Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/283e8f-bda2-49dc-8afe-af137ccb2b69/1/tcOYwHMlxA59dtI5ahvoXEL9wsg.mft
File: tcOYwHMlxA59dtI5ahvoXEL9wsg.mft (raw, json)
Hash identifier: 9GA0x9osHeJ9Hgg0NtCpptyakwxUtG07sB8JZlg50kY=
Subject key identifier: 8A:D5:41:32:7D:4F:45:04:07:8B:6A:DB:E6:2E:4A:66:F9:05:63:3E
Authority key identifier: B5:C3:98:C0:73:25:C4:0E:7D:76:D2:39:6A:1B:E8:5C:42:FD:C2:C8
Certificate issuer: /CN=b5c398c07325c40e7d76d2396a1be85c42fdc2c8
Certificate serial: 01976EF50540FFCB775F0462ADB1471B2339
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tcOYwHMlxA59dtI5ahvoXEL9wsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/283e8f-bda2-49dc-8afe-af137ccb2b69/1/tcOYwHMlxA59dtI5ahvoXEL9wsg.mft
Manifest number: 050E
Signing time: Sat 14 Jun 2025 15:00:40 +0000
Manifest this update: Sat 14 Jun 2025 15:00:40 +0000
Manifest next update: Sun 15 Jun 2025 15:00:40 +0000
Files and hashes: 1: HeTNJZjhVHC3QazbToD7IxfPGhg.roa (hash: k/lPKk3dyIcZTARgL9fxQcpWqaVNc6/eODt+UcBvC5M=)
2: tcOYwHMlxA59dtI5ahvoXEL9wsg.crl (hash: 3u+dCq1VQLhZJDFtxq1pqLkgZ3BGVGkhSA+fwVEcIYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/283e8f-bda2-49dc-8afe-af137ccb2b69/1/tcOYwHMlxA59dtI5ahvoXEL9wsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/283e8f-bda2-49dc-8afe-af137ccb2b69/1/tcOYwHMlxA59dtI5ahvoXEL9wsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/tcOYwHMlxA59dtI5ahvoXEL9wsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:f5:05:40:ff:cb:77:5f:04:62:ad:b1:47:1b:23:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5c398c07325c40e7d76d2396a1be85c42fdc2c8
Validity
Not Before: Jun 14 15:00:40 2025 GMT
Not After : Jun 15 15:00:40 2025 GMT
Subject: CN=8ad541327d4f4504078b6adbe62e4a66f905633e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ae:e8:61:3a:5e:76:37:55:ed:a8:8c:5f:99:
6e:f0:b9:6e:72:0f:c5:cc:53:cb:8a:2c:93:bd:7e:
50:a3:ff:09:8a:7a:9e:fa:3c:9c:79:17:9a:2a:b3:
5d:18:9b:7e:b3:8d:31:b3:f6:81:d1:66:fc:55:c9:
60:5d:ce:28:6c:88:de:01:5e:37:35:51:ec:be:98:
1a:42:c5:bd:76:f6:d1:a5:14:e8:5d:3e:38:42:09:
e9:7e:c2:c1:c8:3e:ae:62:63:b6:5e:1f:0c:fe:bc:
b5:df:92:37:c9:07:09:0e:dc:e8:3d:fc:9d:c0:f7:
fc:9d:6c:7b:e4:42:e6:9b:e2:10:5a:f6:7b:0b:c9:
82:70:b0:c0:de:dd:14:69:57:a6:ef:64:f0:a9:34:
7d:fc:08:4e:2a:d7:2d:ab:87:7d:38:5b:d2:11:38:
cf:31:85:df:15:57:55:55:ca:67:e8:6f:ca:d3:20:
2d:5f:62:e2:df:08:9a:3e:11:c1:10:e0:41:50:b7:
ca:fd:26:d6:1c:d4:ac:66:88:8b:a4:5a:e2:42:02:
e4:83:f4:53:77:9c:e9:d2:27:68:e0:40:ff:7c:25:
0a:b5:e4:d3:a9:d9:a6:8f:ef:9c:f3:47:06:f8:4f:
ce:36:96:b5:6b:e0:19:43:8f:1c:6b:d1:ca:b5:17:
c7:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:D5:41:32:7D:4F:45:04:07:8B:6A:DB:E6:2E:4A:66:F9:05:63:3E
X509v3 Authority Key Identifier:
keyid:B5:C3:98:C0:73:25:C4:0E:7D:76:D2:39:6A:1B:E8:5C:42:FD:C2:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tcOYwHMlxA59dtI5ahvoXEL9wsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/283e8f-bda2-49dc-8afe-af137ccb2b69/1/tcOYwHMlxA59dtI5ahvoXEL9wsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/283e8f-bda2-49dc-8afe-af137ccb2b69/1/tcOYwHMlxA59dtI5ahvoXEL9wsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:bb:07:e0:17:41:d6:c9:e7:7c:95:9f:c0:89:a2:0d:39:1c:
10:bb:ab:1c:50:5d:ba:88:f8:58:2b:e3:b0:30:60:64:56:36:
fc:a9:18:17:f7:a0:d0:21:30:1c:28:7a:65:4f:0b:d4:37:19:
b7:3a:98:e8:fb:a8:da:fe:0a:1c:b7:8a:90:8d:d2:70:3f:25:
83:9e:fd:78:c8:76:6b:c2:4e:e8:fb:22:5c:af:72:0e:c9:a1:
6c:bc:90:f1:64:39:26:93:f4:48:50:ec:51:37:44:91:8c:3a:
8f:73:18:b3:55:79:1f:33:c9:44:a4:79:1e:80:a6:c5:7a:fa:
0d:60:1e:5a:e3:c6:41:e0:b6:25:40:69:22:f0:de:12:83:fa:
d7:96:23:c7:9a:14:03:98:d4:34:bb:7a:51:c0:ff:b3:86:8d:
8b:49:ed:59:ef:10:7b:6b:f4:55:c9:07:30:52:4f:29:ea:6d:
7b:9b:99:eb:46:c0:8c:39:cc:a1:54:2f:7c:4b:6d:8d:73:1a:
67:d4:4c:23:80:95:10:c2:fe:1f:1f:60:6b:78:0f:0b:c8:c6:
3b:c2:d5:94:39:05:c2:43:96:91:3d:a2:e0:b5:7e:55:18:b7:
41:64:4b:8a:af:8f:ae:5b:e4:53:12:b0:d3:54:28:50:90:3a:
b2:6e:43:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:11:27 2025 by rpki-client