Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/5c92d1-41e5-443e-a250-01baf78ec73f/1/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.mft
File: tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.mft (raw, json)
Hash identifier: /S1b2AWdcCz+QxSQdTQy8D27IGOqkav3uAoUo5UO+kc=
Subject key identifier: 4F:0D:E1:C7:F2:09:DE:E7:7A:CB:9C:CE:78:73:1F:9E:23:9C:59:A6
Authority key identifier: B6:32:1E:EB:F4:F9:5B:E9:F8:1F:0F:23:3F:89:F3:60:2D:2F:00:74
Certificate issuer: /CN=b6321eebf4f95be9f81f0f233f89f3602d2f0074
Certificate serial: 01977865CF7300EF5AB81AD47E7664E51118
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/5c92d1-41e5-443e-a250-01baf78ec73f/1/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.mft
Manifest number: 1281
Signing time: Mon 16 Jun 2025 11:00:27 +0000
Manifest this update: Mon 16 Jun 2025 11:00:27 +0000
Manifest next update: Tue 17 Jun 2025 11:00:27 +0000
Files and hashes: 1: 9ykTfaxNeEIbk7wOARPuxoyYN9I.roa (hash: t511WQ9hIp1WWZqq1Z1Tp5plKXaqmdK3FlJidSm8B5Q=)
2: TVu5aQ7CXqbPlsSn9wNLY8tYilE.roa (hash: B5zfotvyVUd7f8T5ZgXVly2iMRkx4aTHfTXgfsPh/CI=)
3: tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.crl (hash: FXX45fXGFoCKApoDodgvt68S9hVVqoa4/SVHWV45ynM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/5c92d1-41e5-443e-a250-01baf78ec73f/1/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/5c92d1-41e5-443e-a250-01baf78ec73f/1/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 11:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:78:65:cf:73:00:ef:5a:b8:1a:d4:7e:76:64:e5:11:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6321eebf4f95be9f81f0f233f89f3602d2f0074
Validity
Not Before: Jun 16 11:00:27 2025 GMT
Not After : Jun 17 11:00:27 2025 GMT
Subject: CN=4f0de1c7f209dee77acb9cce78731f9e239c59a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b1:ab:72:31:74:97:39:d4:04:7f:ed:5d:6e:
ae:78:5a:5f:a6:f8:f5:39:ca:a4:77:17:22:e4:2f:
74:52:d2:61:41:22:d9:04:9a:60:89:00:a6:54:fa:
f8:c7:eb:f1:d6:32:b8:9d:96:30:78:88:89:1d:5c:
89:49:72:0f:5e:17:25:e0:f0:c1:90:37:59:bb:4a:
73:47:3e:23:39:e0:95:91:c0:20:67:b4:c1:58:7a:
63:c5:f8:94:83:6e:eb:d4:03:24:7b:ea:4f:00:ee:
4b:61:b8:6a:71:a6:9b:3f:d9:37:02:25:37:41:8f:
60:25:7f:fb:c3:94:5b:4c:91:3b:69:68:72:71:34:
b8:10:92:a4:ef:58:31:ee:1d:45:e9:a9:26:b5:a5:
53:30:0c:f1:74:d4:cd:b3:9d:90:ab:e8:26:fb:83:
cf:9f:a8:ac:ab:64:c4:26:45:76:68:d4:d2:ef:91:
1d:f9:78:6f:09:bf:00:c7:6f:7b:5f:08:5e:c7:2a:
6d:eb:a7:7f:ef:5c:be:2f:7e:7a:af:9a:54:90:d9:
31:fa:86:d1:c1:d8:7b:e3:c3:77:d0:e0:e4:3a:c8:
e2:77:40:15:a3:cb:18:61:5a:b2:39:a2:c3:25:52:
7a:65:19:5a:1d:dd:d1:0b:a9:24:0f:a1:67:82:d6:
d8:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:0D:E1:C7:F2:09:DE:E7:7A:CB:9C:CE:78:73:1F:9E:23:9C:59:A6
X509v3 Authority Key Identifier:
keyid:B6:32:1E:EB:F4:F9:5B:E9:F8:1F:0F:23:3F:89:F3:60:2D:2F:00:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5c92d1-41e5-443e-a250-01baf78ec73f/1/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5c92d1-41e5-443e-a250-01baf78ec73f/1/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:a1:cd:55:a0:0b:90:9b:c2:d9:8c:b7:d1:30:24:7e:c7:20:
cb:d9:af:ea:61:f9:08:73:2f:c7:d4:54:7a:08:5e:25:60:c1:
4b:0e:b1:06:26:1d:33:7c:ce:e6:89:be:72:0f:56:75:b5:62:
f8:3b:6c:29:7f:fd:c5:49:b6:69:58:ce:1f:8d:f1:56:95:ab:
f6:d7:08:0b:b5:78:06:6c:0e:01:b6:ca:3d:8a:19:d1:2d:9c:
34:ff:71:e4:ad:64:b0:c1:7d:ab:15:b7:ee:70:e1:07:53:8a:
fd:12:6f:ae:c0:c9:71:4f:3a:c2:29:9d:d2:aa:cd:7c:6b:a1:
92:9b:d6:87:f6:0d:ee:3e:85:bb:12:64:f1:ff:14:2f:25:da:
c6:57:15:b8:56:fa:1b:2a:fe:1b:50:70:e0:11:2b:7c:f9:0c:
2f:8a:75:fe:7a:45:e0:ff:73:f0:a0:21:7a:58:f1:42:92:bc:
4a:82:32:d3:1a:c3:5b:fb:03:94:b7:26:90:63:1b:25:04:6c:
8d:97:93:86:60:28:6a:a5:af:8d:63:2e:b1:c9:1d:6f:99:15:
11:4a:7b:71:7b:c2:2c:fb:b5:3a:c0:cf:94:34:e8:43:d2:ca:
b3:65:e2:0c:68:f8:88:ab:21:cb:cb:3c:95:2e:49:c2:6f:c8:
e6:75:3b:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 17:43:17 2025 by rpki-client