Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/8506a1-91dd-4cfc-8c04-6cdf0de52746/1/tsKjHWDtJWEZl-e33kqbbyYG7TQ.mft
File: tsKjHWDtJWEZl-e33kqbbyYG7TQ.mft (raw, json)
Hash identifier: otL1mxmmK1HTDTfBUyKw7QODJaWvlz5lA/8Wi6jO8uI=
Subject key identifier: B2:2F:06:D0:32:C8:96:23:EF:B5:60:6D:64:B5:2A:F9:42:F9:6E:03
Authority key identifier: B6:C2:A3:1D:60:ED:25:61:19:97:E7:B7:DE:4A:9B:6F:26:06:ED:34
Certificate issuer: /CN=b6c2a31d60ed25611997e7b7de4a9b6f2606ed34
Certificate serial: 019872CFD45FF29CF7F9CBFD3312CA87B493
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tsKjHWDtJWEZl-e33kqbbyYG7TQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/8506a1-91dd-4cfc-8c04-6cdf0de52746/1/tsKjHWDtJWEZl-e33kqbbyYG7TQ.mft
Manifest number: 1614
Signing time: Mon 04 Aug 2025 02:01:19 +0000
Manifest this update: Mon 04 Aug 2025 02:01:19 +0000
Manifest next update: Tue 05 Aug 2025 02:01:19 +0000
Files and hashes: 1: kKMC8jThQpDwK6v7GaumYPI4bHE.roa (hash: jzEV+uNk9P/+bwhKx1o1i5qEZ9QBMjGpsu47uocCOtY=)
2: tsKjHWDtJWEZl-e33kqbbyYG7TQ.crl (hash: dnvTYhnFX30ZDpvhOIscEe9Ko+3Lcev5mbcm5HQFhjg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/8506a1-91dd-4cfc-8c04-6cdf0de52746/1/tsKjHWDtJWEZl-e33kqbbyYG7TQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/8506a1-91dd-4cfc-8c04-6cdf0de52746/1/tsKjHWDtJWEZl-e33kqbbyYG7TQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/tsKjHWDtJWEZl-e33kqbbyYG7TQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:d4:5f:f2:9c:f7:f9:cb:fd:33:12:ca:87:b4:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6c2a31d60ed25611997e7b7de4a9b6f2606ed34
Validity
Not Before: Aug 4 02:01:19 2025 GMT
Not After : Aug 5 02:01:19 2025 GMT
Subject: CN=b22f06d032c89623efb5606d64b52af942f96e03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b6:79:88:78:9c:7e:c9:60:4d:ef:9b:0f:1f:
8d:87:a1:2d:8d:e1:d1:73:92:85:24:48:fa:4a:d2:
08:c8:21:69:4e:e4:95:8f:2e:9f:ad:24:37:10:d4:
fd:8c:e5:b9:ad:a8:c0:d1:3f:1d:d2:86:01:ae:52:
75:5f:bc:06:a2:eb:50:43:19:4e:98:ec:53:af:58:
3c:e0:f9:d1:05:a3:51:b8:5d:38:6b:53:53:0d:e9:
ac:b0:fb:e6:d9:85:69:33:36:0d:3c:b9:8f:2e:5d:
44:e6:32:7b:d6:81:09:e2:80:eb:5b:4d:7b:b2:f1:
c5:3b:16:37:3c:be:6f:d7:d8:2c:74:11:89:13:69:
f3:b6:52:b5:01:63:ec:34:13:28:a3:fd:99:c5:e5:
03:72:9b:4e:a8:d6:09:42:9f:35:89:c6:cf:ad:21:
c0:fa:41:99:66:f7:d6:9f:7e:fb:85:fd:7c:b6:49:
ba:49:e0:a4:7e:b2:6a:33:f9:d2:63:e9:41:c3:44:
94:11:84:ff:38:d1:5f:5a:b2:a4:37:8c:ef:24:85:
21:81:3b:5a:85:78:c6:fc:20:ec:0e:37:5c:20:18:
58:af:6f:1c:74:44:d1:22:23:09:1d:ec:2a:45:5a:
32:ae:5d:6d:b8:f8:ea:89:93:e6:fb:74:02:44:9a:
44:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:2F:06:D0:32:C8:96:23:EF:B5:60:6D:64:B5:2A:F9:42:F9:6E:03
X509v3 Authority Key Identifier:
keyid:B6:C2:A3:1D:60:ED:25:61:19:97:E7:B7:DE:4A:9B:6F:26:06:ED:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tsKjHWDtJWEZl-e33kqbbyYG7TQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/8506a1-91dd-4cfc-8c04-6cdf0de52746/1/tsKjHWDtJWEZl-e33kqbbyYG7TQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/8506a1-91dd-4cfc-8c04-6cdf0de52746/1/tsKjHWDtJWEZl-e33kqbbyYG7TQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:ae:36:2a:67:d2:09:39:64:59:6b:a7:b5:e0:83:74:67:2e:
a1:11:0d:5b:b4:54:f8:a8:9c:39:53:4a:00:29:e2:00:69:5d:
ef:ae:3e:a4:6c:58:6b:4b:ec:fc:7d:5c:8f:9c:65:f6:f0:99:
de:37:e6:08:c7:a0:8e:2f:e2:67:fd:d4:f5:b5:b6:ea:48:e4:
22:e5:24:1e:0b:23:76:c7:07:a9:88:c3:97:5e:08:d9:29:2b:
fc:fa:d8:3d:84:3e:b9:70:18:ac:60:a7:34:82:79:46:44:ad:
d2:7b:09:ac:d8:d3:88:c8:aa:f0:90:62:82:a7:3e:20:90:12:
84:1d:17:85:72:e0:26:6d:23:d4:f0:eb:2d:56:35:56:0f:df:
79:88:63:05:ff:71:cb:eb:c3:8b:45:f8:b6:fd:8b:df:3d:b5:
d3:ad:5d:6b:57:71:ca:03:64:5a:bd:c1:2a:e9:24:71:9d:a4:
da:69:06:85:8e:60:02:3b:32:57:68:56:ba:22:b6:c7:61:09:
b0:bb:1c:6e:21:ab:0f:21:52:f2:69:9f:ea:70:6b:43:ad:0b:
4a:74:1d:65:62:33:f5:48:ce:3f:46:a2:b6:aa:75:cf:3b:88:
66:54:ac:55:ae:21:a4:27:31:5b:26:32:b0:1f:a5:40:c5:44:
55:c7:18:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:14:12 2025 by rpki-client