Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/f87a2e-46b1-4a66-a90c-699835c92bfe/1/tm6nNZIhwbd9bMAG97ZwapqQgpk.mft
File: tm6nNZIhwbd9bMAG97ZwapqQgpk.mft (raw, json)
Hash identifier: kdjfDySJFybm80srbXPlsxbWBmT2yTYYzsQsLlbsLBQ=
Subject key identifier: CB:89:45:A2:EE:57:A7:29:10:5F:08:DA:F4:4F:40:6C:60:C7:2F:A2
Authority key identifier: B6:6E:A7:35:92:21:C1:B7:7D:6C:C0:06:F7:B6:70:6A:9A:90:82:99
Certificate issuer: /CN=b66ea7359221c1b77d6cc006f7b6706a9a908299
Certificate serial: 01976C2B046DAD0F44B87BB5A06BE62A7705
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tm6nNZIhwbd9bMAG97ZwapqQgpk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/f87a2e-46b1-4a66-a90c-699835c92bfe/1/tm6nNZIhwbd9bMAG97ZwapqQgpk.mft
Manifest number: 159C
Signing time: Sat 14 Jun 2025 02:00:47 +0000
Manifest this update: Sat 14 Jun 2025 02:00:47 +0000
Manifest next update: Sun 15 Jun 2025 02:00:47 +0000
Files and hashes: 1: P-haGLcvZvQGvLFpnob9lOaXmTs.roa (hash: 4zCg+GccZn/4aPxyfbii7VCbnRc/Ws0LuYTysih4ku8=)
2: tm6nNZIhwbd9bMAG97ZwapqQgpk.crl (hash: mx8H8udESA/zyFV3yWVrbNX+0tUh2mXUjj/VlTL0gQ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/f87a2e-46b1-4a66-a90c-699835c92bfe/1/tm6nNZIhwbd9bMAG97ZwapqQgpk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/f87a2e-46b1-4a66-a90c-699835c92bfe/1/tm6nNZIhwbd9bMAG97ZwapqQgpk.mft
rsync://rpki.ripe.net/repository/DEFAULT/tm6nNZIhwbd9bMAG97ZwapqQgpk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:2b:04:6d:ad:0f:44:b8:7b:b5:a0:6b:e6:2a:77:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b66ea7359221c1b77d6cc006f7b6706a9a908299
Validity
Not Before: Jun 14 02:00:47 2025 GMT
Not After : Jun 15 02:00:47 2025 GMT
Subject: CN=cb8945a2ee57a729105f08daf44f406c60c72fa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:68:29:e3:ed:01:96:b8:5f:5b:3d:1d:17:a5:
3a:83:b1:61:e4:51:7c:2a:5f:bd:35:f9:20:d1:28:
31:5f:69:fc:97:9e:4c:50:de:0c:6a:8f:2d:c9:2e:
77:9b:4c:c3:d0:7d:42:4f:13:c9:15:5d:91:31:c7:
38:74:6b:ff:ac:ef:1b:69:7c:1a:03:e0:72:77:3d:
e9:26:75:5e:27:34:90:4f:55:e2:7d:38:ad:7a:e8:
5a:0b:62:75:00:be:37:e2:a7:9c:c4:e8:c2:d8:b7:
21:73:47:5f:09:9b:94:59:72:84:bd:cd:bb:55:6d:
f0:9f:20:d1:45:88:6f:11:da:8a:58:de:f2:97:fa:
31:e0:65:2d:02:2c:cb:d7:55:75:5b:fd:88:07:15:
69:9b:c4:6d:bb:35:af:b6:45:bb:09:68:57:16:e0:
8d:00:1b:54:35:99:4c:03:ae:e5:05:a3:70:f1:82:
21:b0:14:18:43:1b:98:d8:a5:7a:ed:2d:00:fe:42:
30:35:55:99:22:a9:8c:c6:db:1a:cf:39:5a:66:50:
66:5b:1a:ef:23:15:a8:7f:6f:5a:82:f8:af:ea:fd:
c5:72:d8:e4:1c:85:18:f9:21:bf:57:55:8b:26:ce:
79:09:8a:da:12:40:21:cd:76:00:74:c4:b0:44:41:
f2:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:89:45:A2:EE:57:A7:29:10:5F:08:DA:F4:4F:40:6C:60:C7:2F:A2
X509v3 Authority Key Identifier:
keyid:B6:6E:A7:35:92:21:C1:B7:7D:6C:C0:06:F7:B6:70:6A:9A:90:82:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tm6nNZIhwbd9bMAG97ZwapqQgpk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/f87a2e-46b1-4a66-a90c-699835c92bfe/1/tm6nNZIhwbd9bMAG97ZwapqQgpk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/f87a2e-46b1-4a66-a90c-699835c92bfe/1/tm6nNZIhwbd9bMAG97ZwapqQgpk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:5a:3d:95:34:52:9c:d4:e1:a5:03:9d:6f:da:ed:c5:bf:dd:
0e:03:09:5d:17:fd:b3:79:c9:63:6e:ac:92:ab:88:9f:1d:94:
7f:6a:b2:bf:a1:7f:b2:5a:1b:b8:71:07:15:82:86:33:29:ef:
fb:99:45:8c:2b:94:d8:30:f0:9a:29:31:40:e8:a1:d2:22:a2:
48:c8:1f:27:cd:96:45:ed:d5:30:e0:dc:a2:95:79:92:97:4a:
b6:83:c9:34:37:0c:5d:2e:e1:f1:42:ec:27:4f:06:7b:61:87:
8f:da:e3:44:f8:39:ad:82:90:8c:c6:87:06:bf:05:f0:50:93:
c0:9d:54:4a:cf:13:d3:75:8d:27:90:c4:92:e2:58:87:a0:20:
f6:4f:e6:04:5c:c3:19:76:ec:02:77:fa:9a:a6:e8:29:95:52:
ff:01:75:70:f1:c2:7a:4f:cc:f5:1a:d8:8b:63:c8:0b:b3:5b:
0e:75:aa:ae:9e:0f:e5:af:da:d4:4e:7f:67:05:f2:cb:89:9f:
42:eb:05:eb:c2:ce:94:4a:7f:73:1a:8e:25:81:7e:be:a1:df:
f9:b4:7f:7c:1e:ef:22:7b:07:f1:f7:98:7e:d7:61:4a:0a:24:
dc:78:98:79:35:3c:54:0a:e1:9e:60:3a:55:0e:8f:4b:41:18:
ba:9a:a8:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:28:41 2025 by rpki-client