Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/250127-85d7-46b4-8865-bf0da5e8ce7f/1/TecEA8nS15Ys8RPZPEYvlJPYc2I.mft
File: TecEA8nS15Ys8RPZPEYvlJPYc2I.mft (raw, json)
Hash identifier: 0V30V0z1V7I+eQe0tbMnJLBvgofps9UlL6nWAfQ7J3c=
Subject key identifier: BF:0A:09:E5:5C:66:2F:CB:7A:89:1E:E5:33:D3:23:F4:25:2B:E4:1F
Authority key identifier: 4D:E7:04:03:C9:D2:D7:96:2C:F1:13:D9:3C:46:2F:94:93:D8:73:62
Certificate issuer: /CN=4de70403c9d2d7962cf113d93c462f9493d87362
Certificate serial: 01977E31269B97A12B4B19F1203B99842EA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TecEA8nS15Ys8RPZPEYvlJPYc2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/250127-85d7-46b4-8865-bf0da5e8ce7f/1/TecEA8nS15Ys8RPZPEYvlJPYc2I.mft
Manifest number: 1597
Signing time: Tue 17 Jun 2025 14:00:39 +0000
Manifest this update: Tue 17 Jun 2025 14:00:39 +0000
Manifest next update: Wed 18 Jun 2025 14:00:39 +0000
Files and hashes: 1: GbfL1ZrfRVmwsoIJhPo9qm8dkFU.roa (hash: 5rCvc90C0u6LOlrowQ6t9CQlQZi5SGZg6tgn8PV2EF4=)
2: TecEA8nS15Ys8RPZPEYvlJPYc2I.crl (hash: haVx3xKgj7Z9CBbvTZ+v+mRKjlLY4Atk0cTwHE/N4Qg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/250127-85d7-46b4-8865-bf0da5e8ce7f/1/TecEA8nS15Ys8RPZPEYvlJPYc2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/250127-85d7-46b4-8865-bf0da5e8ce7f/1/TecEA8nS15Ys8RPZPEYvlJPYc2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/TecEA8nS15Ys8RPZPEYvlJPYc2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 13:26:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7e:31:26:9b:97:a1:2b:4b:19:f1:20:3b:99:84:2e:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4de70403c9d2d7962cf113d93c462f9493d87362
Validity
Not Before: Jun 17 14:00:39 2025 GMT
Not After : Jun 18 14:00:39 2025 GMT
Subject: CN=bf0a09e55c662fcb7a891ee533d323f4252be41f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:3d:08:74:43:05:d2:99:63:2a:5e:84:bf:9a:
7b:b8:50:af:06:c3:13:57:2d:b1:5b:56:f1:6d:7c:
93:c4:65:90:e9:ac:f8:d6:e8:b9:27:34:30:dc:3a:
2a:1e:f2:ad:7b:2f:6b:c8:01:d0:95:92:67:70:a1:
4f:9d:ab:a6:b4:68:cc:d9:68:92:8f:0c:1e:43:b2:
ab:e1:a4:b6:9e:a5:79:d0:58:dc:e2:44:30:87:e4:
e1:15:76:77:5f:9f:f5:56:b6:84:35:f8:b2:60:1b:
24:09:24:67:33:e3:7a:ab:ff:07:89:9e:bb:66:d4:
0d:1d:65:2d:e3:d5:ac:31:89:31:8a:ed:cc:70:5b:
bf:bb:be:d6:36:96:9d:75:2e:94:55:fa:59:ae:0e:
ec:0a:e2:d8:d3:58:9c:7e:21:91:c5:fd:7a:11:29:
77:af:03:4b:5e:0d:36:7c:66:2b:a3:06:96:a7:33:
80:60:44:8c:2b:24:d9:53:ec:cf:21:8a:19:1f:17:
21:b5:8c:97:8b:a3:e3:8e:d0:7d:13:18:fb:60:b2:
15:2a:f6:20:3d:5f:70:a1:40:4a:ac:bd:f5:1c:5c:
7c:76:68:93:29:b7:e5:32:bf:ed:f3:5b:7b:1d:44:
5d:86:5e:56:bb:02:26:1c:76:d9:46:d3:e3:fd:03:
2c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:0A:09:E5:5C:66:2F:CB:7A:89:1E:E5:33:D3:23:F4:25:2B:E4:1F
X509v3 Authority Key Identifier:
keyid:4D:E7:04:03:C9:D2:D7:96:2C:F1:13:D9:3C:46:2F:94:93:D8:73:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TecEA8nS15Ys8RPZPEYvlJPYc2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/250127-85d7-46b4-8865-bf0da5e8ce7f/1/TecEA8nS15Ys8RPZPEYvlJPYc2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/250127-85d7-46b4-8865-bf0da5e8ce7f/1/TecEA8nS15Ys8RPZPEYvlJPYc2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:f5:43:f5:1d:2e:2d:69:f5:35:40:87:0e:9e:6d:f7:02:1f:
9f:0f:7a:8a:04:1a:ab:82:40:ed:6b:66:f7:70:95:a4:31:56:
93:b1:85:cc:6b:0a:e1:5e:8b:e1:30:f0:ed:bf:23:25:a1:21:
1d:df:d4:7d:48:23:d0:29:7d:c7:e5:ff:2a:31:9d:63:60:b8:
41:cc:30:da:9c:89:1b:5b:9c:65:7d:de:a2:64:69:65:7a:2a:
60:d4:ed:f5:72:53:df:46:88:92:fa:3c:b8:ec:fc:fa:d7:dc:
49:f4:06:50:f5:e5:77:d4:23:bf:f6:0f:f3:f1:95:af:1c:83:
41:88:00:52:c6:a6:53:3d:3c:0e:e0:bd:b3:09:97:72:91:10:
32:14:fb:48:d2:1c:3e:aa:68:71:58:de:27:e1:c1:7e:29:a4:
d2:6a:f7:3d:85:10:be:86:86:ef:98:12:92:93:d5:79:3a:36:
e7:e4:0f:43:bc:e1:93:06:0e:42:ce:ac:6c:c4:96:9a:c3:e7:
88:5a:48:f5:d4:dc:42:6c:97:ee:36:2e:c7:ae:49:8a:79:60:
37:f3:8d:3d:e9:15:a0:eb:c1:ab:a2:c9:47:14:6d:06:db:02:
b8:74:e2:08:57:53:ab:36:57:5b:0f:42:a0:30:b1:19:5d:3d:
c3:50:57:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 22:04:48 2025 by rpki-client