
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.mft
File: Ts9TAHx5zF4vLXNWupEhp4wMdxQ.mft (raw, json)
Hash identifier: ZNdDo1ZkSRkOXeVQanIuH4c0KF4q50WFfCQfR3A04uk=
Subject key identifier: 22:BE:5C:DA:7B:FF:B4:DD:4E:CD:59:3A:AB:65:F2:C5:C4:D1:47:98
Authority key identifier: 4E:CF:53:00:7C:79:CC:5E:2F:2D:73:56:BA:91:21:A7:8C:0C:77:14
Certificate issuer: /CN=4ecf53007c79cc5e2f2d7356ba9121a78c0c7714
Certificate serial: 01969560B9B62E9F74E3F689842C1AEBF4CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.mft
Manifest number: 157C
Signing time: Sat 03 May 2025 09:01:06 +0000
Manifest this update: Sat 03 May 2025 09:01:06 +0000
Manifest next update: Sun 04 May 2025 09:01:06 +0000
Files and hashes: 1: 77nHJ74F1fFAwUbmMeRLrxeDdWA.roa (hash: 2Mtt2AaUFR4ZOfRNdKyuPT3cj2EQ+qy46BQe2ut00YY=)
2: G7v3pCkQ6hmfhpbVxzOwUWwmzDY.roa (hash: nVHjBCeWZEPbhgav/+qfuSQLmW0a+8zRMZx9D7jY6PU=)
3: Ts9TAHx5zF4vLXNWupEhp4wMdxQ.crl (hash: gJK4HYPIOxlGCgsSzQLhwZqBXVvQ3E3ti0HWlSw6854=)
4: ZLnsYJrehSHy13eQaMRY1Tbep5I.roa (hash: beMY8QS7fWlkYI5VTaRGjskfF3hsi1HR7CrNo9yaWBM=)
5: jUW3uJuzvpMts6ZS_PpOE0-vHy4.roa (hash: QVsKQjI9Ob132etLfwnFEQDpraGA87DL9fvaD59Kiac=)
6: pKRMivQnD51ZFV7c6H0aZRYX5KE.roa (hash: dd7sm2yDcuKSn+d8LJcn2eO/489D0rgWU2bg+0xyjIU=)
7: s2kaxqyHVyCTqaRomO4ohfBebsc.roa (hash: vuPF+RwNPBvTGLZXAOB0JJk86Umi+Vc+1JKtKmoQbqM=)
8: utyHAEFwJnyFPJNvun5WhnSWaes.roa (hash: 6wOcZjzxIP7txWQ7ykuvtlJ7+2Z7YXGjpvL74E0vFA8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:95:60:b9:b6:2e:9f:74:e3:f6:89:84:2c:1a:eb:f4:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ecf53007c79cc5e2f2d7356ba9121a78c0c7714
Validity
Not Before: May 3 09:01:06 2025 GMT
Not After : May 4 09:01:06 2025 GMT
Subject: CN=22be5cda7bffb4dd4ecd593aab65f2c5c4d14798
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ac:88:64:87:c4:59:71:df:fb:3a:69:8e:df:
58:eb:7d:0d:0a:d2:cd:e8:8e:37:c7:af:04:39:68:
91:b0:9a:87:14:10:27:42:9c:6a:21:c3:ed:9f:43:
a9:05:ad:68:d3:11:12:f2:67:7f:5b:07:69:4e:40:
5b:ce:87:f1:fa:66:88:1a:c6:fe:7d:75:1a:77:a0:
d3:cd:17:bc:df:c2:40:61:b1:a4:3c:b1:3b:a9:73:
4d:19:48:22:17:ac:3a:60:96:36:98:21:a7:a5:24:
44:df:b7:3a:a8:60:84:66:aa:d9:9f:d2:75:36:e0:
05:5d:09:e4:d9:1d:61:fe:d5:c3:cd:fb:dc:57:11:
2a:ff:ef:ae:83:fa:3c:ee:77:dc:b2:cb:1e:cb:0e:
ad:f6:01:3d:c3:15:6c:5b:da:95:f4:fc:6a:86:69:
b9:d3:ad:88:69:0e:59:0f:8e:be:85:b1:f4:af:b7:
40:01:f3:ed:a7:00:ec:19:59:99:07:11:1a:85:9e:
28:2e:12:2f:68:2f:92:d6:c9:9a:fb:a4:98:d4:71:
d2:15:a3:39:a3:33:e1:07:50:90:9b:4f:8d:61:ba:
12:eb:f1:a2:fd:e3:8b:47:31:9d:41:66:18:79:23:
ad:df:3c:b6:3a:a7:eb:a5:87:f0:d1:b2:13:0a:d3:
37:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:BE:5C:DA:7B:FF:B4:DD:4E:CD:59:3A:AB:65:F2:C5:C4:D1:47:98
X509v3 Authority Key Identifier:
keyid:4E:CF:53:00:7C:79:CC:5E:2F:2D:73:56:BA:91:21:A7:8C:0C:77:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:de:d3:d4:1a:93:73:a6:5b:cd:9f:74:e4:44:e9:df:70:a6:
b1:36:cd:4d:f3:91:8d:b2:cb:28:74:a9:85:43:6c:8a:3e:c4:
e2:e7:79:7d:0d:ba:9e:5e:88:b7:03:fb:71:2f:de:d3:bf:af:
62:ac:ab:04:43:a4:4c:d0:72:30:2e:17:14:1c:aa:a7:10:97:
4e:8b:56:70:30:20:8f:10:6a:4a:05:00:e5:bb:59:ca:37:7f:
c5:89:4e:eb:52:56:07:d2:25:4f:60:c8:f1:97:0e:6e:7a:40:
8b:22:a5:e4:59:c0:4c:33:7f:1d:84:7d:c4:dc:7c:50:7b:47:
37:34:21:90:9e:42:eb:3f:f5:26:46:06:03:14:db:8d:17:0d:
59:96:de:bb:8e:47:c0:b7:5b:88:a7:e9:1c:88:f6:a2:3a:aa:
62:03:ed:9a:81:e4:92:dc:4a:e2:16:c4:52:0e:2a:79:bf:37:
2a:ec:31:ad:c8:da:d3:4c:dc:26:0d:86:a5:2d:5b:92:1f:93:
42:4b:49:d2:3a:a3:87:5b:f0:f6:de:fa:c3:bd:62:6e:41:16:
26:2c:c6:9d:d3:d0:7f:9c:d7:c8:a5:8a:25:c0:cf:b2:b5:7f:
4e:b1:8c:73:9b:29:ea:df:8e:b9:86:09:77:82:2b:6d:fe:11:
ae:d6:99:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 14:17:03 2025 by rpki-client