Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.mft
File: tfGesN1I4bJJJJCLtbaEjMFnhUY.mft (raw, json)
Hash identifier: xFNS0wTw1faGG6/q2f02YG1IC1pnU94AYBozQ1p5rxU=
Subject key identifier: 43:B8:AD:FD:C9:4B:E2:C7:62:CC:26:94:DD:B9:F7:98:AE:C0:88:05
Authority key identifier: B5:F1:9E:B0:DD:48:E1:B2:49:24:90:8B:B5:B6:84:8C:C1:67:85:46
Certificate issuer: /CN=b5f19eb0dd48e1b24924908bb5b6848cc1678546
Certificate serial: 01976EBE0415EBCEBBA003B049A0A9772F20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tfGesN1I4bJJJJCLtbaEjMFnhUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.mft
Manifest number: 1590
Signing time: Sat 14 Jun 2025 14:00:35 +0000
Manifest this update: Sat 14 Jun 2025 14:00:35 +0000
Manifest next update: Sun 15 Jun 2025 14:00:35 +0000
Files and hashes: 1: dMyCW0_TBkO1nYNBL_n11IKNaBI.roa (hash: WTKaBFp1QPSs1ROafjR4WJfZR1PRtcVHfjnPURoJWEQ=)
2: iWujOO5h_XVMHY2nSFxBko0o46E.roa (hash: hfZ0O6pRdbOdpr8hVRCYtXgEcI0jSP4lHjfs8kAt2hk=)
3: qrrQR7WuIleyYS2sO7I0VvjROUo.roa (hash: 4JE74Aq/xmpPqZIRbZrMja/xvjU3RSpM11pAC7vf4sE=)
4: tfGesN1I4bJJJJCLtbaEjMFnhUY.crl (hash: HvO9wAvh2+wEfsQSDS8GSgfFJVZdsncIz10hy2hwGNE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.mft
rsync://rpki.ripe.net/repository/DEFAULT/tfGesN1I4bJJJJCLtbaEjMFnhUY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:be:04:15:eb:ce:bb:a0:03:b0:49:a0:a9:77:2f:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5f19eb0dd48e1b24924908bb5b6848cc1678546
Validity
Not Before: Jun 14 14:00:35 2025 GMT
Not After : Jun 15 14:00:35 2025 GMT
Subject: CN=43b8adfdc94be2c762cc2694ddb9f798aec08805
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2c:da:c4:1f:8e:b2:d5:d7:1d:21:a3:f1:71:
77:9a:e2:50:cd:3c:f3:3f:cd:05:82:66:bf:0a:a0:
c6:17:35:bc:e5:34:be:1a:f4:29:8c:d9:ad:ee:df:
88:2b:d2:37:8f:26:a4:da:4f:6b:4e:75:b4:f5:4d:
3c:5b:28:cc:42:9c:67:76:07:91:47:8e:0d:24:29:
15:0b:a7:49:7a:61:09:16:6b:ad:61:b6:30:90:01:
b4:3e:36:2c:5a:b1:0b:6a:82:48:a0:65:c6:a2:8c:
0b:e5:cc:d9:2d:ba:0e:ba:ed:d1:85:f8:fd:c6:90:
a6:fc:98:60:ca:4f:1e:65:61:a8:12:03:cd:d1:c7:
63:a5:91:c3:e1:bd:5d:5a:ad:1e:51:0a:a4:ef:b5:
e5:58:40:fa:1b:3a:b4:7e:ce:c3:a3:2a:77:40:c0:
d6:f7:ac:f8:45:56:cd:0b:03:21:58:71:67:ed:9c:
5e:b5:fd:19:d3:6e:f1:6f:c0:1c:1c:2b:cb:21:96:
48:b6:9e:c4:ec:38:e6:50:1d:40:53:34:97:17:23:
77:26:97:4d:ba:3a:18:a6:2d:2f:34:bf:2b:bf:83:
43:56:61:18:91:b1:25:d4:57:a0:f0:ba:80:b6:27:
45:9b:78:1b:7d:5f:32:4c:d9:23:bd:21:fb:0c:f5:
3e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:B8:AD:FD:C9:4B:E2:C7:62:CC:26:94:DD:B9:F7:98:AE:C0:88:05
X509v3 Authority Key Identifier:
keyid:B5:F1:9E:B0:DD:48:E1:B2:49:24:90:8B:B5:B6:84:8C:C1:67:85:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tfGesN1I4bJJJJCLtbaEjMFnhUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:4c:dd:95:c5:67:50:ed:5b:81:29:1e:11:e1:78:b4:2d:96:
71:c5:7b:a3:f8:49:ea:bf:9a:1e:29:1d:df:32:da:ed:30:b8:
b7:ba:ee:d6:f1:1f:45:46:ce:59:df:eb:47:cf:da:9e:78:e5:
42:30:9d:dc:5c:c7:36:01:ca:8f:b2:18:c4:1d:37:1b:7c:09:
07:88:8e:ab:67:c4:6c:70:38:ce:32:cc:e4:f0:6d:e6:ad:15:
d5:bb:18:61:59:c7:be:c4:99:f5:ff:71:f2:57:21:c9:b7:15:
be:da:b9:06:1a:ab:dd:c3:a5:6c:6c:56:fb:cc:da:1e:6e:a5:
89:23:17:1e:7e:de:96:84:68:23:5e:bd:20:b8:cf:58:12:46:
3e:2a:eb:24:ac:4b:c2:ee:b9:33:be:30:74:cf:bd:fe:3d:df:
64:f9:bb:80:1c:c8:62:8e:6c:d7:16:f7:02:b4:03:cd:c7:f8:
91:b6:e8:74:f2:9f:43:3b:ba:e4:05:4a:ed:64:d8:8c:fd:68:
2b:e2:1d:cb:a1:08:ba:21:92:f5:bc:b3:4f:4c:8f:d6:13:07:
af:c2:30:68:09:9a:a6:64:94:e3:b3:e8:84:bd:4a:b9:58:c3:
ba:cb:a9:69:bd:f8:d3:81:75:01:01:4c:2c:de:9a:70:bb:57:
04:d8:3f:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 18:47:39 2025 by rpki-client