Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/74f43e-bbfe-4960-8f33-c1e6c1b3191d/1/TnCtvlP18oWwVz3yRuJdUWUdeEk.mft
File: TnCtvlP18oWwVz3yRuJdUWUdeEk.mft (raw, json)
Hash identifier: DZDmtTgBAUKXDJrzuyP0brfj1cbJrHt7/KoceXFTzfs=
Subject key identifier: A2:CF:3E:6F:46:10:2E:C2:54:C4:33:13:E7:5E:50:BB:B3:F5:BA:E5
Authority key identifier: 4E:70:AD:BE:53:F5:F2:85:B0:57:3D:F2:46:E2:5D:51:65:1D:78:49
Certificate issuer: /CN=4e70adbe53f5f285b0573df246e25d51651d7849
Certificate serial: 01976929C35DCFE696C9AE6486267074FBA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TnCtvlP18oWwVz3yRuJdUWUdeEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/74f43e-bbfe-4960-8f33-c1e6c1b3191d/1/TnCtvlP18oWwVz3yRuJdUWUdeEk.mft
Manifest number: 41
Signing time: Fri 13 Jun 2025 12:00:34 +0000
Manifest this update: Fri 13 Jun 2025 12:00:34 +0000
Manifest next update: Sat 14 Jun 2025 12:00:34 +0000
Files and hashes: 1: TnCtvlP18oWwVz3yRuJdUWUdeEk.crl (hash: bCQC6e4Y9ov1HmVrV8bIpurssaLYGl7tOJ9oiaF6zoI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/74f43e-bbfe-4960-8f33-c1e6c1b3191d/1/TnCtvlP18oWwVz3yRuJdUWUdeEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/74f43e-bbfe-4960-8f33-c1e6c1b3191d/1/TnCtvlP18oWwVz3yRuJdUWUdeEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TnCtvlP18oWwVz3yRuJdUWUdeEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 12:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:29:c3:5d:cf:e6:96:c9:ae:64:86:26:70:74:fb:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e70adbe53f5f285b0573df246e25d51651d7849
Validity
Not Before: Jun 13 12:00:34 2025 GMT
Not After : Jun 14 12:00:34 2025 GMT
Subject: CN=a2cf3e6f46102ec254c43313e75e50bbb3f5bae5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8e:f8:3d:af:19:7b:6a:7c:a3:47:9d:24:24:
a4:ae:87:66:7f:f4:53:49:b3:ea:1a:3f:dc:f5:e4:
32:3e:ff:87:33:fa:a6:76:cc:fa:85:9d:d9:6a:75:
b4:11:0e:33:78:d1:30:94:d3:2d:1a:41:4b:c6:92:
ad:80:05:a2:bf:1d:ce:85:dd:ae:e4:85:ea:ac:40:
6b:b5:62:a1:66:4a:ec:cf:24:bb:eb:ae:ab:86:c3:
57:7f:f0:0e:21:f7:98:8d:dc:1e:5f:f6:53:bd:15:
e0:d1:50:36:17:dc:64:52:fc:0c:15:50:f9:27:a7:
e1:7d:9e:2d:cd:16:e5:cc:d8:63:d8:3d:7d:c1:3a:
b2:e5:53:9f:4e:fb:e2:40:6d:e3:8e:28:ab:e6:79:
83:d6:43:eb:30:53:19:38:3a:0a:67:4a:64:79:c8:
9a:bb:83:09:f6:57:0e:1b:15:b3:ce:71:43:39:9c:
fc:51:5b:ef:d5:ce:a3:34:c6:8c:aa:47:7c:7f:cd:
93:c1:1b:6a:ad:6f:37:96:28:98:bd:27:53:58:9c:
bf:5e:9b:6d:00:19:8d:26:9f:09:d0:bc:7e:1d:6c:
17:dc:be:8a:76:97:39:70:b8:06:29:37:f3:b8:83:
82:c6:5e:98:f8:e3:70:45:bf:80:f1:5a:c9:10:c8:
a3:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:CF:3E:6F:46:10:2E:C2:54:C4:33:13:E7:5E:50:BB:B3:F5:BA:E5
X509v3 Authority Key Identifier:
keyid:4E:70:AD:BE:53:F5:F2:85:B0:57:3D:F2:46:E2:5D:51:65:1D:78:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TnCtvlP18oWwVz3yRuJdUWUdeEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/74f43e-bbfe-4960-8f33-c1e6c1b3191d/1/TnCtvlP18oWwVz3yRuJdUWUdeEk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/74f43e-bbfe-4960-8f33-c1e6c1b3191d/1/TnCtvlP18oWwVz3yRuJdUWUdeEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:1f:a2:b9:b3:db:63:a0:d4:97:df:dc:71:c4:f9:7c:f9:04:
5a:8c:e7:b7:3c:b0:b2:7c:84:0d:87:38:bf:65:26:d5:00:bc:
91:53:d8:7d:ac:ea:ff:d9:00:21:35:2b:2d:e0:fc:f8:09:72:
b8:f8:21:4c:82:5d:0e:f0:5c:03:4a:9f:2f:44:e6:eb:96:d2:
1e:ee:04:a8:a7:c3:8d:6b:26:9f:ac:eb:09:e8:57:fe:f3:65:
e7:61:60:b2:60:f5:61:81:5e:3a:c6:a6:96:a5:20:db:3b:44:
cb:d6:43:ed:a8:42:27:f2:bb:11:fc:39:05:6d:a2:ea:fb:ca:
1f:e7:4d:a8:a0:02:39:02:ca:d8:58:c5:14:60:55:54:69:e9:
04:5d:4e:1a:50:31:1b:91:21:af:c3:66:2b:af:70:27:09:b1:
06:28:26:f7:4e:c3:6b:87:3a:39:f1:16:d5:80:ca:8a:85:f8:
1b:89:99:90:e8:64:c3:d7:86:e7:ed:cb:d4:1f:92:03:fa:74:
72:a6:fa:c6:25:10:d3:1e:ac:08:fc:c3:04:64:ca:cf:9f:69:
f9:42:93:84:82:e7:63:96:5d:9e:39:3f:87:0e:53:97:4d:9f:
3c:05:bb:a2:97:96:be:1f:a2:f4:32:54:76:bd:bf:95:86:61:
fc:26:df:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:16:34 2025 by rpki-client