Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/3a7e49-9d27-4e4e-aa36-6f6ccb6e2cda/1/Td0Pnc2IlJuPOjdxBjVioFdnkpA.mft
File: Td0Pnc2IlJuPOjdxBjVioFdnkpA.mft (raw, json)
Hash identifier: liP6RNlxN7d6pas57Bz7bJwHpOmM0VreFg7tiokMjM4=
Subject key identifier: 46:AC:23:14:83:ED:6F:55:6D:0A:DE:58:46:82:43:EC:7C:79:62:79
Authority key identifier: 4D:DD:0F:9D:CD:88:94:9B:8F:3A:37:71:06:35:62:A0:57:67:92:90
Certificate issuer: /CN=4ddd0f9dcd88949b8f3a3771063562a057679290
Certificate serial: 01976FD0C424930ED0301C34FFFF517F307C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Td0Pnc2IlJuPOjdxBjVioFdnkpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/3a7e49-9d27-4e4e-aa36-6f6ccb6e2cda/1/Td0Pnc2IlJuPOjdxBjVioFdnkpA.mft
Manifest number: 1592
Signing time: Sat 14 Jun 2025 19:00:41 +0000
Manifest this update: Sat 14 Jun 2025 19:00:41 +0000
Manifest next update: Sun 15 Jun 2025 19:00:41 +0000
Files and hashes: 1: Td0Pnc2IlJuPOjdxBjVioFdnkpA.crl (hash: ZRZlqFE/5U3MShfoo+ObpaB7jsuPaRV27yIi09NxLLo=)
2: j2scll5jpWJtbLkshsiLm7lQWV4.roa (hash: oBr/N8q4deuJLs5MxsiKxc5IMYfXJKPf/aAvK/FNRFg=)
3: kZMSHFwhjt5ByeIL4QTKEiDJjZQ.roa (hash: WpstqOcmslj7HDAeoS/gg7u0eBQmjbTvTylTqyOzeKc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/3a7e49-9d27-4e4e-aa36-6f6ccb6e2cda/1/Td0Pnc2IlJuPOjdxBjVioFdnkpA.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/3a7e49-9d27-4e4e-aa36-6f6ccb6e2cda/1/Td0Pnc2IlJuPOjdxBjVioFdnkpA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Td0Pnc2IlJuPOjdxBjVioFdnkpA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:d0:c4:24:93:0e:d0:30:1c:34:ff:ff:51:7f:30:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ddd0f9dcd88949b8f3a3771063562a057679290
Validity
Not Before: Jun 14 19:00:41 2025 GMT
Not After : Jun 15 19:00:41 2025 GMT
Subject: CN=46ac231483ed6f556d0ade58468243ec7c796279
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c4:50:c2:3b:1c:b7:22:5c:30:ca:4f:72:45:
4a:73:17:1a:1e:a2:59:75:42:9b:ae:9a:f8:fa:e0:
49:0c:20:b7:93:a3:e7:3a:02:01:76:12:21:e1:79:
d2:9b:c6:d2:1d:44:3b:f2:bc:c5:bf:79:1e:ef:a7:
1f:ee:be:ec:5b:e9:e8:b6:73:ed:f7:28:62:6c:d9:
c6:93:28:a1:f4:b0:4d:e6:0b:b2:58:84:97:bd:ea:
f1:e9:d3:37:59:d1:1a:98:6c:0d:d8:cf:cc:08:5e:
90:a8:c7:dc:eb:4b:ae:fd:c3:6d:11:96:19:e7:fd:
51:cc:75:a1:c0:71:30:95:6f:51:af:21:0f:24:e0:
bd:e8:9c:87:53:de:0e:82:41:31:63:59:e7:8e:62:
66:a7:cb:b6:e8:dd:58:17:7f:eb:15:c0:03:04:46:
39:63:36:9d:ce:de:a4:20:8c:32:07:3a:d8:24:9e:
4b:cd:69:61:1f:44:b2:36:b4:80:2d:50:0e:5b:9a:
d3:36:8c:84:5c:08:62:f8:a1:6f:0e:1b:c7:6c:e1:
70:10:f8:78:79:d6:41:f1:67:b1:da:10:6f:9f:b0:
fe:2c:8c:80:21:48:1f:2b:a7:13:60:52:df:46:30:
f7:8b:78:c8:a7:3e:49:0c:b4:5e:a3:ad:64:4a:02:
f3:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:AC:23:14:83:ED:6F:55:6D:0A:DE:58:46:82:43:EC:7C:79:62:79
X509v3 Authority Key Identifier:
keyid:4D:DD:0F:9D:CD:88:94:9B:8F:3A:37:71:06:35:62:A0:57:67:92:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Td0Pnc2IlJuPOjdxBjVioFdnkpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/3a7e49-9d27-4e4e-aa36-6f6ccb6e2cda/1/Td0Pnc2IlJuPOjdxBjVioFdnkpA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/3a7e49-9d27-4e4e-aa36-6f6ccb6e2cda/1/Td0Pnc2IlJuPOjdxBjVioFdnkpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:fc:a2:0f:df:70:a6:82:cd:cb:a2:7e:1b:bf:25:d2:85:80:
a7:db:94:88:6a:f1:5f:ad:33:9c:ce:56:1c:d8:73:c4:03:2b:
75:92:a2:fb:3b:45:12:12:df:31:f3:78:c2:1b:0c:67:a3:5d:
b2:21:fb:34:0e:aa:26:f3:d7:f6:b9:b2:78:2d:e2:86:9d:c1:
6e:ba:ea:cf:86:5e:88:53:9e:93:d4:71:56:aa:72:fa:74:db:
e4:8f:62:35:dd:a5:a4:c5:0b:6c:69:7b:3e:b7:1d:dd:1a:10:
c5:e5:84:87:ad:66:a4:57:2a:ed:c4:5f:a1:b1:b7:97:2b:e3:
09:92:aa:1e:1c:52:3f:24:d8:d3:80:9b:2f:d1:1d:cc:2d:07:
c2:d6:e1:46:7e:5d:99:32:89:a4:16:d7:e3:7e:a9:03:24:b8:
da:1f:3d:d2:15:e7:79:12:5d:fc:12:e9:bb:b3:30:50:37:ae:
62:6d:34:23:a9:4d:04:ff:bf:bf:47:bd:6f:44:30:72:bb:ed:
2e:ca:07:eb:1a:0a:9d:01:06:08:a5:9d:3e:56:84:c0:db:0e:
2e:0f:cd:a5:76:af:1a:bb:f5:1f:eb:58:b1:38:25:6d:51:1f:
be:46:f3:ab:b7:18:2f:59:f8:1b:fe:45:3f:ca:6c:d0:2c:81:
4e:b1:2d:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:17:50 2025 by rpki-client