Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/e85418-64b3-444b-913a-63c2ba4c996c/1/t4Xsc9wYH5k1ZZ9YrtIIUyosKmo.mft
File: t4Xsc9wYH5k1ZZ9YrtIIUyosKmo.mft (raw, json)
Hash identifier: OC3/KLLAIdLM9v2fIdy91IPgD5g8/f+07Pvg0cVcDSs=
Subject key identifier: 99:3E:8C:64:4E:CF:A8:85:04:4C:0B:5B:AB:9F:7E:80:4A:71:0D:BC
Authority key identifier: B7:85:EC:73:DC:18:1F:99:35:65:9F:58:AE:D2:08:53:2A:2C:2A:6A
Certificate issuer: /CN=b785ec73dc181f9935659f58aed208532a2c2a6a
Certificate serial: 01977AC28A2B9E0763DD48B95E0FF880CF17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t4Xsc9wYH5k1ZZ9YrtIIUyosKmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/e85418-64b3-444b-913a-63c2ba4c996c/1/t4Xsc9wYH5k1ZZ9YrtIIUyosKmo.mft
Manifest number: 0122
Signing time: Mon 16 Jun 2025 22:00:59 +0000
Manifest this update: Mon 16 Jun 2025 22:00:59 +0000
Manifest next update: Tue 17 Jun 2025 22:00:59 +0000
Files and hashes: 1: t4Xsc9wYH5k1ZZ9YrtIIUyosKmo.crl (hash: +8sI/AyypGfIiSGbKSy9x3jTFUBaMcG9NAnHEDTfbGI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/e85418-64b3-444b-913a-63c2ba4c996c/1/t4Xsc9wYH5k1ZZ9YrtIIUyosKmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/e85418-64b3-444b-913a-63c2ba4c996c/1/t4Xsc9wYH5k1ZZ9YrtIIUyosKmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/t4Xsc9wYH5k1ZZ9YrtIIUyosKmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 21:51:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7a:c2:8a:2b:9e:07:63:dd:48:b9:5e:0f:f8:80:cf:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b785ec73dc181f9935659f58aed208532a2c2a6a
Validity
Not Before: Jun 16 22:00:59 2025 GMT
Not After : Jun 17 22:00:59 2025 GMT
Subject: CN=993e8c644ecfa885044c0b5bab9f7e804a710dbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:01:8d:b6:a5:39:58:1c:fb:28:70:dc:d0:ba:
cc:19:30:21:de:8c:76:6c:ec:6c:dd:31:bb:15:ed:
3c:69:47:51:c9:49:62:75:94:04:a5:ce:f3:b0:1b:
d8:1c:cb:4f:d8:fa:ed:8e:ce:b0:3e:d8:42:87:be:
05:2f:30:93:73:ba:a7:29:6e:03:c5:56:d8:54:83:
81:60:c2:8a:b7:ef:2c:d8:d8:09:80:be:ca:22:dc:
16:a5:22:7b:57:c3:a5:d1:e5:99:1f:d6:1d:aa:8e:
38:0c:a7:7b:14:e8:80:f2:40:65:2c:6f:6f:12:7c:
82:9a:55:b0:6a:8b:c7:82:6b:20:70:bd:e7:61:a0:
3f:d8:c3:c0:2a:30:d3:e6:fe:73:f4:20:a2:f3:a6:
45:09:39:fa:a9:71:33:86:a6:af:fe:57:20:1f:5d:
87:6e:df:2e:b5:62:77:a3:aa:ef:b6:6a:da:ea:78:
bc:85:86:57:ef:62:e4:17:4e:5d:7c:60:d5:89:a6:
44:a4:f5:f2:d3:3c:b0:0b:11:d8:fb:2b:15:fc:3a:
85:8a:f6:31:69:92:ee:ca:83:01:b7:e9:71:61:7a:
53:e4:51:ce:8f:73:b8:a1:6d:24:99:fc:f7:a3:8c:
cb:80:1a:51:19:71:70:1f:37:09:29:64:75:10:8f:
f6:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:3E:8C:64:4E:CF:A8:85:04:4C:0B:5B:AB:9F:7E:80:4A:71:0D:BC
X509v3 Authority Key Identifier:
keyid:B7:85:EC:73:DC:18:1F:99:35:65:9F:58:AE:D2:08:53:2A:2C:2A:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4Xsc9wYH5k1ZZ9YrtIIUyosKmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e85418-64b3-444b-913a-63c2ba4c996c/1/t4Xsc9wYH5k1ZZ9YrtIIUyosKmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e85418-64b3-444b-913a-63c2ba4c996c/1/t4Xsc9wYH5k1ZZ9YrtIIUyosKmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:e8:dd:46:dc:2b:58:32:f7:b4:3a:e9:fe:40:2a:1b:2e:68:
2f:22:d0:a6:6d:14:3f:ba:fe:be:d5:a6:1b:57:c0:b8:0a:84:
4b:1e:18:ba:89:22:1e:bf:49:ab:0d:ba:ff:45:6e:5c:69:f6:
ac:bf:ea:88:50:6b:22:b3:d5:71:7c:64:2e:dd:92:ed:71:74:
1c:06:aa:81:f6:93:98:cc:df:f9:40:ba:29:94:fb:67:50:97:
0a:ff:10:14:11:24:ca:e6:12:45:b2:7b:1e:79:32:26:8e:7f:
e7:59:82:19:3c:13:ca:00:6b:1b:48:49:b1:56:ea:d6:48:86:
c1:93:b3:c4:d8:e6:87:a5:44:7a:a3:56:48:f0:b5:34:12:45:
f1:c9:8d:80:30:fd:66:ce:df:54:eb:3f:9b:05:e8:01:51:77:
be:02:50:a7:63:f3:21:f3:27:7e:27:9b:58:20:04:14:5a:63:
a1:14:47:b3:72:0d:a2:2e:97:39:bf:58:86:55:9d:50:a3:b1:
31:ce:40:6c:a0:88:e2:9c:51:1e:07:41:00:53:fc:b6:2a:04:
64:5b:fc:57:01:14:3a:ba:ad:51:8c:96:80:14:fb:2a:4d:71:
e1:de:07:07:0b:94:08:ea:b6:39:d8:c8:6b:ea:88:0a:38:aa:
76:1c:a6:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 04:35:37 2025 by rpki-client