
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/d3c1d5-e923-4831-804c-c7586282fe13/1/tNiyeqpV5Ro0X2pFGeNnlVBGwwo.mft
File: tNiyeqpV5Ro0X2pFGeNnlVBGwwo.mft (raw, json)
Hash identifier: SkXuLJA2z04uPpBLQ6tn+SHi0hNN2SXpuYpgDcF/a3I=
Subject key identifier: D1:D7:EA:68:A1:66:7B:24:B1:2F:24:1E:47:72:5F:FD:16:02:FF:73
Authority key identifier: B4:D8:B2:7A:AA:55:E5:1A:34:5F:6A:45:19:E3:67:95:50:46:C3:0A
Certificate issuer: /CN=b4d8b27aaa55e51a345f6a4519e367955046c30a
Certificate serial: 01976EF4F51610C6A84D3F3398E08D8A1F56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tNiyeqpV5Ro0X2pFGeNnlVBGwwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/d3c1d5-e923-4831-804c-c7586282fe13/1/tNiyeqpV5Ro0X2pFGeNnlVBGwwo.mft
Manifest number: 1138
Signing time: Sat 14 Jun 2025 15:00:36 +0000
Manifest this update: Sat 14 Jun 2025 15:00:36 +0000
Manifest next update: Sun 15 Jun 2025 15:00:36 +0000
Files and hashes: 1: nqRmyRsi2-hKiZqffDikHhIZIA8.roa (hash: vx+mbFW9leAh9kJ2X2Cv3OUNnkvDKbo77etkxvxrmFM=)
2: tNiyeqpV5Ro0X2pFGeNnlVBGwwo.crl (hash: qxJ+Pn62Qdy2Yz9kyW4wl+HUqWR2j/0pTq3AByuFKls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/d3c1d5-e923-4831-804c-c7586282fe13/1/tNiyeqpV5Ro0X2pFGeNnlVBGwwo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/d3c1d5-e923-4831-804c-c7586282fe13/1/tNiyeqpV5Ro0X2pFGeNnlVBGwwo.mft
rsync://rpki.ripe.net/repository/DEFAULT/tNiyeqpV5Ro0X2pFGeNnlVBGwwo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:f4:f5:16:10:c6:a8:4d:3f:33:98:e0:8d:8a:1f:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4d8b27aaa55e51a345f6a4519e367955046c30a
Validity
Not Before: Jun 14 15:00:36 2025 GMT
Not After : Jun 15 15:00:36 2025 GMT
Subject: CN=d1d7ea68a1667b24b12f241e47725ffd1602ff73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:a6:51:a7:f2:35:4d:43:4c:6f:74:e0:b3:1e:
a1:cf:72:39:d5:e4:ce:06:a0:fb:97:8b:95:a5:69:
e2:93:cc:2b:b3:a4:c4:0d:e3:47:b2:c6:90:50:df:
a4:e5:fd:aa:9a:b9:77:a1:86:ed:f0:a2:54:a9:11:
3a:77:1f:0f:36:a1:de:a0:1e:e4:7a:33:a1:ee:c1:
0a:71:96:c7:bb:1e:f5:f9:69:17:8d:b8:b2:f2:cf:
a6:74:3d:f7:ea:8e:e3:4c:8a:64:02:e1:66:62:05:
32:ab:d8:58:dd:b3:1c:32:61:a0:3a:2d:eb:ac:e5:
72:58:6b:75:e7:d0:91:a7:5b:49:22:b9:f8:78:3e:
96:7f:c3:27:e8:14:58:53:70:dd:64:66:25:2b:0b:
3d:df:19:52:b2:60:b8:67:1a:44:d8:7c:71:1d:0e:
9e:27:2e:01:16:ed:8b:1d:cf:d8:a8:9e:83:e4:95:
89:33:58:6d:52:58:3e:69:4c:e1:3d:0a:7c:9d:65:
31:c1:0e:d2:e4:ea:e1:a8:f6:20:cb:7a:2e:3c:c0:
60:b5:e8:79:6e:66:a8:1b:0c:c9:18:7b:ec:88:9f:
40:f4:f2:c1:93:59:1c:0e:ba:0d:cb:b3:78:89:f2:
34:8e:08:1f:ed:54:9f:c5:f9:a4:b7:85:41:55:91:
7d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:D7:EA:68:A1:66:7B:24:B1:2F:24:1E:47:72:5F:FD:16:02:FF:73
X509v3 Authority Key Identifier:
keyid:B4:D8:B2:7A:AA:55:E5:1A:34:5F:6A:45:19:E3:67:95:50:46:C3:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tNiyeqpV5Ro0X2pFGeNnlVBGwwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d3c1d5-e923-4831-804c-c7586282fe13/1/tNiyeqpV5Ro0X2pFGeNnlVBGwwo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d3c1d5-e923-4831-804c-c7586282fe13/1/tNiyeqpV5Ro0X2pFGeNnlVBGwwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:b3:54:d7:bb:1e:be:aa:bd:7a:89:3c:43:66:cf:c3:ac:24:
02:11:27:44:8c:bd:0b:56:d3:0a:d0:31:90:e6:70:32:f4:92:
9a:75:71:4e:14:ca:a8:61:bf:37:a6:ec:72:f2:bd:2c:56:d2:
b9:28:f6:d8:b3:e3:8b:09:95:fd:1a:cb:04:57:81:1d:07:ab:
2e:a1:7a:1b:7d:8c:65:bd:44:c5:c1:c6:f6:64:31:23:b8:42:
39:fa:ed:cb:55:bd:7e:ee:b0:99:df:75:65:d0:7e:e6:dd:8b:
47:5a:61:d4:ab:de:60:b2:42:8a:4a:e6:d9:4a:61:6a:22:3c:
2f:c4:a9:aa:1a:58:ed:bf:b5:92:14:d9:6d:1a:9b:c7:81:78:
be:95:dc:4a:bd:49:d7:af:93:de:f1:55:63:ca:1e:dc:10:7c:
3c:ad:de:23:dc:1b:2f:1d:d5:fb:20:f3:8f:f6:92:92:a0:91:
8f:11:44:ac:c9:ee:0e:36:bd:cb:cd:d6:3c:18:2b:9e:9b:cb:
b8:8f:f7:86:d0:a5:68:35:8f:52:53:37:65:e8:7a:ca:f6:34:
3a:40:0d:b3:ba:3b:cc:4b:04:12:cb:5a:74:db:c0:45:f5:e4:
ca:78:db:99:0a:be:4c:fb:d4:02:90:2d:d1:dd:00:8f:58:d6:
52:58:ab:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 20:14:09 2025 by rpki-client