Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/f5c6ba-170d-47c5-9c7c-1766a277d85b/1/TdI0IiZKecAxVILtTyfHUTU_Jrs.mft
File: TdI0IiZKecAxVILtTyfHUTU_Jrs.mft (raw, json)
Hash identifier: cG41vgb9T5Mau3+TmaXANkNV+qEmrLNI1Qyg+0eq2Cg=
Subject key identifier: 68:5C:61:D6:F9:8D:83:03:96:9F:30:6C:D3:FA:AF:63:4B:1B:DD:E3
Authority key identifier: 4D:D2:34:22:26:4A:79:C0:31:54:82:ED:4F:27:C7:51:35:3F:26:BB
Certificate issuer: /CN=4dd23422264a79c0315482ed4f27c751353f26bb
Certificate serial: 01976EBE28AA02272599518130D2CAA9E88C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdI0IiZKecAxVILtTyfHUTU_Jrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/f5c6ba-170d-47c5-9c7c-1766a277d85b/1/TdI0IiZKecAxVILtTyfHUTU_Jrs.mft
Manifest number: 06DC
Signing time: Sat 14 Jun 2025 14:00:45 +0000
Manifest this update: Sat 14 Jun 2025 14:00:45 +0000
Manifest next update: Sun 15 Jun 2025 14:00:45 +0000
Files and hashes: 1: TdI0IiZKecAxVILtTyfHUTU_Jrs.crl (hash: at6IFwzD09CwZ3r7PVyalYRf7tejmDsj4/HIQiBQQ4Q=)
2: bJM_lGyoCdHM4Ew-bll92CWr05o.roa (hash: /LNeEVaQM+dKQQyk+FaHOgVJEKHJjoz/8u1g5mTs7vw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/f5c6ba-170d-47c5-9c7c-1766a277d85b/1/TdI0IiZKecAxVILtTyfHUTU_Jrs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/f5c6ba-170d-47c5-9c7c-1766a277d85b/1/TdI0IiZKecAxVILtTyfHUTU_Jrs.mft
rsync://rpki.ripe.net/repository/DEFAULT/TdI0IiZKecAxVILtTyfHUTU_Jrs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:be:28:aa:02:27:25:99:51:81:30:d2:ca:a9:e8:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd23422264a79c0315482ed4f27c751353f26bb
Validity
Not Before: Jun 14 14:00:45 2025 GMT
Not After : Jun 15 14:00:45 2025 GMT
Subject: CN=685c61d6f98d8303969f306cd3faaf634b1bdde3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:a1:39:42:30:f0:16:7a:23:77:18:a8:16:94:
4d:06:1b:c1:50:c4:f3:01:82:69:1e:31:a2:d6:d4:
a7:b7:88:d8:23:66:31:3b:5e:65:39:09:a3:9f:7b:
91:bf:29:f6:7e:24:b1:4b:ae:52:b9:f2:a2:1e:82:
f4:e3:ff:b4:3a:44:05:d2:94:e5:b6:ed:b0:64:24:
33:f8:ae:92:ac:08:ac:a9:87:49:85:2a:21:3b:44:
77:b8:ba:02:93:a7:f0:f6:e5:2e:68:bf:6d:36:42:
08:05:91:37:f7:b3:bb:09:54:81:a3:d2:4e:66:d6:
f8:53:7e:ef:e9:5c:3c:c3:8e:04:37:fc:e6:6d:f1:
0c:19:51:60:5d:3e:f2:5f:86:67:9e:f5:43:d2:f6:
b8:2c:3c:07:16:b0:c9:7f:ec:ac:41:c7:1d:a2:63:
41:2e:39:e3:59:80:eb:a7:3e:d2:0a:56:7d:f4:6c:
31:5c:dc:b0:15:25:79:cc:b7:2f:5b:26:1b:8f:bb:
4e:9d:58:99:54:0f:07:c3:2f:87:92:1c:3a:4d:0d:
ae:e4:51:6c:c6:24:a0:d2:a6:2d:07:93:88:1d:62:
ab:cf:d2:01:30:3b:59:21:ee:5a:60:91:67:bb:52:
f5:ad:b1:5d:cd:09:cb:dc:64:dd:9e:61:a5:0a:34:
ea:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:5C:61:D6:F9:8D:83:03:96:9F:30:6C:D3:FA:AF:63:4B:1B:DD:E3
X509v3 Authority Key Identifier:
keyid:4D:D2:34:22:26:4A:79:C0:31:54:82:ED:4F:27:C7:51:35:3F:26:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdI0IiZKecAxVILtTyfHUTU_Jrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/f5c6ba-170d-47c5-9c7c-1766a277d85b/1/TdI0IiZKecAxVILtTyfHUTU_Jrs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/f5c6ba-170d-47c5-9c7c-1766a277d85b/1/TdI0IiZKecAxVILtTyfHUTU_Jrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:e8:22:95:27:4a:c7:e9:8d:ca:74:75:f7:d5:5b:80:3f:14:
a8:b6:88:d3:fe:cb:f0:01:02:d2:14:34:6b:ea:f5:7b:27:2c:
fe:2a:48:64:f9:1c:61:47:27:a1:f9:af:e1:c1:b1:b0:61:dd:
53:b0:ac:73:af:8d:4e:74:68:38:94:db:bb:f7:c3:b3:2a:3c:
a4:1d:c3:a1:2c:21:43:eb:7c:26:f2:51:f6:4f:ad:e8:14:b6:
da:1f:92:be:73:8d:e5:e4:d7:f4:a7:50:68:3d:07:e0:8a:53:
d9:48:27:f2:f0:31:58:1e:7f:f0:bc:ad:37:35:2a:7b:69:8d:
7f:52:f5:20:6d:4e:62:1c:6b:18:8e:e5:c9:0c:31:e4:f8:0d:
ad:36:0f:ad:06:5b:60:56:cd:c4:dc:71:82:5e:9b:a5:2a:92:
db:e9:03:c6:1b:c2:ae:54:3f:8e:fb:73:31:ef:68:dc:75:ca:
0f:44:e0:3e:3b:b7:f0:65:b2:8c:eb:f2:d8:1a:b6:25:8c:40:
26:b9:1f:ad:a8:ac:64:37:98:b6:fd:fe:27:d2:aa:f2:74:81:
b9:d7:17:e4:ae:5f:ee:92:dd:f8:a1:d1:e6:c5:75:d2:59:ca:
0b:ae:4e:96:c7:85:8f:55:00:78:c9:e3:68:ef:77:c2:13:47:
af:5a:e2:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 21:44:23 2025 by rpki-client