Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/36b3fa-c925-4b09-b8ea-32f59fa5b311/1/tDX1JtfQkJ5_Sn3yxcrXLSr2ssM.mft
File: tDX1JtfQkJ5_Sn3yxcrXLSr2ssM.mft (raw, json)
Hash identifier: 2t7uasrgHjONSryV1uA06+cwh7jdb0bHztc8WtZ1ME0=
Subject key identifier: 29:43:7E:F7:0B:25:A2:CB:93:E7:5B:96:7B:FC:EA:64:D4:7C:F8:44
Authority key identifier: B4:35:F5:26:D7:D0:90:9E:7F:4A:7D:F2:C5:CA:D7:2D:2A:F6:B2:C3
Certificate issuer: /CN=b435f526d7d0909e7f4a7df2c5cad72d2af6b2c3
Certificate serial: 01976F62E8A6C1FBF5CA8F5E5DA99063BCD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDX1JtfQkJ5_Sn3yxcrXLSr2ssM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/36b3fa-c925-4b09-b8ea-32f59fa5b311/1/tDX1JtfQkJ5_Sn3yxcrXLSr2ssM.mft
Manifest number: 158F
Signing time: Sat 14 Jun 2025 17:00:42 +0000
Manifest this update: Sat 14 Jun 2025 17:00:42 +0000
Manifest next update: Sun 15 Jun 2025 17:00:42 +0000
Files and hashes: 1: mAE3_QFYxLK2bxPNIhFbVq5Pufo.roa (hash: 8Db1Fqvg0Iw4fJZLlY1WJu1zNG21SFNmOlpLtn7VYgI=)
2: tDX1JtfQkJ5_Sn3yxcrXLSr2ssM.crl (hash: BhvSq4yk/fWz1WZLgvUiMPGaeeVbtTdAS4EQK7o/PWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/36b3fa-c925-4b09-b8ea-32f59fa5b311/1/tDX1JtfQkJ5_Sn3yxcrXLSr2ssM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/36b3fa-c925-4b09-b8ea-32f59fa5b311/1/tDX1JtfQkJ5_Sn3yxcrXLSr2ssM.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDX1JtfQkJ5_Sn3yxcrXLSr2ssM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 17:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:62:e8:a6:c1:fb:f5:ca:8f:5e:5d:a9:90:63:bc:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b435f526d7d0909e7f4a7df2c5cad72d2af6b2c3
Validity
Not Before: Jun 14 17:00:42 2025 GMT
Not After : Jun 15 17:00:42 2025 GMT
Subject: CN=29437ef70b25a2cb93e75b967bfcea64d47cf844
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:5c:27:ba:f7:7a:cf:8d:43:62:04:56:d2:30:
bb:c6:0c:25:e3:ec:1a:4a:a1:32:ba:87:f1:bb:0a:
5a:45:ed:56:bd:f5:83:1c:29:df:d6:0e:98:1e:96:
d3:73:8b:f9:e5:02:1f:99:89:be:8f:10:e8:92:25:
83:9c:bc:18:2f:ce:02:fd:f3:0e:1d:e5:f8:9a:9d:
23:2f:e3:dc:3a:db:5a:e9:26:fc:f8:98:55:6f:d4:
bd:08:26:4f:61:5d:f5:e5:70:d2:a9:0f:42:b6:19:
68:0e:7f:58:51:b0:f4:12:02:5f:ff:cc:21:3e:ba:
41:2c:6c:21:10:c1:22:77:9c:b9:d2:e4:42:fa:0a:
18:8d:4e:d9:26:73:37:2e:d4:e5:d1:f4:58:4b:06:
9c:13:6d:fe:13:73:d2:3d:2d:9d:aa:1a:be:1f:10:
b1:ed:15:66:eb:0b:94:ea:91:75:c1:c3:d1:39:3a:
38:4b:02:7f:87:3a:11:63:e6:b9:4f:b5:05:98:06:
2d:6b:4d:7a:77:79:a2:be:d1:cb:ec:7a:92:bd:55:
c7:48:e8:a1:18:c0:58:93:8a:d6:bf:e2:d4:19:e9:
ca:91:2e:ce:25:e2:03:0d:5a:e4:52:f6:40:8a:40:
9a:aa:cb:a5:5d:81:75:41:cd:9a:d9:55:b5:4c:25:
a8:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:43:7E:F7:0B:25:A2:CB:93:E7:5B:96:7B:FC:EA:64:D4:7C:F8:44
X509v3 Authority Key Identifier:
keyid:B4:35:F5:26:D7:D0:90:9E:7F:4A:7D:F2:C5:CA:D7:2D:2A:F6:B2:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDX1JtfQkJ5_Sn3yxcrXLSr2ssM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/36b3fa-c925-4b09-b8ea-32f59fa5b311/1/tDX1JtfQkJ5_Sn3yxcrXLSr2ssM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/36b3fa-c925-4b09-b8ea-32f59fa5b311/1/tDX1JtfQkJ5_Sn3yxcrXLSr2ssM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:e9:43:f4:c5:e4:b5:b5:08:4d:fb:49:11:19:21:16:19:83:
df:d9:cd:69:14:eb:17:27:5a:30:8d:68:15:cf:50:46:d8:9e:
ac:b8:83:e7:a2:db:f4:a1:d2:50:dc:b8:11:dc:c4:35:5a:54:
a8:dc:76:7f:d2:39:57:80:ae:7b:26:fb:a5:05:67:23:e2:7b:
e3:d6:63:f8:21:22:d8:5e:89:00:96:30:2d:47:90:f9:36:b3:
61:b6:8f:68:b8:56:35:61:aa:05:ba:06:87:95:c1:12:8b:ba:
d5:7c:5b:fc:85:aa:28:75:6b:e0:97:98:a2:46:c0:55:40:da:
ce:ee:e2:f8:4a:9f:96:fa:34:08:88:f3:88:87:65:ef:91:ce:
bf:0a:90:6b:83:09:7f:be:73:81:5a:81:58:cb:96:b5:b9:94:
56:c3:4e:6f:b3:da:ca:e4:60:34:e5:1e:c8:45:8f:99:ea:5f:
62:d6:6a:1b:e7:1c:8a:8c:60:82:f7:83:87:05:9e:b9:33:8c:
f7:af:82:d8:94:e6:05:61:2e:49:9c:f1:ac:86:59:a8:db:af:
45:36:5e:0a:bd:87:74:1d:36:64:76:7a:80:16:98:d4:fd:69:
ce:d7:9a:52:00:0e:65:7e:c6:2f:5e:57:31:b3:36:31:fe:49:
75:37:55:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 00:51:22 2025 by rpki-client