Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/225af9-f3f5-49e4-ba10-f5ea012b84fc/1/tFOob9MIG4A-3BDSO77akdeTICU.mft
File: tFOob9MIG4A-3BDSO77akdeTICU.mft (raw, json)
Hash identifier: V7obPPk5KuyXgccWSigsEy6X6vcVw9u3aUay0qwStVg=
Subject key identifier: 9F:BD:F5:6A:6F:EC:62:C1:9C:CD:E3:A8:10:93:26:A3:7F:E3:06:6B
Authority key identifier: B4:53:A8:6F:D3:08:1B:80:3E:DC:10:D2:3B:BE:DA:91:D7:93:20:25
Certificate issuer: /CN=b453a86fd3081b803edc10d23bbeda91d7932025
Certificate serial: 01976C98A8E0F77C686234E53EBAB1A7C9E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFOob9MIG4A-3BDSO77akdeTICU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/225af9-f3f5-49e4-ba10-f5ea012b84fc/1/tFOob9MIG4A-3BDSO77akdeTICU.mft
Manifest number: 1521
Signing time: Sat 14 Jun 2025 04:00:33 +0000
Manifest this update: Sat 14 Jun 2025 04:00:33 +0000
Manifest next update: Sun 15 Jun 2025 04:00:33 +0000
Files and hashes: 1: h8oFDHIXTub3TgbD4vBpQOwCmWM.roa (hash: lwyf55gn3PMFr0CsrdeYlJw82BVP+7eUtEsfzrm/dIo=)
2: tFOob9MIG4A-3BDSO77akdeTICU.crl (hash: h7KgkbmsyLsJ5nybNmblOGi1VgH1EWxZJxWKgf2oQBI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/225af9-f3f5-49e4-ba10-f5ea012b84fc/1/tFOob9MIG4A-3BDSO77akdeTICU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/225af9-f3f5-49e4-ba10-f5ea012b84fc/1/tFOob9MIG4A-3BDSO77akdeTICU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tFOob9MIG4A-3BDSO77akdeTICU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:98:a8:e0:f7:7c:68:62:34:e5:3e:ba:b1:a7:c9:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b453a86fd3081b803edc10d23bbeda91d7932025
Validity
Not Before: Jun 14 04:00:33 2025 GMT
Not After : Jun 15 04:00:33 2025 GMT
Subject: CN=9fbdf56a6fec62c19ccde3a8109326a37fe3066b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:50:fa:6e:4f:65:db:a8:f1:eb:2b:df:4e:8c:
a7:cc:b9:dc:35:d4:2e:bc:26:46:2a:65:9f:d3:55:
d0:eb:6f:d7:81:1f:03:7c:b9:9d:c0:11:2c:7f:7c:
7f:70:9e:6c:19:c8:4e:f5:1c:1e:ea:27:dd:3f:82:
b4:23:ef:28:f2:0c:79:0d:9d:d6:d1:5d:70:6c:98:
93:f6:19:6b:88:19:07:8c:55:66:fd:fa:6e:42:f2:
ea:90:c3:c6:a6:d9:bb:14:55:c0:27:29:ed:ab:bf:
cc:ed:b5:5e:f0:6a:b5:17:06:58:22:15:22:26:c7:
15:5c:e6:d8:14:3e:ca:b0:7f:7b:83:28:7c:4e:94:
1b:bd:2e:52:f2:b1:d6:8c:88:57:81:d5:3e:f5:0b:
5c:08:5e:45:ab:59:99:53:61:c1:df:71:97:1e:3b:
62:11:a6:28:89:72:f5:c2:9c:63:80:bf:be:55:4e:
b2:8b:c3:8a:b1:57:29:76:fa:e1:84:98:73:0e:9e:
a8:d4:d7:68:fd:53:1d:35:bf:7e:87:ad:a9:9f:9f:
da:ae:a5:6f:31:41:15:88:f4:8c:b1:8f:ec:79:90:
65:1a:d7:86:47:f3:3f:35:f3:eb:7d:46:24:2a:1a:
ec:a4:d9:08:fb:5b:cc:d1:5b:49:3b:f7:9a:b9:97:
99:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:BD:F5:6A:6F:EC:62:C1:9C:CD:E3:A8:10:93:26:A3:7F:E3:06:6B
X509v3 Authority Key Identifier:
keyid:B4:53:A8:6F:D3:08:1B:80:3E:DC:10:D2:3B:BE:DA:91:D7:93:20:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFOob9MIG4A-3BDSO77akdeTICU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/225af9-f3f5-49e4-ba10-f5ea012b84fc/1/tFOob9MIG4A-3BDSO77akdeTICU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/225af9-f3f5-49e4-ba10-f5ea012b84fc/1/tFOob9MIG4A-3BDSO77akdeTICU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:57:c2:d5:4e:70:16:ef:63:1e:15:ac:c8:47:44:86:31:e5:
15:9a:17:d4:5b:67:57:cf:6b:18:af:61:3a:b7:8b:1b:a4:5d:
4e:08:53:08:da:d7:dc:1f:94:9f:97:c2:5b:a7:8c:5c:49:9d:
6b:18:b6:47:47:23:a2:e1:27:5f:27:30:df:e4:91:05:a4:0c:
8b:75:1d:11:01:35:41:4e:42:56:8b:8c:a7:73:96:83:d3:15:
da:f5:33:2c:0b:eb:d2:12:a6:48:10:2f:7c:ea:cd:6f:52:e5:
54:5e:75:09:36:33:d0:f8:92:6e:e2:67:be:c9:ad:4f:f4:92:
f4:3b:b7:97:1d:be:c7:f4:45:78:14:64:ed:ba:d3:63:cd:28:
db:90:fe:cc:a7:5d:a2:a0:2a:b3:8b:d4:91:f3:87:cd:8d:f4:
88:f1:7c:f0:83:3b:d9:2e:39:3d:88:54:a7:71:dc:a7:3c:a3:
d1:21:78:f6:da:46:f2:fc:65:c0:2d:fc:3e:5c:00:a0:3b:cb:
da:21:cf:44:84:a2:da:8a:37:63:18:c9:02:8d:27:f8:0a:c1:
e7:1d:e5:6a:45:2e:3f:2b:33:4e:19:70:b5:7a:ed:ad:c3:8e:
8e:7a:86:79:24:3b:e4:ee:15:17:bc:6e:ab:5c:76:93:34:a2:
e1:50:2c:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:45:00 2025 by rpki-client