Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/7104d4-7414-49d2-9b84-8b1a093c8c5c/1/TVP4paBndE6P43yXwcxLiH7axyA.mft
File: TVP4paBndE6P43yXwcxLiH7axyA.mft (raw, json)
Hash identifier: oON0aBYR6+DzTyYEZve72NNQMjY9bvAqeuqKTAq/0iM=
Subject key identifier: F5:05:17:E0:2C:FA:10:0D:0E:3E:0F:08:27:AD:F3:4B:C6:B6:62:FF
Authority key identifier: 4D:53:F8:A5:A0:67:74:4E:8F:E3:7C:97:C1:CC:4B:88:7E:DA:C7:20
Certificate issuer: /CN=4d53f8a5a067744e8fe37c97c1cc4b887edac720
Certificate serial: 01977564E53E629F12A12CE7C0A690B7FE64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TVP4paBndE6P43yXwcxLiH7axyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/7104d4-7414-49d2-9b84-8b1a093c8c5c/1/TVP4paBndE6P43yXwcxLiH7axyA.mft
Manifest number: 14D3
Signing time: Sun 15 Jun 2025 21:00:35 +0000
Manifest this update: Sun 15 Jun 2025 21:00:35 +0000
Manifest next update: Mon 16 Jun 2025 21:00:35 +0000
Files and hashes: 1: TVP4paBndE6P43yXwcxLiH7axyA.crl (hash: y0LYSDb+HqPzf4bgG86FTv5+L2GoS4p2gnSN2jf4778=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/7104d4-7414-49d2-9b84-8b1a093c8c5c/1/TVP4paBndE6P43yXwcxLiH7axyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/7104d4-7414-49d2-9b84-8b1a093c8c5c/1/TVP4paBndE6P43yXwcxLiH7axyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/TVP4paBndE6P43yXwcxLiH7axyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 20:59:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:75:64:e5:3e:62:9f:12:a1:2c:e7:c0:a6:90:b7:fe:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d53f8a5a067744e8fe37c97c1cc4b887edac720
Validity
Not Before: Jun 15 21:00:35 2025 GMT
Not After : Jun 16 21:00:35 2025 GMT
Subject: CN=f50517e02cfa100d0e3e0f0827adf34bc6b662ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:77:2d:73:fd:20:e0:ad:fa:ff:c5:ab:f6:20:
76:d9:ef:44:c8:7c:5c:79:6c:6e:22:9f:db:74:85:
8d:8a:03:44:36:1a:58:53:68:d5:11:6f:fa:93:8e:
0f:e7:37:66:67:77:f0:cd:75:9a:65:08:18:fb:ca:
ba:6c:b8:58:8e:14:38:11:14:56:3e:ce:ee:da:dc:
be:53:b2:e2:3c:fc:9a:c1:1c:ed:58:22:87:21:48:
aa:98:9b:fd:fe:ea:50:02:14:47:b6:0d:43:80:87:
f3:85:97:ba:51:21:3a:bd:c6:df:cb:d5:fb:de:82:
46:22:62:8f:d8:da:d7:4a:2b:20:55:33:2c:95:d8:
a3:3e:71:fa:99:dd:13:14:ff:bc:ff:ad:84:6a:21:
2b:06:47:ea:e3:53:05:f4:d0:20:8f:d3:6a:25:3c:
2e:a0:d3:f2:70:50:9f:65:cc:c5:0a:e6:57:b2:48:
a4:22:1f:e6:20:38:c3:e1:ac:8d:4d:ee:f2:99:f1:
09:45:50:dc:76:c4:4e:08:aa:34:76:eb:34:ed:26:
2f:7c:18:b0:00:2b:4f:37:3a:0b:72:ad:80:ba:2d:
56:ad:d6:a2:a8:50:fc:95:01:d1:b0:2e:24:ca:85:
14:84:bf:79:96:e2:21:cb:61:d9:f5:80:5d:5c:dc:
3a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:05:17:E0:2C:FA:10:0D:0E:3E:0F:08:27:AD:F3:4B:C6:B6:62:FF
X509v3 Authority Key Identifier:
keyid:4D:53:F8:A5:A0:67:74:4E:8F:E3:7C:97:C1:CC:4B:88:7E:DA:C7:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TVP4paBndE6P43yXwcxLiH7axyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/7104d4-7414-49d2-9b84-8b1a093c8c5c/1/TVP4paBndE6P43yXwcxLiH7axyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/7104d4-7414-49d2-9b84-8b1a093c8c5c/1/TVP4paBndE6P43yXwcxLiH7axyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:ca:21:13:3c:21:51:85:b4:3b:05:34:23:5b:c6:23:a9:20:
b4:87:df:60:82:bb:80:da:c4:75:33:ec:1a:54:08:e2:42:23:
58:89:bf:5c:89:6d:a6:6f:06:6f:5d:ca:7a:c4:d7:e0:71:a9:
c8:f6:cb:19:84:94:81:a5:2d:a2:29:07:7e:c7:f7:14:d4:58:
1b:ad:b4:b5:dd:6e:7e:25:7f:66:6c:1c:9f:1d:d0:40:41:3d:
b7:85:a3:36:61:07:4c:9a:47:5f:10:f3:c9:3b:d2:73:cb:7e:
f9:ef:40:b2:7c:05:c9:cc:56:cb:c7:3b:0d:39:24:9a:55:96:
92:89:b9:6c:6e:a4:4e:5a:83:3c:ea:10:9d:de:60:ec:6e:7a:
4a:ef:05:f0:04:ee:3a:22:ae:f2:27:26:fe:91:9e:2c:12:9b:
7b:d0:e6:48:a7:25:68:45:21:47:b2:46:d9:a7:05:08:14:39:
01:9e:b4:b5:a2:76:58:4e:19:a3:f3:ac:13:d6:4e:9b:dd:73:
22:90:b1:55:8e:f8:b9:86:1b:b9:73:ff:d0:df:10:17:eb:39:
63:1c:d8:a4:2b:d3:32:b3:4b:02:61:ca:71:ac:02:bf:c1:7f:
d4:56:29:0b:c4:dc:4f:b3:42:18:f4:0c:27:fd:81:4f:52:12:
07:ef:c1:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 02:40:47 2025 by rpki-client