Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/81e9aa-85ed-4850-b46b-6885aa87c4fd/1/t2lbmOCKN4vw3JRNLxpgofaVSYE.mft
File: t2lbmOCKN4vw3JRNLxpgofaVSYE.mft (raw, json)
Hash identifier: tryXlMgH/BIutSSsgKWSzBRvtreDR91zUlI8L2kpJC8=
Subject key identifier: E9:9D:F9:A0:00:5E:3B:04:45:23:57:E3:AF:85:42:09:5E:07:A5:8C
Authority key identifier: B7:69:5B:98:E0:8A:37:8B:F0:DC:94:4D:2F:1A:60:A1:F6:95:49:81
Certificate issuer: /CN=b7695b98e08a378bf0dc944d2f1a60a1f6954981
Certificate serial: 019771F61B2100F085956EE3049CD614EBAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t2lbmOCKN4vw3JRNLxpgofaVSYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/81e9aa-85ed-4850-b46b-6885aa87c4fd/1/t2lbmOCKN4vw3JRNLxpgofaVSYE.mft
Manifest number: 1590
Signing time: Sun 15 Jun 2025 05:00:43 +0000
Manifest this update: Sun 15 Jun 2025 05:00:43 +0000
Manifest next update: Mon 16 Jun 2025 05:00:43 +0000
Files and hashes: 1: RqpmvtEuocHrmP7Ze69kHKJjV2o.roa (hash: VpfnBez6Qe55xKI1hHxTR48bK27mTUWeo89TggdAg0Q=)
2: t2lbmOCKN4vw3JRNLxpgofaVSYE.crl (hash: A29wfBK0a+D8wlj6V+zNhQykCIk4fapAT6i8GQQYkTM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/81e9aa-85ed-4850-b46b-6885aa87c4fd/1/t2lbmOCKN4vw3JRNLxpgofaVSYE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/81e9aa-85ed-4850-b46b-6885aa87c4fd/1/t2lbmOCKN4vw3JRNLxpgofaVSYE.mft
rsync://rpki.ripe.net/repository/DEFAULT/t2lbmOCKN4vw3JRNLxpgofaVSYE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:f6:1b:21:00:f0:85:95:6e:e3:04:9c:d6:14:eb:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7695b98e08a378bf0dc944d2f1a60a1f6954981
Validity
Not Before: Jun 15 05:00:43 2025 GMT
Not After : Jun 16 05:00:43 2025 GMT
Subject: CN=e99df9a0005e3b04452357e3af8542095e07a58c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:d4:46:ad:90:51:df:dd:b4:d0:e2:b8:8b:d2:
95:7e:52:6a:82:7e:db:b7:ad:89:9d:a4:a2:88:bc:
82:63:95:78:02:1b:ad:67:a4:76:7e:7d:79:bb:2f:
f5:dc:4f:73:5b:20:2a:c8:f9:39:87:b1:d5:e2:22:
45:8d:0a:99:e4:91:9f:58:ae:f4:88:30:ba:9b:ab:
a3:d5:a0:f4:3a:57:64:66:78:b2:b0:53:d8:e5:31:
b1:bb:23:e5:8d:f2:84:c2:de:a0:d6:b7:ac:67:08:
5e:f1:88:e7:ed:02:57:49:fe:7b:e4:5b:3a:11:07:
06:04:59:4e:1f:b2:cb:69:56:ee:b7:cf:5e:98:99:
31:6b:97:e3:c8:39:c1:0a:4d:9a:e6:e3:0f:11:a1:
22:8e:d5:c7:6b:ff:59:15:ff:bb:da:1f:01:46:4f:
7f:6f:16:da:9c:21:63:21:c6:a9:c8:5b:36:f4:41:
a5:75:65:14:28:b3:46:ba:a6:a6:7f:4a:c6:0e:28:
b2:f5:87:00:a7:42:d9:dd:36:d9:71:df:db:6c:4c:
24:1d:82:ca:9f:b1:60:d9:3a:82:bc:d9:c6:3f:9f:
2b:a2:23:fe:07:fe:31:34:ca:f8:5c:9d:ed:ad:34:
f7:e9:62:9f:18:5b:b2:b4:90:56:da:be:ae:70:93:
a9:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:9D:F9:A0:00:5E:3B:04:45:23:57:E3:AF:85:42:09:5E:07:A5:8C
X509v3 Authority Key Identifier:
keyid:B7:69:5B:98:E0:8A:37:8B:F0:DC:94:4D:2F:1A:60:A1:F6:95:49:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t2lbmOCKN4vw3JRNLxpgofaVSYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/81e9aa-85ed-4850-b46b-6885aa87c4fd/1/t2lbmOCKN4vw3JRNLxpgofaVSYE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/81e9aa-85ed-4850-b46b-6885aa87c4fd/1/t2lbmOCKN4vw3JRNLxpgofaVSYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:81:a8:ba:89:2c:0f:e8:fb:8f:ea:2b:e9:a8:c2:b7:42:78:
b3:f5:c8:61:4e:7e:ab:a4:81:c3:18:29:e8:e3:fd:8e:87:d6:
35:ec:59:89:68:1b:90:cd:23:0e:c1:da:ff:27:85:54:bd:03:
01:5b:1c:c2:63:17:f2:c8:60:b1:d8:a3:77:c8:6e:37:c2:7e:
c2:ef:0d:23:b6:0d:62:6b:4c:a8:0b:a7:ec:37:59:0d:83:23:
17:f7:ed:48:69:21:7b:67:82:ec:b7:80:45:e8:04:0d:d0:7f:
2f:c2:35:93:b7:e5:9e:13:29:e4:fe:b2:22:4c:62:f9:3b:ee:
e0:d8:53:7b:f1:47:14:5b:5f:89:dd:91:af:3e:86:e6:4e:37:
92:8a:e9:e3:60:a5:a2:df:64:18:cf:7a:fb:dd:4b:ca:e2:ae:
c4:33:dd:1c:8c:51:3d:4e:e2:eb:78:b0:54:e6:47:47:86:40:
dc:78:18:51:f0:fc:d8:53:19:7a:aa:07:18:a9:f9:e8:4d:1c:
42:06:73:07:aa:85:e6:32:4c:22:71:8b:52:e1:0d:49:e1:89:
98:b4:a4:3f:fa:83:66:6a:dd:b7:30:74:d8:c5:17:a1:63:25:
8b:0b:73:03:c2:fc:32:e9:a9:09:f1:bd:9d:e9:a3:f1:0a:24:
6d:10:20:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 13:20:24 2025 by rpki-client