Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/e4d20f-6dc8-497d-a8d6-9dddd6802088/1/tjowlEOcrA9VVwEobNVDc7zmy1A.mft
File: tjowlEOcrA9VVwEobNVDc7zmy1A.mft (raw, json)
Hash identifier: 7FRLi3a9cnHVN7Olespi1+PJNT4hjGHM/9fCeZPETcM=
Subject key identifier: 3C:41:A6:BF:DF:0B:4C:BA:25:88:71:0B:24:77:54:79:C7:BE:C3:C6
Authority key identifier: B6:3A:30:94:43:9C:AC:0F:55:57:01:28:6C:D5:43:73:BC:E6:CB:50
Certificate issuer: /CN=b63a3094439cac0f555701286cd54373bce6cb50
Certificate serial: 0197703E99674B430732F97AF1E14A9B0870
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tjowlEOcrA9VVwEobNVDc7zmy1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/e4d20f-6dc8-497d-a8d6-9dddd6802088/1/tjowlEOcrA9VVwEobNVDc7zmy1A.mft
Manifest number: 0332
Signing time: Sat 14 Jun 2025 21:00:40 +0000
Manifest this update: Sat 14 Jun 2025 21:00:40 +0000
Manifest next update: Sun 15 Jun 2025 21:00:40 +0000
Files and hashes: 1: lCtCcNNufTLwFJhkrWabEjjBy0k.roa (hash: mf7pg/6iwjdXTSMTSKNkIUvc6nvXHprTVxoK02WKi+Y=)
2: tjowlEOcrA9VVwEobNVDc7zmy1A.crl (hash: 2X8+iOg6w7KDs8+MzrhjWq8N0EEkaWnKOsPc9LRI6Oc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/e4d20f-6dc8-497d-a8d6-9dddd6802088/1/tjowlEOcrA9VVwEobNVDc7zmy1A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/e4d20f-6dc8-497d-a8d6-9dddd6802088/1/tjowlEOcrA9VVwEobNVDc7zmy1A.mft
rsync://rpki.ripe.net/repository/DEFAULT/tjowlEOcrA9VVwEobNVDc7zmy1A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:3e:99:67:4b:43:07:32:f9:7a:f1:e1:4a:9b:08:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b63a3094439cac0f555701286cd54373bce6cb50
Validity
Not Before: Jun 14 21:00:40 2025 GMT
Not After : Jun 15 21:00:40 2025 GMT
Subject: CN=3c41a6bfdf0b4cba2588710b24775479c7bec3c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:42:05:67:21:7d:7d:37:d7:60:3b:a0:8a:78:
ec:ea:fe:b3:d1:ad:d4:79:d6:41:05:e2:be:05:8b:
cd:77:66:35:70:a0:af:3f:0e:ec:4f:5f:e1:3a:81:
79:b6:fb:1e:e0:f4:2f:ae:4b:0e:10:24:05:12:bb:
e9:72:e0:88:54:f5:c8:9d:4d:fd:2b:99:00:3c:04:
db:67:e7:ea:dc:5f:86:48:4d:37:d6:55:18:82:2e:
37:0f:b0:7c:f8:c2:36:b3:58:9e:b7:75:79:4d:2b:
da:57:24:f4:08:e3:65:18:37:e9:c8:a1:43:c2:bb:
7f:34:d4:b6:9f:23:19:27:37:25:90:f5:1b:f5:ce:
88:d0:3a:42:1c:4d:be:be:67:b3:48:43:5f:32:a1:
09:55:d6:90:30:3d:79:67:29:88:c3:07:f9:67:b3:
1e:38:8a:6c:8a:64:39:a5:f3:53:fb:ae:fb:0d:68:
4e:6e:52:15:a5:fc:af:3f:60:42:e2:8c:0e:94:42:
e9:de:f8:46:e8:9d:0d:76:b8:cb:b8:df:06:fd:ed:
3f:ac:3c:1f:46:ec:d9:b9:b4:e9:32:2d:9a:33:0f:
c5:97:9a:7a:24:71:51:59:61:2b:2c:29:61:d2:9f:
de:c3:8c:91:a5:a9:42:c3:a6:87:f5:1c:13:9c:6d:
7f:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:41:A6:BF:DF:0B:4C:BA:25:88:71:0B:24:77:54:79:C7:BE:C3:C6
X509v3 Authority Key Identifier:
keyid:B6:3A:30:94:43:9C:AC:0F:55:57:01:28:6C:D5:43:73:BC:E6:CB:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tjowlEOcrA9VVwEobNVDc7zmy1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/e4d20f-6dc8-497d-a8d6-9dddd6802088/1/tjowlEOcrA9VVwEobNVDc7zmy1A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/e4d20f-6dc8-497d-a8d6-9dddd6802088/1/tjowlEOcrA9VVwEobNVDc7zmy1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:86:35:e0:55:3b:05:d0:53:7c:f9:43:d5:1e:4c:0a:6f:60:
b1:5a:9b:83:f2:bb:32:cf:db:62:2c:6c:5d:79:27:21:b1:b3:
28:aa:d2:b9:3f:50:83:b3:be:56:cd:59:90:4e:0e:ed:8a:90:
ef:1e:26:2d:44:a7:79:0f:d2:00:c2:4e:90:ae:2b:e4:29:46:
12:57:20:cc:3a:b7:52:c7:78:3a:8f:2c:fb:35:54:87:c5:32:
be:7a:a8:9a:a0:45:4c:20:e0:10:9c:a4:1b:2e:db:54:02:2a:
e8:11:aa:6a:08:ba:14:75:2b:69:d8:fb:67:53:c2:df:a1:99:
bd:3e:ed:7e:da:95:a3:15:27:ef:c3:66:e1:ea:1f:a3:eb:1b:
e5:c4:06:53:a3:0f:ae:ca:b4:bf:84:b2:52:64:72:7f:99:15:
d5:79:d2:b7:11:15:c2:42:57:cb:d6:70:66:18:57:4c:2d:d5:
5f:fc:ab:b5:28:3b:87:de:bb:71:69:2c:10:50:8d:f2:b3:1a:
a9:fb:08:6c:74:c8:c5:8d:64:cd:7f:6c:67:74:b7:2b:62:6f:
43:ad:fd:88:4c:2f:d2:26:8a:53:88:36:b8:ac:7f:f7:bf:51:
05:c3:65:80:d7:07:77:be:86:2a:7b:83:84:af:e9:7b:0a:0e:
d7:21:f8:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 03:06:10 2025 by rpki-client