Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/58bb93-f6a2-4898-bfd8-05d8756f092e/1/TT2CE15FkxVfpq1vt_7LAfE4GLI.mft
File: TT2CE15FkxVfpq1vt_7LAfE4GLI.mft (raw, json)
Hash identifier: ZnPIPHROhCTvUnnTkNginmt5zlsJ97kON2q3ppWEWsw=
Subject key identifier: A1:19:D8:09:48:63:D3:E7:CF:AD:6F:5F:73:DC:24:1D:32:8C:3F:2A
Authority key identifier: 4D:3D:82:13:5E:45:93:15:5F:A6:AD:6F:B7:FE:CB:01:F1:38:18:B2
Certificate issuer: /CN=4d3d82135e4593155fa6ad6fb7fecb01f13818b2
Certificate serial: 01976F62DD6679E478D26A1AFEBCC663CED8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TT2CE15FkxVfpq1vt_7LAfE4GLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/58bb93-f6a2-4898-bfd8-05d8756f092e/1/TT2CE15FkxVfpq1vt_7LAfE4GLI.mft
Manifest number: 0A01
Signing time: Sat 14 Jun 2025 17:00:39 +0000
Manifest this update: Sat 14 Jun 2025 17:00:39 +0000
Manifest next update: Sun 15 Jun 2025 17:00:39 +0000
Files and hashes: 1: TT2CE15FkxVfpq1vt_7LAfE4GLI.crl (hash: qRZWmWvZd25DrWkMkvpq72heL78nW6JRDM+t4hbPlFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/58bb93-f6a2-4898-bfd8-05d8756f092e/1/TT2CE15FkxVfpq1vt_7LAfE4GLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/58bb93-f6a2-4898-bfd8-05d8756f092e/1/TT2CE15FkxVfpq1vt_7LAfE4GLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/TT2CE15FkxVfpq1vt_7LAfE4GLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 17:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:62:dd:66:79:e4:78:d2:6a:1a:fe:bc:c6:63:ce:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d3d82135e4593155fa6ad6fb7fecb01f13818b2
Validity
Not Before: Jun 14 17:00:39 2025 GMT
Not After : Jun 15 17:00:39 2025 GMT
Subject: CN=a119d8094863d3e7cfad6f5f73dc241d328c3f2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:3e:dc:c9:1d:f9:1c:83:1c:b3:c4:a4:f3:08:
a2:78:b9:0e:cf:fb:c9:4e:4d:3c:5a:34:08:2f:92:
c6:2b:be:ef:7f:49:28:3e:79:35:76:9c:07:57:c8:
12:f5:22:f7:0d:ee:e6:d4:41:6d:bd:99:df:0e:9d:
fc:ee:e5:7f:d9:76:f9:d0:2f:d1:16:97:8b:76:36:
05:ca:e0:7f:b1:8f:0b:b0:96:5f:83:b2:4d:0a:40:
9d:ee:d4:17:13:17:ac:79:b4:23:39:fc:7c:c3:c3:
37:cb:6a:e7:e5:04:42:9a:0e:31:63:69:75:9a:c4:
cb:ed:84:81:8f:d6:2f:8d:15:64:c9:95:03:f3:a2:
a1:5a:06:6c:52:5c:2f:62:cf:c3:f7:78:26:e6:dd:
dc:55:ba:52:12:29:15:15:bf:9c:98:7d:5e:42:f7:
6a:90:8d:7a:c4:89:84:4f:c5:cb:0a:d5:e2:6f:37:
52:60:c9:b0:ba:63:67:bb:ee:2b:bd:84:b4:84:98:
6e:19:55:61:bd:3b:7f:e4:ed:53:b2:b3:37:76:51:
64:4d:55:57:a3:c8:63:ec:2a:b6:4e:8a:2a:96:9e:
68:90:22:95:44:25:5f:32:e1:c9:91:87:49:bc:08:
2c:f3:09:de:5c:1d:fe:af:19:71:03:af:03:88:b1:
3d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:19:D8:09:48:63:D3:E7:CF:AD:6F:5F:73:DC:24:1D:32:8C:3F:2A
X509v3 Authority Key Identifier:
keyid:4D:3D:82:13:5E:45:93:15:5F:A6:AD:6F:B7:FE:CB:01:F1:38:18:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TT2CE15FkxVfpq1vt_7LAfE4GLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/58bb93-f6a2-4898-bfd8-05d8756f092e/1/TT2CE15FkxVfpq1vt_7LAfE4GLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/58bb93-f6a2-4898-bfd8-05d8756f092e/1/TT2CE15FkxVfpq1vt_7LAfE4GLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:f9:23:83:a1:fa:81:7f:ef:2a:c7:13:5d:21:65:23:51:7f:
fc:2f:b5:fd:cf:e2:50:79:f0:32:1e:39:ed:e9:57:7e:ae:64:
f8:14:67:a3:94:77:72:c2:4a:40:a9:cb:c7:69:01:62:26:50:
57:c2:60:7a:db:dc:1f:a2:4a:73:85:ee:6c:43:6c:0a:f5:f5:
92:b7:b3:97:91:98:09:73:66:3d:16:76:e5:1e:7f:5b:ff:b6:
cd:39:54:15:9f:c3:35:7b:3d:8b:42:b6:6c:c5:d6:1d:62:8e:
08:2d:2f:cd:8d:22:0c:6d:a5:1f:b1:60:51:53:8f:38:aa:47:
34:45:d1:b7:66:0f:d2:8b:c4:c4:d1:f3:1f:2c:f1:c2:3e:03:
40:53:5e:9e:2f:37:6f:48:2f:a3:33:ed:e9:67:26:b5:97:64:
bc:95:22:9c:f6:2b:e4:87:04:85:13:fd:e0:a2:a9:b0:51:f8:
83:8f:4a:0c:a8:30:ce:f8:0a:78:2a:5b:09:23:d0:ec:86:39:
91:e9:ef:7b:90:10:c3:31:5b:de:48:a4:16:74:6a:22:c9:1b:
e0:e1:17:14:1c:08:a4:98:a2:13:0e:c1:88:57:91:3e:f0:9f:
59:6e:dd:0d:d7:4e:db:6f:81:c8:6c:94:34:fc:60:ba:6f:7d:
50:85:f2:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 01:06:33 2025 by rpki-client