Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/ba784d-746e-49e7-a408-4abaf53a50af/1/tczdiD9t0RTs9vcnFqhGNPZ6yXc.mft
File: tczdiD9t0RTs9vcnFqhGNPZ6yXc.mft (raw, json)
Hash identifier: 2juSFVVie81qczRQ9q0+Oh7SVlZ8yggI1DYG/vHf9Io=
Subject key identifier: E2:60:51:7D:60:D8:E5:0E:5E:E6:F4:14:A8:75:A9:5B:87:E6:5E:69
Authority key identifier: B5:CC:DD:88:3F:6D:D1:14:EC:F6:F7:27:16:A8:46:34:F6:7A:C9:77
Certificate issuer: /CN=b5ccdd883f6dd114ecf6f72716a84634f67ac977
Certificate serial: 01977D1E660AFD39D4C494A0B4DB6C7AB93D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tczdiD9t0RTs9vcnFqhGNPZ6yXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/ba784d-746e-49e7-a408-4abaf53a50af/1/tczdiD9t0RTs9vcnFqhGNPZ6yXc.mft
Manifest number: 0BC8
Signing time: Tue 17 Jun 2025 09:00:33 +0000
Manifest this update: Tue 17 Jun 2025 09:00:33 +0000
Manifest next update: Wed 18 Jun 2025 09:00:33 +0000
Files and hashes: 1: 6mSAzptlMtavroiRBEbzErufO08.roa (hash: lJ5Bp/WretmXqwZLM24/DP1Oy5iyysz4o7F+olg5yZQ=)
2: tczdiD9t0RTs9vcnFqhGNPZ6yXc.crl (hash: EC+9qXTLoy5oru5SM2EHa+dhhAYOK1fbA6j7x5bBxrM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/ba784d-746e-49e7-a408-4abaf53a50af/1/tczdiD9t0RTs9vcnFqhGNPZ6yXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/ba784d-746e-49e7-a408-4abaf53a50af/1/tczdiD9t0RTs9vcnFqhGNPZ6yXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/tczdiD9t0RTs9vcnFqhGNPZ6yXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 09:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7d:1e:66:0a:fd:39:d4:c4:94:a0:b4:db:6c:7a:b9:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5ccdd883f6dd114ecf6f72716a84634f67ac977
Validity
Not Before: Jun 17 09:00:33 2025 GMT
Not After : Jun 18 09:00:33 2025 GMT
Subject: CN=e260517d60d8e50e5ee6f414a875a95b87e65e69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:f9:c1:cb:32:08:ec:65:92:9f:a1:06:9c:de:
1a:39:2f:79:fc:20:de:bb:08:0c:80:e3:56:34:1e:
13:df:48:cd:25:c9:ee:85:c6:af:50:73:83:e0:90:
ac:3f:64:9a:80:d4:0c:3c:85:c6:41:24:86:4a:0c:
75:67:38:15:24:f5:99:4d:ac:36:3b:f3:92:ef:d7:
b6:d2:89:51:79:88:d1:a8:1b:54:2c:bf:59:3e:ee:
b2:51:5a:0a:43:c7:df:72:e4:d4:3d:ed:b4:03:9b:
c2:82:5c:1a:4e:6a:95:2c:be:7e:bd:b1:2b:f9:10:
d6:46:37:e1:65:7c:11:27:64:1a:6e:42:14:7a:38:
f2:79:e0:00:ea:ee:81:c0:67:fa:d1:d1:9b:80:bb:
82:44:3a:85:7d:38:22:44:8b:0d:bb:7d:6d:88:f0:
f4:47:10:6f:2b:dd:b6:88:8c:2e:07:4e:39:36:31:
fd:90:ae:c6:a7:6d:de:da:2e:6d:96:3e:44:62:9f:
0d:fd:e9:13:52:88:f9:37:ed:db:96:08:ab:08:64:
d6:b8:e3:7a:b0:17:2a:ca:4e:e9:f2:4b:c4:7a:4c:
a8:54:53:77:ad:af:45:af:cb:f0:de:ee:76:7d:92:
24:82:a2:2c:a8:4b:0c:56:28:76:85:ed:22:2d:4f:
44:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:60:51:7D:60:D8:E5:0E:5E:E6:F4:14:A8:75:A9:5B:87:E6:5E:69
X509v3 Authority Key Identifier:
keyid:B5:CC:DD:88:3F:6D:D1:14:EC:F6:F7:27:16:A8:46:34:F6:7A:C9:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tczdiD9t0RTs9vcnFqhGNPZ6yXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/ba784d-746e-49e7-a408-4abaf53a50af/1/tczdiD9t0RTs9vcnFqhGNPZ6yXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/ba784d-746e-49e7-a408-4abaf53a50af/1/tczdiD9t0RTs9vcnFqhGNPZ6yXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:a8:b1:c0:2c:5e:4f:ec:2f:df:ae:27:35:52:e8:80:f6:af:
9b:99:3a:b8:96:c9:41:9d:05:2f:d9:03:55:76:73:1e:a3:6e:
76:5d:48:76:96:5b:a0:0c:95:71:9c:db:9c:9a:9d:26:46:8f:
f2:b9:60:09:f3:88:28:53:ba:8d:85:76:43:d4:05:6a:7d:93:
40:fd:33:56:a7:b6:27:0f:10:f9:4d:cf:84:46:40:ab:31:61:
df:04:07:7a:99:f7:81:9c:a2:a7:73:51:e1:aa:f5:8d:59:8e:
9f:4f:c8:78:63:99:9b:76:21:18:34:95:57:b5:f8:56:4d:36:
4c:b4:23:7c:0b:99:a3:51:a7:5d:3b:12:bc:e5:bf:c5:fe:2e:
e6:f2:66:1e:5e:7b:d4:ec:f4:85:46:43:12:e6:e0:54:84:00:
42:e9:22:51:0d:28:39:15:d0:1a:79:85:80:da:3a:94:4f:6b:
bd:f0:2c:54:eb:41:22:2e:ea:8b:f5:d0:fa:72:d3:be:fe:fb:
71:e0:db:4b:3d:d4:56:94:4a:3d:c2:84:05:3a:fa:d0:5f:44:
79:3c:42:8a:41:d6:30:9f:3b:03:fc:ff:f9:c6:69:fc:5e:f6:
7f:db:4b:96:08:46:71:b0:2e:88:48:26:c7:d6:cd:79:d6:01:
fb:e3:c0:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 17:59:26 2025 by rpki-client