Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/0196f1-4339-4bdc-8034-2eb2f2ed3029/1/_TSxP72Tgd-Exofwa80HTkp1WAM.mft
File: _TSxP72Tgd-Exofwa80HTkp1WAM.mft (raw, json)
Hash identifier: 35ZaIxeNkMRqnd9lvrs12Y1vuojSYnoPD8kVWgpbPvY=
Subject key identifier: 0E:FE:A9:CC:54:F4:92:D3:E4:DA:11:A6:61:AD:BF:E6:38:31:B8:9D
Authority key identifier: FD:34:B1:3F:BD:93:81:DF:84:C6:87:F0:6B:CD:07:4E:4A:75:58:03
Certificate issuer: /CN=fd34b13fbd9381df84c687f06bcd074e4a755803
Certificate serial: 01976A05FF96AA0D581781F5A362CDFAE69C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_TSxP72Tgd-Exofwa80HTkp1WAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/0196f1-4339-4bdc-8034-2eb2f2ed3029/1/_TSxP72Tgd-Exofwa80HTkp1WAM.mft
Manifest number: 158B
Signing time: Fri 13 Jun 2025 16:01:07 +0000
Manifest this update: Fri 13 Jun 2025 16:01:07 +0000
Manifest next update: Sat 14 Jun 2025 16:01:07 +0000
Files and hashes: 1: _TSxP72Tgd-Exofwa80HTkp1WAM.crl (hash: 50usRQcfCAaoooUekgUR24WqabANBhkkbcuEeJf9bYU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/0196f1-4339-4bdc-8034-2eb2f2ed3029/1/_TSxP72Tgd-Exofwa80HTkp1WAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/0196f1-4339-4bdc-8034-2eb2f2ed3029/1/_TSxP72Tgd-Exofwa80HTkp1WAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_TSxP72Tgd-Exofwa80HTkp1WAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6a:05:ff:96:aa:0d:58:17:81:f5:a3:62:cd:fa:e6:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd34b13fbd9381df84c687f06bcd074e4a755803
Validity
Not Before: Jun 13 16:01:07 2025 GMT
Not After : Jun 14 16:01:07 2025 GMT
Subject: CN=0efea9cc54f492d3e4da11a661adbfe63831b89d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:8d:0c:6c:4b:f2:56:a7:11:f2:68:d8:f3:a1:
3c:d0:dd:00:fa:73:82:ca:67:89:99:3b:1a:0e:0a:
40:14:5d:c9:71:a7:36:ed:f3:91:3c:fc:71:34:95:
0a:5c:9a:8a:ba:d9:fb:f6:7a:56:5a:b7:cc:c6:4f:
6e:0d:ff:22:ba:79:ff:90:e6:8d:10:47:f3:7a:c8:
ff:ec:be:44:94:ea:ea:66:e2:e5:41:96:64:6a:b0:
62:1f:25:f1:de:62:50:1a:91:65:56:b7:fb:78:39:
65:48:28:2a:d1:a3:ca:9f:11:4a:03:7e:4e:1f:1a:
cd:5b:a8:b9:92:b7:a0:47:52:1e:ad:fb:68:e8:23:
6f:76:ce:a0:25:98:61:66:a3:0b:70:0f:c2:82:b5:
fd:29:58:de:b5:60:04:d5:bb:a7:0b:f9:ba:91:f3:
61:31:7b:17:2b:32:80:f6:88:25:c0:e9:43:b6:22:
ce:72:9e:f1:67:a5:fe:84:8d:89:8a:14:fb:7c:e0:
d7:c5:64:24:c3:60:8d:51:4e:38:31:d1:61:00:a7:
3a:19:c6:e0:f1:3d:61:fe:4e:5f:88:fc:3e:ee:98:
3b:66:2a:ef:0b:49:e8:dd:8b:68:55:ff:30:7c:1d:
13:4b:c0:15:d2:1e:fc:00:4f:4a:35:4a:3f:7e:ae:
88:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:FE:A9:CC:54:F4:92:D3:E4:DA:11:A6:61:AD:BF:E6:38:31:B8:9D
X509v3 Authority Key Identifier:
keyid:FD:34:B1:3F:BD:93:81:DF:84:C6:87:F0:6B:CD:07:4E:4A:75:58:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_TSxP72Tgd-Exofwa80HTkp1WAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/0196f1-4339-4bdc-8034-2eb2f2ed3029/1/_TSxP72Tgd-Exofwa80HTkp1WAM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/0196f1-4339-4bdc-8034-2eb2f2ed3029/1/_TSxP72Tgd-Exofwa80HTkp1WAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:a5:97:2e:a4:a3:40:d5:5b:f2:3a:8a:9f:c7:e7:29:03:b9:
1e:b0:4e:b8:6d:42:e6:76:a4:4e:54:5d:0b:f2:4c:8c:c0:f9:
8a:28:cc:b1:5f:8d:66:f1:11:e0:bc:d9:af:07:68:40:a8:6e:
80:70:31:a5:09:0a:f7:c1:a0:fa:23:35:20:12:77:33:6b:17:
14:0d:dc:21:e6:1b:c3:2e:a0:70:87:1e:8e:1c:9e:71:ac:00:
d7:3a:0d:de:c5:72:e4:ab:2a:0c:fd:5d:d9:91:57:66:96:7d:
6e:d3:17:3d:b8:9c:ef:ec:34:e6:a4:cc:7e:13:9a:de:ff:f3:
6f:04:86:ce:63:74:16:ba:18:14:b5:ad:a4:73:01:3a:00:0e:
78:50:fb:0a:cc:e9:5c:a0:a6:96:d5:ca:94:a4:df:72:4d:18:
9f:6a:f6:08:bc:d1:3d:8c:90:69:87:94:17:9f:71:96:da:be:
e3:6d:62:0f:fd:8a:2d:91:d5:50:92:37:8e:d3:8c:48:b0:bb:
eb:c3:11:32:b0:d6:28:2c:c7:9c:18:14:77:7f:9b:d7:10:0f:
d3:39:37:e0:c0:80:a6:76:ac:e6:8a:38:c6:52:f1:56:06:04:
80:08:87:64:5b:a5:20:47:00:af:cc:a0:0d:81:aa:54:3c:da:
f6:1b:d5:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:21:54 2025 by rpki-client