Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/03a325-a169-44ce-84ec-5728fb24bf0e/1/tDJYoYz00SKOXHkHDfpjMRaDIMU.mft
File: tDJYoYz00SKOXHkHDfpjMRaDIMU.mft (raw, json)
Hash identifier: 1KzHNa2vNy05Gn//q3dHbm0TNnUuvflNS20FKjYMGfQ=
Subject key identifier: 61:A3:A0:5D:1E:80:D9:85:7B:DC:34:8F:79:F9:C1:91:37:35:3D:E7
Authority key identifier: B4:32:58:A1:8C:F4:D1:22:8E:5C:79:07:0D:FA:63:31:16:83:20:C5
Certificate issuer: /CN=b43258a18cf4d1228e5c79070dfa6331168320c5
Certificate serial: 01976DE2ACECB82C9B4DEF950C77E352A2DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDJYoYz00SKOXHkHDfpjMRaDIMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/03a325-a169-44ce-84ec-5728fb24bf0e/1/tDJYoYz00SKOXHkHDfpjMRaDIMU.mft
Manifest number: 13D2
Signing time: Sat 14 Jun 2025 10:01:01 +0000
Manifest this update: Sat 14 Jun 2025 10:01:01 +0000
Manifest next update: Sun 15 Jun 2025 10:01:01 +0000
Files and hashes: 1: 28g4Blr7nuSyJeVmwy4cGLK9eb8.roa (hash: Q3uRjW4ymMVkt8l5TduM8mGnhXb4GzyvEHZ5j93is8c=)
2: psNnDsOb3MJQFpyT8HfsVNSnwog.roa (hash: KJkUgz1VxvV5lZj00xJ9seKTuebHbMbR6MJlSYq/h5Q=)
3: tDJYoYz00SKOXHkHDfpjMRaDIMU.crl (hash: 7l75YhOJkHXoAkEWrhKL0jiX5wpK7cyXfnsylz0Ions=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/03a325-a169-44ce-84ec-5728fb24bf0e/1/tDJYoYz00SKOXHkHDfpjMRaDIMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/03a325-a169-44ce-84ec-5728fb24bf0e/1/tDJYoYz00SKOXHkHDfpjMRaDIMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDJYoYz00SKOXHkHDfpjMRaDIMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:e2:ac:ec:b8:2c:9b:4d:ef:95:0c:77:e3:52:a2:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b43258a18cf4d1228e5c79070dfa6331168320c5
Validity
Not Before: Jun 14 10:01:01 2025 GMT
Not After : Jun 15 10:01:01 2025 GMT
Subject: CN=61a3a05d1e80d9857bdc348f79f9c19137353de7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c6:e6:8d:41:df:b9:50:c7:6d:37:fb:d0:3e:
e1:b8:6a:00:94:ea:c5:53:91:8d:af:9f:84:1c:b9:
2e:16:5e:02:65:25:b1:2e:f1:68:75:24:14:91:24:
46:9c:d1:bd:7e:f9:b5:b7:50:2c:43:f5:23:db:4f:
14:fb:18:e2:ff:11:16:49:6f:4b:c7:6f:66:0b:d3:
6d:e9:e8:16:ea:ee:8c:0c:18:d0:d4:62:7e:b0:86:
4f:bd:ea:d8:62:08:a6:47:b7:d0:41:c1:4b:a7:43:
57:10:77:c5:1d:a1:35:e3:b4:d1:8c:12:23:f5:20:
72:48:cb:e7:e6:48:92:e6:b4:61:43:25:e1:b9:72:
0a:60:f2:f0:41:ce:8b:ac:69:0d:8a:b8:9f:7a:9e:
2c:2b:b5:2a:72:25:23:bd:9e:42:e4:84:a1:e5:14:
e7:b3:fa:60:3c:1c:70:8f:c6:3f:b5:17:16:8f:ab:
e1:26:25:26:d2:98:05:f1:14:15:0e:c2:12:88:84:
0d:86:5b:70:00:e3:10:23:56:3c:a1:ff:89:c3:dd:
9b:2b:36:5d:b6:5e:88:fa:21:74:a4:dd:8b:08:5c:
60:54:cc:61:3b:5d:15:53:7b:ea:27:51:0c:7b:01:
8a:5f:31:bf:de:77:ed:1a:f6:59:b7:49:58:0b:6e:
e8:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:A3:A0:5D:1E:80:D9:85:7B:DC:34:8F:79:F9:C1:91:37:35:3D:E7
X509v3 Authority Key Identifier:
keyid:B4:32:58:A1:8C:F4:D1:22:8E:5C:79:07:0D:FA:63:31:16:83:20:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDJYoYz00SKOXHkHDfpjMRaDIMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/03a325-a169-44ce-84ec-5728fb24bf0e/1/tDJYoYz00SKOXHkHDfpjMRaDIMU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/03a325-a169-44ce-84ec-5728fb24bf0e/1/tDJYoYz00SKOXHkHDfpjMRaDIMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:a9:ac:07:30:5a:34:a0:42:5e:7c:60:f0:a5:33:98:0f:fc:
bd:e4:53:46:cc:9a:17:16:39:2d:e6:40:54:e8:98:73:04:3e:
b1:70:18:7c:d0:ef:36:f8:9e:b5:79:a1:52:51:43:27:4a:69:
1d:83:03:73:5b:99:d0:30:b5:a5:a7:aa:9d:f2:4a:f2:3a:d1:
37:3a:68:f1:e2:7e:5a:3a:5c:3f:6f:1d:74:c0:40:a1:0e:6f:
e1:38:da:2d:f8:22:91:3b:e6:17:ea:8a:f5:21:c9:41:96:1e:
27:07:d5:74:93:06:ec:65:e3:0e:e9:99:1c:cd:8f:16:7d:5f:
c7:49:c5:7b:c9:21:c3:c3:14:84:6f:58:de:d9:66:12:02:21:
58:cf:a3:88:49:96:87:df:54:5c:ad:a9:8a:fd:8f:18:59:9f:
82:85:56:f0:ed:a2:ca:2f:37:29:be:ae:6d:91:1c:ff:1b:ff:
0a:3b:8a:f3:c5:77:90:a7:b5:33:99:94:46:4b:6c:fa:69:6a:
8a:d7:67:47:16:13:7e:09:e5:73:9a:1e:42:77:d4:fb:31:b8:
d8:d2:b3:b7:5e:f0:b8:fa:17:2c:7d:88:b8:bb:5d:e8:7e:37:
86:03:6e:6e:d6:7d:b1:75:ac:4a:4e:49:41:af:29:c6:93:5c:
b2:ea:f6:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 20:35:00 2025 by rpki-client