Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/ed384e-9949-4cc0-8a37-3bb2cd80a2c9/1/Tq5vUk7tD3PISbBkOCe4DjfEbHE.mft
File: Tq5vUk7tD3PISbBkOCe4DjfEbHE.mft (raw, json)
Hash identifier: 4fpVHrL3KSaME3iqA3CqFVzMPyJWUhp6mjePL0rahMo=
Subject key identifier: AE:AC:41:28:B6:B4:1E:30:70:A5:8D:D8:1F:60:C1:17:E3:7E:92:7B
Authority key identifier: 4E:AE:6F:52:4E:ED:0F:73:C8:49:B0:64:38:27:B8:0E:37:C4:6C:71
Certificate issuer: /CN=4eae6f524eed0f73c849b0643827b80e37c46c71
Certificate serial: 01976BF4395AF17F83A466EC62358B7688CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tq5vUk7tD3PISbBkOCe4DjfEbHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/ed384e-9949-4cc0-8a37-3bb2cd80a2c9/1/Tq5vUk7tD3PISbBkOCe4DjfEbHE.mft
Manifest number: 158F
Signing time: Sat 14 Jun 2025 01:00:56 +0000
Manifest this update: Sat 14 Jun 2025 01:00:56 +0000
Manifest next update: Sun 15 Jun 2025 01:00:56 +0000
Files and hashes: 1: Tq5vUk7tD3PISbBkOCe4DjfEbHE.crl (hash: BSI2yIvVKJyuSgYGeU3hhkY0rG2ShiNHY7SemvESAm0=)
2: ZPx2mzUkeOD00cVnYPqjI9aytDo.roa (hash: 9BSbx2wnbDuYyWn09oP3MayodoEwoQbrU6xTUmUCOR8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/ed384e-9949-4cc0-8a37-3bb2cd80a2c9/1/Tq5vUk7tD3PISbBkOCe4DjfEbHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/ed384e-9949-4cc0-8a37-3bb2cd80a2c9/1/Tq5vUk7tD3PISbBkOCe4DjfEbHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tq5vUk7tD3PISbBkOCe4DjfEbHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:f4:39:5a:f1:7f:83:a4:66:ec:62:35:8b:76:88:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4eae6f524eed0f73c849b0643827b80e37c46c71
Validity
Not Before: Jun 14 01:00:56 2025 GMT
Not After : Jun 15 01:00:56 2025 GMT
Subject: CN=aeac4128b6b41e3070a58dd81f60c117e37e927b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:39:eb:df:97:ec:23:b3:94:dc:ad:50:3c:01:
c4:4a:1a:38:08:64:ca:a7:f0:01:25:7d:6b:22:cf:
67:0a:60:0f:cc:18:d0:57:35:91:b0:fa:56:60:65:
2b:65:a8:63:47:cf:86:fb:f0:7a:ad:d2:f5:de:90:
a4:3d:43:4b:b2:5b:af:ec:ee:3a:26:2d:cc:cc:4f:
cf:dc:b4:d8:cc:07:6a:64:40:47:6a:0b:c4:18:aa:
ae:01:ce:1a:ab:41:8f:87:06:bd:c9:95:44:35:66:
49:43:7a:23:f1:f9:78:5c:16:0d:ee:9b:c9:27:14:
0d:b0:93:34:e2:9d:ee:f8:64:76:40:48:e6:26:fa:
7b:93:82:ab:97:46:61:28:ce:bb:18:14:d3:26:b9:
75:ed:51:06:98:e1:2f:c3:a0:b8:fa:03:1e:82:93:
07:bd:fe:30:69:e7:a2:a6:a5:e8:1e:75:01:83:76:
71:6c:eb:f9:db:88:26:a0:4d:bc:d1:44:d3:34:d1:
86:34:39:a6:c1:39:a4:1a:38:4c:f6:36:20:39:9d:
f9:a0:e3:5b:d6:85:5f:50:0a:30:c4:0c:0d:a0:b7:
85:40:13:c0:a1:32:7a:42:51:41:ab:72:e2:88:eb:
18:d5:5d:18:0a:d4:b1:21:05:ae:8f:05:04:21:5d:
1c:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:AC:41:28:B6:B4:1E:30:70:A5:8D:D8:1F:60:C1:17:E3:7E:92:7B
X509v3 Authority Key Identifier:
keyid:4E:AE:6F:52:4E:ED:0F:73:C8:49:B0:64:38:27:B8:0E:37:C4:6C:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tq5vUk7tD3PISbBkOCe4DjfEbHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ed384e-9949-4cc0-8a37-3bb2cd80a2c9/1/Tq5vUk7tD3PISbBkOCe4DjfEbHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ed384e-9949-4cc0-8a37-3bb2cd80a2c9/1/Tq5vUk7tD3PISbBkOCe4DjfEbHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:48:24:9c:60:7d:4e:9e:61:d1:a5:d4:f5:99:17:5d:7b:c0:
68:c1:e6:81:11:10:4e:56:de:c6:a6:17:1f:73:41:a2:27:c0:
2c:82:e3:12:cd:4f:88:28:ff:f7:95:25:36:71:77:30:b5:40:
f0:ea:22:c7:3e:fd:e3:d6:b1:01:42:84:e2:f9:8a:f2:37:c6:
5c:dd:47:91:85:41:9e:bf:1c:62:b5:86:e1:16:09:e2:00:27:
b5:10:55:32:08:04:03:af:5b:e6:a3:db:61:b2:53:54:9b:07:
ec:e8:76:6e:1e:03:a3:39:a5:50:67:d3:95:00:2d:93:0a:bb:
12:68:51:3b:7f:b9:7b:ca:dd:c3:d3:9c:f2:d3:c2:f3:1c:80:
34:a1:62:96:cf:e6:5c:64:94:17:65:bd:93:dc:6e:eb:88:f2:
db:cb:08:af:e3:df:60:5d:a1:5f:bd:60:98:32:90:4a:23:96:
14:2e:54:88:83:50:15:96:21:17:a7:5a:5a:e8:68:7b:09:2e:
9a:c2:e3:32:69:5d:f2:e1:71:be:9f:86:7c:67:4f:b6:14:5f:
19:99:af:0a:3b:e6:1d:e5:17:84:32:01:62:13:6f:cf:ce:03:
3d:fa:b3:c9:0e:78:d8:c2:19:16:fe:fa:58:3c:51:54:c6:c3:
b5:d7:da:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:12:25 2025 by rpki-client