Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/b85caf-f20e-4b67-98a0-ff7f48f93f01/1/T6iT4zqCH_ZtOPDrzkmRHzpflk4.mft
File: T6iT4zqCH_ZtOPDrzkmRHzpflk4.mft (raw, json)
Hash identifier: DSsfv5Not4GHsTwsJswAFKkhbXKBZzaadGRekBL+g1Q=
Subject key identifier: FA:99:21:1B:73:5F:E3:19:97:E2:84:83:B2:8C:4D:E8:98:8A:5D:C6
Authority key identifier: 4F:A8:93:E3:3A:82:1F:F6:6D:38:F0:EB:CE:49:91:1F:3A:5F:96:4E
Certificate issuer: /CN=4fa893e33a821ff66d38f0ebce49911f3a5f964e
Certificate serial: 01976C2A9CE379FC147988910C693253B116
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T6iT4zqCH_ZtOPDrzkmRHzpflk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/b85caf-f20e-4b67-98a0-ff7f48f93f01/1/T6iT4zqCH_ZtOPDrzkmRHzpflk4.mft
Manifest number: 0673
Signing time: Sat 14 Jun 2025 02:00:21 +0000
Manifest this update: Sat 14 Jun 2025 02:00:21 +0000
Manifest next update: Sun 15 Jun 2025 02:00:21 +0000
Files and hashes: 1: T6iT4zqCH_ZtOPDrzkmRHzpflk4.crl (hash: lZ7hcKMQdHyyudvw1zjQYl9yryQr3CpnhLy0u1hXpDY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/b85caf-f20e-4b67-98a0-ff7f48f93f01/1/T6iT4zqCH_ZtOPDrzkmRHzpflk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/b85caf-f20e-4b67-98a0-ff7f48f93f01/1/T6iT4zqCH_ZtOPDrzkmRHzpflk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/T6iT4zqCH_ZtOPDrzkmRHzpflk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:2a:9c:e3:79:fc:14:79:88:91:0c:69:32:53:b1:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fa893e33a821ff66d38f0ebce49911f3a5f964e
Validity
Not Before: Jun 14 02:00:21 2025 GMT
Not After : Jun 15 02:00:21 2025 GMT
Subject: CN=fa99211b735fe31997e28483b28c4de8988a5dc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:fe:db:6c:a2:5e:d4:48:ab:3f:8e:0b:d3:7d:
a1:70:59:0e:67:35:57:70:dd:d9:97:78:39:80:a0:
73:1e:11:4d:50:cb:ae:e5:81:a0:01:26:b0:bc:78:
49:b1:41:9f:75:67:5e:04:9b:90:ce:79:1b:30:b4:
03:99:c7:5d:0b:d2:ab:bd:3a:22:44:0e:2b:ca:6c:
54:90:4f:3a:58:4b:16:94:30:d9:71:9f:81:d5:d1:
df:36:f1:a9:85:1f:2a:65:fe:1d:02:a3:95:80:11:
24:b4:b3:23:e5:f3:7a:68:d1:c1:92:cc:e2:5b:98:
18:e7:ce:11:1e:da:11:97:c2:f8:e1:62:e8:6b:55:
37:47:26:36:29:70:c8:17:01:ff:df:44:0a:b0:a5:
dd:b8:73:93:a5:4d:9b:3f:48:49:ea:61:25:0f:7a:
8c:1a:b5:11:c2:0b:17:9c:9e:c0:91:94:6a:66:c7:
88:f6:54:6d:f4:5b:b1:bd:53:95:86:8d:77:c0:e5:
ee:7d:2c:65:4c:d7:31:22:ab:22:15:70:a3:5e:ba:
e6:41:b6:61:db:17:72:fc:f8:53:72:fb:e2:11:c7:
91:67:df:92:2c:09:51:3a:ad:64:97:df:e5:ab:6b:
8d:bc:05:33:e7:54:b8:09:c0:4f:a4:6b:43:d9:0c:
72:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:99:21:1B:73:5F:E3:19:97:E2:84:83:B2:8C:4D:E8:98:8A:5D:C6
X509v3 Authority Key Identifier:
keyid:4F:A8:93:E3:3A:82:1F:F6:6D:38:F0:EB:CE:49:91:1F:3A:5F:96:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T6iT4zqCH_ZtOPDrzkmRHzpflk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/b85caf-f20e-4b67-98a0-ff7f48f93f01/1/T6iT4zqCH_ZtOPDrzkmRHzpflk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/b85caf-f20e-4b67-98a0-ff7f48f93f01/1/T6iT4zqCH_ZtOPDrzkmRHzpflk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:3f:d0:2e:35:be:a7:3c:87:f1:c0:b1:f5:ee:ae:7e:49:bb:
45:89:b5:f2:1a:ac:7f:2c:e8:0f:de:d3:40:f4:3b:64:d5:d7:
9e:3d:4f:2a:42:fa:22:98:75:6e:96:28:fd:2f:1f:59:c1:7f:
55:9a:1d:22:6a:86:00:c3:5f:82:6a:15:43:dd:16:c5:0a:93:
da:29:14:de:2d:b5:11:13:77:73:f0:79:35:10:63:2a:21:0d:
18:2b:82:e5:af:23:68:dd:c3:25:15:fd:b9:31:81:f1:82:ac:
6a:2a:10:c7:df:ef:6b:6c:f0:11:aa:e2:d7:c7:9e:65:1f:79:
3b:6f:d0:32:2f:ae:27:28:40:e1:17:aa:02:8c:ec:dd:af:37:
7b:ef:04:f8:9d:f4:79:cb:95:78:94:d1:04:73:6c:d0:74:dd:
70:6c:8b:57:5d:7c:e2:44:0d:bd:44:87:eb:8b:f5:a9:89:45:
d5:c8:00:73:c6:f8:68:44:a1:8a:ad:a3:48:99:98:c0:bc:08:
1a:91:26:b1:88:1f:66:4b:10:9e:3c:46:43:06:89:e9:3b:4d:
4b:d5:c7:67:11:7f:2d:f2:f4:49:c5:76:35:77:f5:ce:f7:9f:
ed:98:c9:b6:2f:83:1d:dd:96:2d:7c:25:1e:57:75:b1:e6:5a:
4f:80:62:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:19:33 2025 by rpki-client