Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/6ef23e-99ba-4c69-92e3-6bb7080409b4/1/T7OopKDYxa4BqWlbBB7SxtApap4.mft
File: T7OopKDYxa4BqWlbBB7SxtApap4.mft (raw, json)
Hash identifier: 0TXblKXBFvZjo/B9SUcffxVXpZkI59MSg36o0iWQowk=
Subject key identifier: 67:43:70:29:5A:7D:F0:EF:2F:BF:38:79:53:CE:57:05:BB:4E:14:23
Authority key identifier: 4F:B3:A8:A4:A0:D8:C5:AE:01:A9:69:5B:04:1E:D2:C6:D0:29:6A:9E
Certificate issuer: /CN=4fb3a8a4a0d8c5ae01a9695b041ed2c6d0296a9e
Certificate serial: 01976929C73E5DDA90FB05132CD99625288D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T7OopKDYxa4BqWlbBB7SxtApap4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/6ef23e-99ba-4c69-92e3-6bb7080409b4/1/T7OopKDYxa4BqWlbBB7SxtApap4.mft
Manifest number: 0C83
Signing time: Fri 13 Jun 2025 12:00:35 +0000
Manifest this update: Fri 13 Jun 2025 12:00:35 +0000
Manifest next update: Sat 14 Jun 2025 12:00:35 +0000
Files and hashes: 1: T7OopKDYxa4BqWlbBB7SxtApap4.crl (hash: mo78GvkrUxV8x+cgqKH9iZoDqxTZZhr7jFPSXet2mio=)
2: f56823CiqLOMuTriNLS3PUZ78yU.roa (hash: jqCq9kSPvKsgvdkfpEOf8qz0/6Off+XucTySJaLEm7M=)
3: zKhksjQURk5K1Dod96pBNAB3OII.roa (hash: gundq1JGdYbfKX8ieC3GIfS0gF7vi8HY0pmpJJSYlFs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/6ef23e-99ba-4c69-92e3-6bb7080409b4/1/T7OopKDYxa4BqWlbBB7SxtApap4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/6ef23e-99ba-4c69-92e3-6bb7080409b4/1/T7OopKDYxa4BqWlbBB7SxtApap4.mft
rsync://rpki.ripe.net/repository/DEFAULT/T7OopKDYxa4BqWlbBB7SxtApap4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 12:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:29:c7:3e:5d:da:90:fb:05:13:2c:d9:96:25:28:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fb3a8a4a0d8c5ae01a9695b041ed2c6d0296a9e
Validity
Not Before: Jun 13 12:00:35 2025 GMT
Not After : Jun 14 12:00:35 2025 GMT
Subject: CN=674370295a7df0ef2fbf387953ce5705bb4e1423
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:18:7f:cf:85:a3:ef:34:0d:42:14:89:54:a0:
aa:22:a8:d5:8a:e9:04:4b:49:8d:07:40:11:96:96:
ba:1e:a7:46:af:1e:ec:fe:69:ff:91:97:dd:aa:10:
44:10:03:51:85:97:4e:99:9d:2e:fa:cd:16:d0:dd:
40:82:5e:b4:b4:25:6d:62:50:ec:10:10:22:57:a3:
a8:29:bd:df:ef:7b:79:aa:3f:48:c9:1f:9a:80:71:
ef:ee:8d:2f:2a:fe:64:95:c1:8b:68:f5:f5:7f:59:
5a:b0:66:cb:8e:18:f5:41:2f:5e:21:9a:0e:ba:55:
fe:a3:38:bc:5f:b1:db:ac:21:c8:8b:47:0d:1c:ab:
5a:12:58:2f:bc:9f:1f:45:0f:a5:e0:23:1b:79:a9:
52:f5:e5:47:e2:2c:e5:b0:0f:cf:96:65:bc:ff:cb:
76:da:a0:ce:63:9a:76:d1:35:2e:04:1e:a2:18:a4:
3a:5e:3c:4f:06:82:0f:7c:c1:36:1d:f6:ce:b1:ca:
d9:38:7e:56:6e:52:17:49:cf:c9:e6:64:5e:63:dd:
e4:78:f6:32:38:34:e5:20:46:7e:66:02:94:a0:ef:
11:e8:bf:cc:0d:b8:ac:3b:92:00:85:6e:52:77:3b:
33:1c:6b:a1:85:4d:42:52:2d:98:af:e6:eb:7d:2f:
83:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:43:70:29:5A:7D:F0:EF:2F:BF:38:79:53:CE:57:05:BB:4E:14:23
X509v3 Authority Key Identifier:
keyid:4F:B3:A8:A4:A0:D8:C5:AE:01:A9:69:5B:04:1E:D2:C6:D0:29:6A:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T7OopKDYxa4BqWlbBB7SxtApap4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/6ef23e-99ba-4c69-92e3-6bb7080409b4/1/T7OopKDYxa4BqWlbBB7SxtApap4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/6ef23e-99ba-4c69-92e3-6bb7080409b4/1/T7OopKDYxa4BqWlbBB7SxtApap4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:c3:f5:4d:92:b0:d6:ff:cd:bc:ec:79:c0:70:88:29:cf:f1:
84:09:62:31:79:1f:5c:b9:21:2e:4c:34:3f:0b:08:e9:2f:ca:
51:67:01:8f:27:b4:30:a1:79:6b:dc:c8:79:e7:35:03:58:5d:
e2:20:82:58:9c:3f:e1:6c:83:12:88:95:23:63:a4:a6:d2:e4:
5c:b2:ec:23:62:f5:3f:93:db:b3:15:b9:44:9d:b3:6a:c6:e8:
9c:1e:06:87:84:87:74:dd:a0:60:ca:20:3f:c2:91:b5:2a:45:
2b:8d:db:eb:a4:f1:39:0c:e9:fb:cf:9a:f6:13:69:d7:df:ef:
d5:75:94:ff:65:ab:e5:e7:c6:e2:6b:47:95:c8:0a:32:65:de:
ce:e1:db:c9:7f:27:15:3a:5f:5e:a0:c5:19:f3:bd:d1:59:bd:
52:12:76:5c:83:f8:80:36:40:25:5d:cd:74:c0:66:e4:0e:72:
1b:3c:5d:50:35:6c:89:7c:20:18:6d:ae:05:02:07:c2:20:a8:
37:bf:41:b1:f0:5d:a5:b9:5e:9f:cb:f6:9c:30:05:db:a0:9f:
a8:e8:19:dd:c6:6a:fd:1c:5f:4e:39:ff:bc:6c:3e:e1:50:b7:
9f:cd:5e:cb:f7:c1:32:d4:99:3a:c8:d6:14:5a:af:bd:c8:1a:
fd:de:95:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:16:30 2025 by rpki-client