Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/TsOgYsuW2aPyGostqEj4HG9zv5U.mft
File: TsOgYsuW2aPyGostqEj4HG9zv5U.mft (raw, json)
Hash identifier: 5o1rXJrjaDxpskA8HsbK3QQM+L/+xgUyuVFeH2GvgQE=
Subject key identifier: DA:B4:30:EE:8B:54:BC:BD:9C:84:FF:8E:53:27:6B:7C:4F:78:12:C0
Authority key identifier: 4E:C3:A0:62:CB:96:D9:A3:F2:1A:8B:2D:A8:48:F8:1C:6F:73:BF:95
Certificate issuer: /CN=4ec3a062cb96d9a3f21a8b2da848f81c6f73bf95
Certificate serial: 01976EBE3B6F606FDD82BEDA7D4BD7CBC6F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TsOgYsuW2aPyGostqEj4HG9zv5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/TsOgYsuW2aPyGostqEj4HG9zv5U.mft
Manifest number: 152B
Signing time: Sat 14 Jun 2025 14:00:50 +0000
Manifest this update: Sat 14 Jun 2025 14:00:50 +0000
Manifest next update: Sun 15 Jun 2025 14:00:50 +0000
Files and hashes: 1: TsOgYsuW2aPyGostqEj4HG9zv5U.crl (hash: mr/41/vvm1Vdl9nD22oQ6pfvU7Jed7PykGHnx7bSFoo=)
2: Zo-iXOH7eoz1wcNDU4gFPp4lbTo.roa (hash: lEXdntgkazPfcD7Ym6WQrguJ42W+/3phyup2XOjaUaA=)
3: w0BgVrxvQVnjW2X3qjBQ3ko9xOc.roa (hash: Ucfa4JRcD7zc33DVXeSZa1Nus1iwZHoQ8xtQZD2xfUQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/TsOgYsuW2aPyGostqEj4HG9zv5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/TsOgYsuW2aPyGostqEj4HG9zv5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/TsOgYsuW2aPyGostqEj4HG9zv5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:be:3b:6f:60:6f:dd:82:be:da:7d:4b:d7:cb:c6:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ec3a062cb96d9a3f21a8b2da848f81c6f73bf95
Validity
Not Before: Jun 14 14:00:50 2025 GMT
Not After : Jun 15 14:00:50 2025 GMT
Subject: CN=dab430ee8b54bcbd9c84ff8e53276b7c4f7812c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:7f:3d:6f:65:b3:eb:c1:88:dc:c0:0f:c3:04:
16:66:4a:bb:59:7c:22:29:59:f8:87:7c:e5:5c:37:
a5:1b:2a:59:45:5d:06:85:2b:fd:92:aa:ba:cc:5b:
9d:c6:e0:63:05:ea:11:be:32:8a:4f:c2:a3:a4:0b:
cc:03:3c:d5:1f:9d:6f:6b:ce:a7:08:0a:67:ca:8a:
b5:7b:4d:ff:d3:ba:b9:35:a6:58:0a:a6:80:da:fa:
c7:bd:de:ab:eb:4f:80:ed:15:26:61:1f:0f:c6:1c:
aa:39:2c:c2:e5:f8:df:df:66:35:71:2c:b3:91:60:
8c:fb:bb:20:6d:e2:6a:aa:29:09:fd:57:ce:80:5b:
a5:36:c8:c9:a7:f3:10:42:01:0d:0d:7a:9e:2a:f6:
e1:85:7f:09:76:2b:33:77:40:58:80:fc:f0:cf:04:
cf:5b:2c:16:0b:ee:d1:4a:c5:1e:04:eb:6a:e0:33:
4d:b8:c4:b6:38:72:ac:05:d4:53:97:87:22:7b:e4:
bb:f7:28:0f:6a:78:5e:f4:54:c3:b0:12:68:a5:9f:
1f:07:c7:21:c7:9e:f8:13:0e:a5:68:40:9c:5e:a4:
b3:52:32:5b:ae:e3:90:ff:9b:2c:75:ab:4e:1c:9c:
5d:45:93:3c:92:5e:55:72:01:94:1d:66:a1:fb:54:
35:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:B4:30:EE:8B:54:BC:BD:9C:84:FF:8E:53:27:6B:7C:4F:78:12:C0
X509v3 Authority Key Identifier:
keyid:4E:C3:A0:62:CB:96:D9:A3:F2:1A:8B:2D:A8:48:F8:1C:6F:73:BF:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TsOgYsuW2aPyGostqEj4HG9zv5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/TsOgYsuW2aPyGostqEj4HG9zv5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/TsOgYsuW2aPyGostqEj4HG9zv5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:1c:97:2c:c5:81:33:79:56:ea:36:2d:6f:46:4b:20:c4:9f:
68:c8:bd:ac:6b:0d:d6:1d:5d:ad:31:85:97:95:f0:43:56:fd:
88:b4:83:61:6f:34:bd:07:f4:52:ad:6a:5d:c5:39:36:44:fb:
fc:6a:16:e8:cc:ff:1a:77:21:5c:50:1c:d5:72:3f:a9:57:7c:
c5:62:5d:9a:83:05:de:9b:17:2f:c0:36:0f:63:69:f1:ec:b4:
fc:99:65:ed:6f:df:8e:b7:b4:9a:17:31:e8:45:25:ea:a2:d0:
29:a0:f9:f0:23:24:86:b2:4f:8b:2a:ed:b5:94:40:82:01:61:
a6:3c:2c:10:af:e2:f6:18:36:f4:83:6e:9b:52:42:31:b9:77:
eb:bd:0e:e4:f4:93:34:f6:ef:93:0f:ff:f9:7a:27:d3:cd:57:
cd:45:4c:75:49:8e:61:e9:91:bc:6c:ac:35:3b:23:33:8e:34:
74:67:c8:7c:00:6b:76:2b:4d:c1:06:aa:ab:4f:a1:f8:95:85:
12:bb:c0:6d:bf:9c:23:80:67:42:8e:e3:d2:b9:8b:e9:f7:42:
7d:1c:44:61:1a:4f:8c:c9:13:43:99:ea:35:00:8b:82:54:bb:
0e:bd:14:22:6f:a9:65:6e:5d:4f:84:e9:42:da:56:d9:b3:32:
da:cb:c1:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 17:08:28 2025 by rpki-client