Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/bbedbe-8821-4bd8-bbcc-3adf9b61347d/1/TPzH4BfCyfdjLacpNHa7fkowNlo.mft
File: TPzH4BfCyfdjLacpNHa7fkowNlo.mft (raw, json)
Hash identifier: uYP4M6p0m5cZV8Rn2HN4x7+95HSsDJKQA4MLCuJQK8E=
Subject key identifier: 81:5A:BE:95:EF:8D:B0:D1:DB:A1:CC:93:37:5E:FE:7C:CE:6B:2B:4D
Authority key identifier: 4C:FC:C7:E0:17:C2:C9:F7:63:2D:A7:29:34:76:BB:7E:4A:30:36:5A
Certificate issuer: /CN=4cfcc7e017c2c9f7632da7293476bb7e4a30365a
Certificate serial: 01976BBCFB2C48CA11F87D1F0036520CA80C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TPzH4BfCyfdjLacpNHa7fkowNlo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/bbedbe-8821-4bd8-bbcc-3adf9b61347d/1/TPzH4BfCyfdjLacpNHa7fkowNlo.mft
Manifest number: 1590
Signing time: Sat 14 Jun 2025 00:00:36 +0000
Manifest this update: Sat 14 Jun 2025 00:00:36 +0000
Manifest next update: Sun 15 Jun 2025 00:00:36 +0000
Files and hashes: 1: OQKKfCP8SjNyLo9484epfP4wbRU.roa (hash: GIFqkdSx0szCVRVxH/rU2b7Y/JXh/nneSVo+VlwXpJY=)
2: TPzH4BfCyfdjLacpNHa7fkowNlo.crl (hash: ynyp2ZPaqjPylIv20pwa816qLT1mm8A4sFKY2Qa6Ias=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/bbedbe-8821-4bd8-bbcc-3adf9b61347d/1/TPzH4BfCyfdjLacpNHa7fkowNlo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/bbedbe-8821-4bd8-bbcc-3adf9b61347d/1/TPzH4BfCyfdjLacpNHa7fkowNlo.mft
rsync://rpki.ripe.net/repository/DEFAULT/TPzH4BfCyfdjLacpNHa7fkowNlo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 00:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:bc:fb:2c:48:ca:11:f8:7d:1f:00:36:52:0c:a8:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cfcc7e017c2c9f7632da7293476bb7e4a30365a
Validity
Not Before: Jun 14 00:00:36 2025 GMT
Not After : Jun 15 00:00:36 2025 GMT
Subject: CN=815abe95ef8db0d1dba1cc93375efe7cce6b2b4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:1d:37:52:c9:4f:cb:96:b1:19:4b:bc:19:35:
04:9f:25:44:8a:65:26:01:2d:db:c2:27:a5:81:ea:
39:85:1c:42:06:95:ae:73:64:06:cf:97:f6:7b:86:
36:f8:e0:ae:ad:4e:dd:ec:cc:d4:26:63:9b:12:55:
21:d1:83:9c:54:84:a0:dd:8a:0c:f5:da:87:08:4c:
bb:3a:1e:6a:d8:f6:e5:2f:ad:a0:47:43:67:89:09:
c8:75:a7:cd:9e:35:8f:89:55:a8:4c:c3:e0:a0:fb:
df:d6:97:a9:94:d9:86:f5:3a:fe:1d:db:a2:b3:ab:
2b:8e:6c:4b:f2:d9:52:36:4c:59:39:84:36:ab:34:
2a:76:a7:d9:7f:7a:3f:60:61:6d:e3:43:12:4a:e8:
35:b3:46:b2:4a:6d:ee:45:e2:1f:01:a5:a0:e5:13:
64:a4:4a:e7:54:e1:04:81:b3:95:68:2a:df:9a:f1:
94:e7:92:bc:76:50:c2:25:50:15:98:18:82:2c:82:
17:74:f0:60:9c:6d:00:89:40:3a:e6:9a:3c:30:d5:
87:fe:df:b1:7e:7a:bf:62:df:16:87:b1:f2:12:d8:
d3:9b:60:7a:68:3d:ff:c8:e2:16:3f:9c:a2:66:7b:
b6:b9:bc:69:a3:28:c1:01:87:6c:e5:20:0a:90:df:
1c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:5A:BE:95:EF:8D:B0:D1:DB:A1:CC:93:37:5E:FE:7C:CE:6B:2B:4D
X509v3 Authority Key Identifier:
keyid:4C:FC:C7:E0:17:C2:C9:F7:63:2D:A7:29:34:76:BB:7E:4A:30:36:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TPzH4BfCyfdjLacpNHa7fkowNlo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/bbedbe-8821-4bd8-bbcc-3adf9b61347d/1/TPzH4BfCyfdjLacpNHa7fkowNlo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/bbedbe-8821-4bd8-bbcc-3adf9b61347d/1/TPzH4BfCyfdjLacpNHa7fkowNlo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:8e:8a:55:ff:19:a0:59:8b:8f:d2:77:b9:7b:2f:e5:8d:a3:
cf:c0:d8:02:ae:e9:4c:d8:9d:35:4b:77:1d:9e:d5:e5:69:15:
94:8a:7c:4e:31:47:d3:45:16:d0:d6:5d:8f:48:6f:9f:97:a6:
77:0d:1d:80:d0:d3:d0:b6:65:b5:0f:64:34:58:ad:09:40:2c:
ee:a6:bd:9b:b9:d6:f2:71:c3:a0:7e:3c:1d:ac:fe:12:e5:1f:
0e:b3:2d:be:95:00:37:df:0f:ad:b5:a8:f7:95:bb:05:55:13:
94:88:a5:60:a3:fe:f1:1e:40:3a:20:2f:8e:ca:d1:36:81:e8:
52:c7:60:a1:0a:3c:2c:6e:61:ef:f3:70:db:52:c5:35:2f:c5:
6e:5f:b0:67:0f:49:8b:6d:cf:17:d7:c9:15:8e:65:61:42:56:
99:1d:a1:74:a7:8a:ed:04:3e:32:40:f0:cd:ca:fb:93:b7:e2:
81:72:8c:3a:cd:18:bc:c7:ac:3a:ac:b4:a4:4e:8a:d4:4c:14:
7d:59:f9:df:ab:df:57:e0:63:b4:95:a1:a0:c1:36:df:fa:1c:
8a:28:00:7e:30:59:89:65:20:27:49:c0:ac:c7:d2:ba:97:24:
9b:e1:e9:8f:c1:d1:89:a6:a5:eb:b6:3a:4f:56:89:4a:f1:18:
0c:e3:26:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:11:46 2025 by rpki-client