Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/289f40-a233-4c63-b93e-8e4c7c7b6504/1/tXyKwFXFdNjPE1IrlkuSMU0hHq4.mft
File: tXyKwFXFdNjPE1IrlkuSMU0hHq4.mft (raw, json)
Hash identifier: yQ/b6ZZ8qX/ai7yMm74MeBfzKGS1HfqSXxJnHKlhDHc=
Subject key identifier: B2:48:3C:6F:0E:47:D0:22:2D:F0:02:69:D8:24:C0:B7:F9:8A:90:D2
Authority key identifier: B5:7C:8A:C0:55:C5:74:D8:CF:13:52:2B:96:4B:92:31:4D:21:1E:AE
Certificate issuer: /CN=b57c8ac055c574d8cf13522b964b92314d211eae
Certificate serial: 019779AF579D327B40B69902E9D869F5E069
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tXyKwFXFdNjPE1IrlkuSMU0hHq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/289f40-a233-4c63-b93e-8e4c7c7b6504/1/tXyKwFXFdNjPE1IrlkuSMU0hHq4.mft
Manifest number: 12E2
Signing time: Mon 16 Jun 2025 17:00:23 +0000
Manifest this update: Mon 16 Jun 2025 17:00:23 +0000
Manifest next update: Tue 17 Jun 2025 17:00:23 +0000
Files and hashes: 1: tXyKwFXFdNjPE1IrlkuSMU0hHq4.crl (hash: BardW1biRfqKEdR5h1J5swNf63YF9NhS8MzRG15XU8g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/289f40-a233-4c63-b93e-8e4c7c7b6504/1/tXyKwFXFdNjPE1IrlkuSMU0hHq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/289f40-a233-4c63-b93e-8e4c7c7b6504/1/tXyKwFXFdNjPE1IrlkuSMU0hHq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/tXyKwFXFdNjPE1IrlkuSMU0hHq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 14:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:79:af:57:9d:32:7b:40:b6:99:02:e9:d8:69:f5:e0:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b57c8ac055c574d8cf13522b964b92314d211eae
Validity
Not Before: Jun 16 17:00:23 2025 GMT
Not After : Jun 17 17:00:23 2025 GMT
Subject: CN=b2483c6f0e47d0222df00269d824c0b7f98a90d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:93:40:cf:1c:14:e0:ce:8a:32:c6:1c:ed:85:
18:53:9d:7e:2c:12:0b:46:12:6e:5a:bc:79:85:4e:
1b:38:23:98:8f:8a:67:cc:0e:a2:a2:0a:bf:87:2e:
61:94:85:dc:34:44:09:6f:4d:d3:63:3f:12:71:61:
d6:6e:16:3d:29:e0:8d:10:cb:4e:92:89:dd:b9:dc:
df:b9:88:17:8f:a4:18:2b:7c:1b:64:42:05:5d:a0:
f5:85:80:ed:05:13:e6:58:82:c1:1e:03:99:e3:b8:
82:3e:36:62:db:a2:da:46:81:e0:96:a0:83:cc:e5:
ab:48:b5:0e:2f:e6:cb:4b:2b:75:98:38:b4:b3:35:
87:5d:42:6b:d4:98:ce:08:ba:a0:c3:ed:a5:ad:35:
58:d0:c3:77:8d:a0:8b:77:b8:11:e9:e4:0d:a0:cf:
29:b9:28:5b:75:98:8c:7c:2e:74:6b:5e:80:d1:65:
30:06:bd:ad:5c:a0:99:ec:96:23:b3:8c:45:4e:68:
4b:b5:ce:08:95:82:d5:dc:38:e9:e9:95:f3:6d:22:
a1:fa:d7:f5:db:c5:56:0d:38:9b:42:ef:b7:0a:f2:
2b:9b:fc:e8:c5:c5:06:c6:42:48:68:2c:29:5e:ae:
8c:c4:3c:57:e5:fc:2a:55:dc:48:1e:01:6f:6e:34:
54:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:48:3C:6F:0E:47:D0:22:2D:F0:02:69:D8:24:C0:B7:F9:8A:90:D2
X509v3 Authority Key Identifier:
keyid:B5:7C:8A:C0:55:C5:74:D8:CF:13:52:2B:96:4B:92:31:4D:21:1E:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tXyKwFXFdNjPE1IrlkuSMU0hHq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/289f40-a233-4c63-b93e-8e4c7c7b6504/1/tXyKwFXFdNjPE1IrlkuSMU0hHq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/289f40-a233-4c63-b93e-8e4c7c7b6504/1/tXyKwFXFdNjPE1IrlkuSMU0hHq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:a6:00:59:e8:e7:7f:e7:99:da:26:25:e5:53:24:6e:2f:a1:
95:99:a1:33:0a:01:8c:70:11:3a:da:a7:60:ba:7f:43:b4:90:
c7:4f:e3:5d:e1:4c:9d:66:5d:66:7c:a7:91:66:f6:f0:74:35:
79:16:f9:94:7e:3e:34:e4:f3:c5:93:b0:60:b6:d5:64:30:97:
43:52:c7:22:10:2e:45:66:fc:5d:d2:10:1b:2d:f9:9b:4b:34:
a2:83:6a:c9:07:38:af:15:6c:3a:93:57:41:ee:7f:0b:95:c7:
c7:1a:74:bf:bd:cb:cc:43:90:9c:9e:e8:8e:28:e4:55:c7:10:
70:c8:9b:9a:2c:38:83:6b:8c:88:b3:04:78:8f:6c:ff:05:82:
83:1a:2f:92:44:c7:ab:8a:59:8c:20:74:fc:e4:34:31:70:b8:
40:ee:bf:ed:43:d7:ea:1f:52:bf:da:51:ca:9b:2a:eb:38:de:
9e:83:7f:87:97:fd:dd:c5:70:c4:c3:2b:55:4b:1c:4e:f9:cb:
88:07:b4:28:ae:7d:57:17:62:8b:ae:ce:6b:f1:bf:d1:3c:3a:
22:5e:81:cf:af:80:b9:5b:58:e0:30:42:07:51:78:5a:82:eb:
3d:c6:ea:66:79:50:68:84:ce:08:7a:28:8f:3a:f8:0a:00:86:
29:82:b0:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 23:03:50 2025 by rpki-client