Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/c521e5-f543-4027-9dc8-8f9e23c60606/1/tLw_AjIwP1sDd0XsU6Zsc4JWv0M.mft
File: tLw_AjIwP1sDd0XsU6Zsc4JWv0M.mft (raw, json)
Hash identifier: Ofwl0rUyw0bXOA7fE9HoP1kwROxiF7bmB77hMQ9sark=
Subject key identifier: 82:6D:DD:82:98:86:C0:D6:B2:01:B2:BA:3D:B1:EA:AE:BC:E8:FE:DE
Authority key identifier: B4:BC:3F:02:32:30:3F:5B:03:77:45:EC:53:A6:6C:73:82:56:BF:43
Certificate issuer: /CN=b4bc3f0232303f5b037745ec53a66c738256bf43
Certificate serial: 01976F2C465377B84896EDE47F9FE0480CC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tLw_AjIwP1sDd0XsU6Zsc4JWv0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/c521e5-f543-4027-9dc8-8f9e23c60606/1/tLw_AjIwP1sDd0XsU6Zsc4JWv0M.mft
Manifest number: 0F0C
Signing time: Sat 14 Jun 2025 16:01:01 +0000
Manifest this update: Sat 14 Jun 2025 16:01:01 +0000
Manifest next update: Sun 15 Jun 2025 16:01:01 +0000
Files and hashes: 1: tLw_AjIwP1sDd0XsU6Zsc4JWv0M.crl (hash: yQWgUcRLLKe2CCvWeQ8QXtdtApvOedy1fwVIjCV6FNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/c521e5-f543-4027-9dc8-8f9e23c60606/1/tLw_AjIwP1sDd0XsU6Zsc4JWv0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/c521e5-f543-4027-9dc8-8f9e23c60606/1/tLw_AjIwP1sDd0XsU6Zsc4JWv0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/tLw_AjIwP1sDd0XsU6Zsc4JWv0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 16:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:2c:46:53:77:b8:48:96:ed:e4:7f:9f:e0:48:0c:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4bc3f0232303f5b037745ec53a66c738256bf43
Validity
Not Before: Jun 14 16:01:01 2025 GMT
Not After : Jun 15 16:01:01 2025 GMT
Subject: CN=826ddd829886c0d6b201b2ba3db1eaaebce8fede
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:62:9d:39:b4:bc:75:22:29:4c:66:ab:60:a2:
4c:82:6e:5e:0a:87:bc:86:1e:ec:44:1c:a1:60:60:
33:16:5f:ad:2a:15:8b:6d:4f:18:cf:e0:e5:58:d8:
3d:bc:bb:e4:70:fb:75:7d:58:59:ab:33:55:90:34:
bf:44:9d:fe:96:b3:61:ff:c0:df:b4:e1:ac:ee:6b:
96:dc:a6:f4:75:03:d8:82:13:08:e8:41:7a:4e:ae:
f5:b1:3d:7a:36:c3:af:25:8a:7a:cd:c2:43:f1:ea:
f3:e3:c9:5c:94:53:05:54:45:9f:e6:71:a8:f6:f0:
25:4a:3e:68:c5:52:5c:e7:67:c9:60:79:9f:6a:e8:
24:b1:47:0c:97:21:42:49:7d:15:f7:f2:e3:03:fd:
65:fa:94:f6:79:d7:da:64:57:e0:d7:f1:a4:ef:c5:
64:2e:0a:19:e7:ff:70:64:28:1e:cf:c6:89:a5:cd:
30:01:8d:8a:80:62:d3:5e:38:a5:e4:7c:33:f8:3f:
2f:f2:5e:30:fa:18:60:3d:73:9e:95:c0:65:65:bf:
d5:8a:a6:ce:c7:0b:f7:08:ba:f2:6b:61:54:20:2d:
a0:c0:c9:f9:68:e9:74:e0:42:82:ba:57:b6:3b:54:
15:ee:c3:5a:b4:f1:07:7b:f9:10:4d:5f:ed:98:1f:
ee:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:6D:DD:82:98:86:C0:D6:B2:01:B2:BA:3D:B1:EA:AE:BC:E8:FE:DE
X509v3 Authority Key Identifier:
keyid:B4:BC:3F:02:32:30:3F:5B:03:77:45:EC:53:A6:6C:73:82:56:BF:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tLw_AjIwP1sDd0XsU6Zsc4JWv0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c521e5-f543-4027-9dc8-8f9e23c60606/1/tLw_AjIwP1sDd0XsU6Zsc4JWv0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c521e5-f543-4027-9dc8-8f9e23c60606/1/tLw_AjIwP1sDd0XsU6Zsc4JWv0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:e0:cb:ff:43:10:aa:f7:c4:f7:aa:a2:36:ec:5a:2b:0e:5e:
9f:8c:36:46:2f:92:00:a9:9f:e0:8a:80:7d:c1:2e:2d:a1:7c:
5e:de:06:38:4c:9c:92:8b:9c:1e:61:76:c5:76:19:81:11:a5:
15:d8:66:e7:14:24:a3:fd:08:88:86:98:22:ef:29:20:db:55:
75:e2:bd:c0:d0:ed:6b:4e:98:e4:e5:86:5d:72:58:6e:f8:a2:
2b:03:e7:66:d0:2d:a8:6d:6f:33:09:38:64:9f:7b:fc:59:bd:
69:6e:68:f9:d4:e5:80:dc:eb:fd:38:f0:9d:51:79:12:af:53:
0e:ea:f4:a9:1c:7d:97:51:8f:a8:4a:3f:26:6c:60:14:14:ec:
eb:04:47:2f:3e:64:25:9e:4a:36:7f:e5:c5:d9:aa:29:fe:4e:
99:a8:5a:e5:d3:1f:c9:41:b4:92:2a:1f:7e:dd:1b:d8:d9:b3:
71:04:53:b8:ee:2f:10:55:d9:59:14:e9:af:bd:81:7d:8b:39:
b9:10:33:9a:d1:87:82:92:88:02:ab:aa:a6:90:bf:14:ae:fb:
36:98:f2:13:46:18:04:20:c9:a7:21:57:11:9c:43:e9:38:bc:
a8:45:7d:71:5a:7f:29:03:ea:74:ad:49:35:e5:a1:cc:39:1f:
7d:75:42:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 00:01:04 2025 by rpki-client