Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/b828fb-737c-478e-8a9f-b9c116f75df1/1/tbU9N1ctag--wt36NciFiLsbKSg.mft
File: tbU9N1ctag--wt36NciFiLsbKSg.mft (raw, json)
Hash identifier: 0TH4QepJjhAQhtvRMNYmoCQ5FCJ+xVcl60NLgoNmAGM=
Subject key identifier: 0B:C6:33:E5:6B:96:74:47:B1:B8:88:55:7B:EA:CE:94:19:EF:51:4B
Authority key identifier: B5:B5:3D:37:57:2D:6A:0F:BE:C2:DD:FA:35:C8:85:88:BB:1B:29:28
Certificate issuer: /CN=b5b53d37572d6a0fbec2ddfa35c88588bb1b2928
Certificate serial: 01976FD0EB45FBD205D8C3537A22E9E8B5B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tbU9N1ctag--wt36NciFiLsbKSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/b828fb-737c-478e-8a9f-b9c116f75df1/1/tbU9N1ctag--wt36NciFiLsbKSg.mft
Manifest number: E4
Signing time: Sat 14 Jun 2025 19:00:51 +0000
Manifest this update: Sat 14 Jun 2025 19:00:51 +0000
Manifest next update: Sun 15 Jun 2025 19:00:51 +0000
Files and hashes: 1: tbU9N1ctag--wt36NciFiLsbKSg.crl (hash: 4MBOqud6AmXzOnkzDdadjAo6AfDMJ3T6bTK4oAl21YA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/b828fb-737c-478e-8a9f-b9c116f75df1/1/tbU9N1ctag--wt36NciFiLsbKSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/b828fb-737c-478e-8a9f-b9c116f75df1/1/tbU9N1ctag--wt36NciFiLsbKSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/tbU9N1ctag--wt36NciFiLsbKSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:d0:eb:45:fb:d2:05:d8:c3:53:7a:22:e9:e8:b5:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5b53d37572d6a0fbec2ddfa35c88588bb1b2928
Validity
Not Before: Jun 14 19:00:51 2025 GMT
Not After : Jun 15 19:00:51 2025 GMT
Subject: CN=0bc633e56b967447b1b888557beace9419ef514b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:76:bc:e9:93:76:97:d5:7b:63:38:14:1a:3e:
89:c8:dd:e2:a6:2b:cb:80:b0:81:ab:0b:0f:dc:ad:
97:2b:4f:41:44:28:89:9c:ea:a7:28:88:04:14:0c:
4e:38:1d:5a:1a:3d:bd:39:d1:4e:05:db:3c:8c:a2:
4d:cf:52:13:7a:4f:2f:07:22:a1:4f:84:ff:fd:0a:
ef:ec:9b:3c:9c:e9:b4:2f:1e:c6:8b:d1:16:8e:d3:
d6:66:fe:82:cb:85:0e:47:dd:7d:fd:49:a9:4e:22:
22:a4:d0:8b:e7:08:3a:ee:bc:3d:05:d8:8e:c3:4e:
fe:37:5c:c8:80:84:2f:10:7a:06:b9:22:c0:65:b9:
3c:49:b8:ba:a4:ce:33:33:0c:c5:66:a9:70:1e:51:
9f:ca:fe:65:1a:76:81:39:b3:c8:f2:93:90:f8:fd:
01:06:cf:fa:cc:bd:5d:ee:8d:4d:dd:33:d2:2b:84:
5c:8e:e9:ac:58:a3:40:ab:60:74:0f:c6:bc:44:fb:
5e:ae:33:df:31:64:70:73:70:02:00:1c:a4:21:89:
b3:7a:bd:7c:51:ba:d9:5f:50:b5:36:8d:12:f7:ef:
7a:85:f4:cb:a4:1e:96:48:60:0b:42:a6:d5:01:e8:
47:23:8e:0c:19:02:47:26:83:65:d5:e6:8a:1f:99:
86:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:C6:33:E5:6B:96:74:47:B1:B8:88:55:7B:EA:CE:94:19:EF:51:4B
X509v3 Authority Key Identifier:
keyid:B5:B5:3D:37:57:2D:6A:0F:BE:C2:DD:FA:35:C8:85:88:BB:1B:29:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tbU9N1ctag--wt36NciFiLsbKSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/b828fb-737c-478e-8a9f-b9c116f75df1/1/tbU9N1ctag--wt36NciFiLsbKSg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/b828fb-737c-478e-8a9f-b9c116f75df1/1/tbU9N1ctag--wt36NciFiLsbKSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:b6:21:f4:e3:73:43:6c:a2:76:32:7b:01:91:34:37:3c:dd:
28:d3:f3:fd:c4:5f:cf:61:00:cc:e3:2c:ee:67:c6:14:49:66:
23:23:93:a4:bc:c9:fd:ea:1f:a6:07:51:cf:df:00:30:c8:ba:
45:11:38:42:c5:5b:41:04:b6:3f:7a:0e:fc:ad:ae:57:20:af:
e8:58:cb:a8:8e:b7:1a:bc:95:f9:d6:a6:2d:61:3a:49:04:46:
74:a7:62:25:cd:3e:7a:7f:55:ed:7d:84:d7:a6:a7:28:08:99:
be:04:80:f2:25:a2:55:82:bb:0b:5e:b5:71:de:9c:69:f4:d7:
3f:b8:62:e4:e3:83:ec:98:9a:26:78:95:d4:a0:27:9a:48:fa:
80:8c:e5:68:fd:43:bd:86:2e:83:0c:1f:8b:d0:2c:79:03:fc:
08:52:6a:02:00:c7:66:5e:6f:a4:af:96:2d:b5:ee:c8:be:07:
0c:6d:7b:c9:6f:c9:12:dd:ef:e9:24:ac:dd:2f:03:b6:91:5f:
69:64:60:da:07:e8:ee:e4:b8:3a:2a:7d:ad:fb:a0:a7:60:63:
9d:3b:bc:64:31:52:67:bb:d4:f5:59:92:80:0a:d0:26:36:85:
e5:a0:9d:00:e7:2e:76:8b:d6:35:82:bf:09:ed:d1:a7:18:67:
2d:84:8b:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:43:49 2025 by rpki-client