Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/6c0b54-b06e-4d44-8120-370b8688feaf/1/tUSbCOpqJn33NmpolcfJJMLxkm0.mft
File: tUSbCOpqJn33NmpolcfJJMLxkm0.mft (raw, json)
Hash identifier: ESibSlX+H/b51JFZ7gUsiLJkF2bdjUaS/VKqAAZDvQc=
Subject key identifier: F9:29:E4:4D:85:BE:73:D4:94:1F:77:85:8C:23:FA:71:94:5C:78:6E
Authority key identifier: B5:44:9B:08:EA:6A:26:7D:F7:36:6A:68:95:C7:C9:24:C2:F1:92:6D
Certificate issuer: /CN=b5449b08ea6a267df7366a6895c7c924c2f1926d
Certificate serial: 0197843318884345E8CDFC383E3E4DD2EE45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tUSbCOpqJn33NmpolcfJJMLxkm0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/6c0b54-b06e-4d44-8120-370b8688feaf/1/tUSbCOpqJn33NmpolcfJJMLxkm0.mft
Manifest number: 013B
Signing time: Wed 18 Jun 2025 18:00:30 +0000
Manifest this update: Wed 18 Jun 2025 18:00:30 +0000
Manifest next update: Thu 19 Jun 2025 18:00:30 +0000
Files and hashes: 1: 12VZdcmHAZ40OHT9mrIrMjn0594.roa (hash: ET8sgbp54z2ReDcdD/bnaoyAnFdtN16gcR5nsUzXKcM=)
2: tUSbCOpqJn33NmpolcfJJMLxkm0.crl (hash: 1l/IUTWibTE13xHbX+d1HNbYs18ZeVWkhOo3gISzZzQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/6c0b54-b06e-4d44-8120-370b8688feaf/1/tUSbCOpqJn33NmpolcfJJMLxkm0.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/6c0b54-b06e-4d44-8120-370b8688feaf/1/tUSbCOpqJn33NmpolcfJJMLxkm0.mft
rsync://rpki.ripe.net/repository/DEFAULT/tUSbCOpqJn33NmpolcfJJMLxkm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:84:33:18:88:43:45:e8:cd:fc:38:3e:3e:4d:d2:ee:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5449b08ea6a267df7366a6895c7c924c2f1926d
Validity
Not Before: Jun 18 18:00:30 2025 GMT
Not After : Jun 19 18:00:30 2025 GMT
Subject: CN=f929e44d85be73d4941f77858c23fa71945c786e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:0e:3c:74:45:4d:ab:07:d1:05:22:d9:e0:03:
d8:03:b0:75:2c:fa:7d:4b:ce:3b:9c:57:c5:a5:50:
f6:32:f9:84:c1:6d:7e:ce:2e:c8:84:cf:4e:b1:29:
bb:4b:60:16:c4:20:b7:bf:cb:0c:7b:46:8a:03:fe:
ff:88:96:1d:91:d1:21:a6:f8:6a:b3:1a:df:34:3e:
53:99:7e:de:5c:75:fc:e0:5e:51:ec:47:85:cf:70:
87:5d:86:8f:b7:2d:52:4b:75:07:3d:20:50:d3:2c:
6f:df:8f:74:a6:54:14:ae:50:cd:ce:ed:4b:60:a0:
a9:16:9a:4f:4a:cd:47:05:0e:53:02:b5:04:bb:41:
4b:90:21:f2:f4:fb:f2:81:dc:1f:8f:bc:dc:28:99:
0d:4d:b5:68:12:24:5e:41:bb:33:dc:15:26:80:6d:
06:e0:7b:71:9e:27:6a:7f:eb:4c:02:06:7d:30:c9:
8a:ae:de:14:43:2c:0c:2f:6b:1d:ec:d7:c8:5a:1a:
10:9e:ae:58:51:0f:75:f1:d0:96:c6:7c:32:d0:02:
d0:9c:17:1f:ee:de:ea:59:5d:18:73:b2:5a:19:4f:
5a:55:c4:07:2e:a9:a2:fa:d4:67:6e:0b:86:83:e3:
e3:09:73:a8:59:5d:b0:ff:e9:07:ad:a7:33:72:b0:
0a:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:29:E4:4D:85:BE:73:D4:94:1F:77:85:8C:23:FA:71:94:5C:78:6E
X509v3 Authority Key Identifier:
keyid:B5:44:9B:08:EA:6A:26:7D:F7:36:6A:68:95:C7:C9:24:C2:F1:92:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tUSbCOpqJn33NmpolcfJJMLxkm0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6c0b54-b06e-4d44-8120-370b8688feaf/1/tUSbCOpqJn33NmpolcfJJMLxkm0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6c0b54-b06e-4d44-8120-370b8688feaf/1/tUSbCOpqJn33NmpolcfJJMLxkm0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:b3:56:33:56:38:e3:7b:8f:66:2b:5e:88:79:eb:c3:d1:30:
40:72:71:fe:9f:07:62:8e:f3:ac:c7:8b:3f:14:95:9d:64:75:
a5:cb:68:c0:17:00:f4:40:5a:ab:37:10:f7:34:be:56:2d:81:
c6:00:d4:f4:78:dc:ff:a9:ba:cb:4a:3f:f9:13:75:e7:6b:29:
f1:e8:23:04:8d:51:a8:a3:e1:56:31:8c:15:77:9b:08:b3:0a:
08:f3:20:24:66:a8:36:b4:4c:96:a4:1f:e5:17:74:02:e1:ec:
94:a1:fd:14:78:61:69:41:60:c6:42:fd:02:a7:a7:e2:97:f2:
f5:7c:85:5a:87:67:69:f0:8e:57:e8:4b:40:8a:e9:0c:29:ad:
97:ff:26:89:57:49:5d:29:3c:66:25:32:54:08:8b:47:62:4c:
32:e3:d3:cb:48:e9:f6:56:fd:92:28:ef:21:18:be:4e:9f:be:
42:c3:6d:12:25:46:83:96:bd:6c:ac:52:a9:5e:b0:b1:4c:83:
69:d2:9d:65:1f:df:01:b2:45:4f:aa:5f:d7:be:4b:0e:0a:33:
bd:12:b2:16:82:ff:e3:78:a3:d5:11:0b:82:c3:5d:60:6f:f4:
b8:fb:7d:c1:58:af:42:3a:cd:da:a0:8e:5c:ab:9d:d6:91:3d:
09:a8:4e:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 23:05:16 2025 by rpki-client