:9d:a5:da:ee:e6:dc:34:
f4:3a:19:fb:14:f7:7b:03:ca:cf:64:a5:c7:0b:d0:
4c:5a:a9:6d:f1:61:31:ac:e8:a6:b2:af:61:63:2c:
e6:47:87:84:b9:f1:d8:79:67:ab:7b:88:7d:2f:90:
b3:99:aa:01:a4:63:c1:2b:2e:b5:50:20:7c:45:9a:
04:59:4a:3f:77:64:6b:17:41:ce:59:70:2e:69:5b:
c2:a7:80:63:02:6c:25:60:b3:49:cd:80:78:38:f6:
2d:df:a6:53:43:ff:72:9a:84:83:ba:31:6a:18:26:
be:1c:0d:7d:65:3a:dc:f5:ea:be:53:48:a6:26:1f:
32:df:ae:0f:cb:45:a4:15:f1:6a:ad:76:5c:01:1a:
f1:e2:42:b6:e0:f2:aa:56:5f:f5:9b:ad:a2:73:34:
e7:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:3E:FB:2F:B2:96:3A:C9:95:B8:F9:7B:06:A6:DE:B5:EE:1C:AB:1D
X509v3 Authority Key Identifier:
keyid:FD:3A:B9:58:47:69:B3:4C:69:5E:0E:F3:BE:40:0D:E5:C8:70:5F:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Tq5WEdps0xpXg7zvkAN5chwX1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/ad9e9c-aca2-480c-82e8-06faf1496693/1/_Tq5WEdps0xpXg7zvkAN5chwX1g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/ad9e9c-aca2-480c-82e8-06faf1496693/1/_Tq5WEdps0xpXg7zvkAN5chwX1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:da:43:32:01:3a:63:1f:4b:bf:7c:cc:3e:a5:62:ab:7f:20:
7c:4a:59:04:92:f7:3c:04:78:ca:0c:86:32:1b:dd:e3:5c:a0:
fe:db:ed:16:b9:ca:c7:48:6f:cd:0f:1a:f6:b0:7e:5d:7c:d2:
56:7b:78:01:35:3f:d0:d1:1c:48:1a:9f:7c:6e:f1:06:82:f8:
f4:2b:2e:fa:c0:c9:12:30:2e:6a:f9:d8:30:e4:13:30:73:33:
df:6e:25:59:67:07:b4:9e:b6:5f:af:36:bd:a1:6f:60:92:48:
b1:f0:10:aa:f6:3c:00:62:2c:95:24:b6:99:84:4b:9c:e0:fe:
7f:94:7c:78:92:a9:bc:11:9e:e4:d5:be:8e:36:15:b9:76:f8:
ab:52:d4:30:e7:01:23:33:63:85:1e:c0:58:de:3c:a9:7d:7d:
86:a2:82:41:bd:66:28:97:62:f9:f1:40:f2:6b:7a:b8:b3:fb:
11:9e:49:4d:5a:44:2a:1c:42:c9:b6:1a:27:49:44:32:6e:2f:
a2:11:33:a5:e4:22:2b:03:12:8a:bc:52:c1:98:10:59:4c:df:
8e:3e:8c:36:92:3d:6c:e6:ea:c6:c0:9a:e4:a8:a9:d4:cd:9c:
c9:22:79:8c:1f:5a:b9:63:fe:fb:ae:c6:04:4e:a2:00:c1:05:
dc:57:dc:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 14:10:54 2025 by rpki-client