Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/fdff01-762f-43a9-a4be-7bb1844014d6/1/tT8fJDLiJL3km_qxn2dTYpq1cH8.mft
File: tT8fJDLiJL3km_qxn2dTYpq1cH8.mft (raw, json)
Hash identifier: HBxL0+mJWxt2SpvPCkKSTaVdDIRsS0pvjB2jv3BKh3c=
Subject key identifier: CA:17:59:FF:6C:36:0A:5F:E2:35:2F:AD:32:5C:82:B5:91:57:46:E6
Authority key identifier: B5:3F:1F:24:32:E2:24:BD:E4:9B:FA:B1:9F:67:53:62:9A:B5:70:7F
Certificate issuer: /CN=b53f1f2432e224bde49bfab19f6753629ab5707f
Certificate serial: 01976D3E5EF530890D4FF85DD6BB0C467A19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tT8fJDLiJL3km_qxn2dTYpq1cH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/fdff01-762f-43a9-a4be-7bb1844014d6/1/tT8fJDLiJL3km_qxn2dTYpq1cH8.mft
Manifest number: 0BEC
Signing time: Sat 14 Jun 2025 07:01:33 +0000
Manifest this update: Sat 14 Jun 2025 07:01:33 +0000
Manifest next update: Sun 15 Jun 2025 07:01:33 +0000
Files and hashes: 1: tT8fJDLiJL3km_qxn2dTYpq1cH8.crl (hash: 56qS9PZ6KstHniIRfUx5xF5ZWoWXrK0r6noPYSOIp2w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/fdff01-762f-43a9-a4be-7bb1844014d6/1/tT8fJDLiJL3km_qxn2dTYpq1cH8.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/fdff01-762f-43a9-a4be-7bb1844014d6/1/tT8fJDLiJL3km_qxn2dTYpq1cH8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tT8fJDLiJL3km_qxn2dTYpq1cH8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3e:5e:f5:30:89:0d:4f:f8:5d:d6:bb:0c:46:7a:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b53f1f2432e224bde49bfab19f6753629ab5707f
Validity
Not Before: Jun 14 07:01:33 2025 GMT
Not After : Jun 15 07:01:33 2025 GMT
Subject: CN=ca1759ff6c360a5fe2352fad325c82b5915746e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:5a:36:52:6c:4f:c4:52:07:53:29:8c:6c:e9:
b1:81:0c:fd:2f:d8:15:cc:67:99:ec:2a:ee:2d:11:
02:1c:77:b2:c8:55:50:c0:6e:23:5e:4b:1d:eb:b5:
b3:b6:8a:5f:b6:f1:cf:ef:8a:85:56:d4:b4:f6:d9:
b3:59:ae:63:93:31:9c:48:50:64:9f:a7:55:21:b2:
ca:f0:7f:ad:6a:79:2a:79:35:ce:5f:bd:dd:a8:eb:
9b:23:b6:e9:b2:e5:7a:b0:32:fd:e5:ad:27:d8:8f:
5d:37:19:0a:2a:60:7d:7e:bb:90:07:36:21:00:31:
d4:a5:f5:f4:e8:d4:ec:d2:ac:ac:ca:f5:f9:e2:b2:
77:ed:28:d2:01:b6:47:18:f4:53:0f:3b:1c:41:2a:
bd:9a:a4:50:ec:4e:f1:47:ef:c1:e9:3c:6b:1a:5f:
c3:dd:1b:f6:6b:61:01:30:f2:ed:63:51:fb:9e:14:
0c:83:b4:0c:01:e9:ff:12:e7:cc:54:02:1a:84:d6:
7c:24:fc:e6:52:ae:01:16:03:2a:9a:f1:43:77:b1:
fd:e2:f2:e4:81:e9:09:59:98:dd:76:39:dd:7b:fc:
de:76:3b:7a:2f:c9:48:8a:e8:38:64:90:eb:8d:7a:
b9:34:5b:dd:47:08:78:34:3a:4a:58:0d:d2:1f:48:
fe:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:17:59:FF:6C:36:0A:5F:E2:35:2F:AD:32:5C:82:B5:91:57:46:E6
X509v3 Authority Key Identifier:
keyid:B5:3F:1F:24:32:E2:24:BD:E4:9B:FA:B1:9F:67:53:62:9A:B5:70:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tT8fJDLiJL3km_qxn2dTYpq1cH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/fdff01-762f-43a9-a4be-7bb1844014d6/1/tT8fJDLiJL3km_qxn2dTYpq1cH8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/fdff01-762f-43a9-a4be-7bb1844014d6/1/tT8fJDLiJL3km_qxn2dTYpq1cH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:3c:80:a0:35:ff:50:aa:e1:4e:19:fc:df:3e:46:87:81:56:
d4:8c:f4:0a:aa:66:c2:b9:2a:fe:ac:7f:19:4d:51:13:4a:e9:
5d:20:cb:49:bd:bb:e7:71:6f:fd:3e:53:33:16:84:05:db:4d:
c6:58:40:95:0e:68:e2:8c:d4:2a:c4:17:31:3f:90:2f:69:5f:
1d:1b:c0:ba:90:0e:88:35:9d:05:3a:f6:48:33:04:96:ad:a4:
ad:b7:10:91:c5:53:0f:d4:70:c3:ca:13:27:18:fc:d9:7e:59:
35:28:89:9f:9e:dd:6e:c9:71:18:75:3b:1a:2f:25:64:4e:53:
81:23:66:9b:6e:96:f3:a7:98:94:97:e2:55:fd:8b:47:8a:a0:
64:0a:fd:08:48:27:6d:9a:d8:1d:8b:17:36:19:71:c5:2a:0e:
e2:cd:60:ce:78:52:06:91:2d:03:08:2c:ae:a9:72:af:8f:b5:
1f:ca:9b:c7:84:7a:28:63:84:6b:12:4b:07:ed:b6:84:28:61:
13:40:61:14:02:fe:d8:3a:4c:6c:c8:58:87:82:2c:a3:e4:85:
c5:28:28:f2:21:4e:12:72:57:ed:f7:89:8e:1e:7e:92:11:e3:
06:05:73:d3:dc:5e:f0:81:e9:ad:1e:a8:f9:96:53:25:e6:04:
f1:38:e4:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:09:12 2025 by rpki-client