Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/6f40dd-4c07-405b-a042-f9250dd79fe9/1/TNcQtlNz4NkQ2nBjb8FDwGul3aw.mft
File: TNcQtlNz4NkQ2nBjb8FDwGul3aw.mft (raw, json)
Hash identifier: OB7y9rmEVftJbtaBfRlA2uOWQQyJyCuYsKaBHJoxmKY=
Subject key identifier: 5F:40:B3:43:1D:85:A7:A0:5B:F2:A9:82:C5:A3:55:07:5D:BB:98:18
Authority key identifier: 4C:D7:10:B6:53:73:E0:D9:10:DA:70:63:6F:C1:43:C0:6B:A5:DD:AC
Certificate issuer: /CN=4cd710b65373e0d910da70636fc143c06ba5ddac
Certificate serial: 019769CE752CAC815AD2A193FC0E33DBF39B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TNcQtlNz4NkQ2nBjb8FDwGul3aw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/6f40dd-4c07-405b-a042-f9250dd79fe9/1/TNcQtlNz4NkQ2nBjb8FDwGul3aw.mft
Manifest number: 14E3
Signing time: Fri 13 Jun 2025 15:00:27 +0000
Manifest this update: Fri 13 Jun 2025 15:00:27 +0000
Manifest next update: Sat 14 Jun 2025 15:00:27 +0000
Files and hashes: 1: TNcQtlNz4NkQ2nBjb8FDwGul3aw.crl (hash: qDnaaXU8a88RZxuRWS0EVSRYqWJDuP4Dfv7q4ujhEOY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/6f40dd-4c07-405b-a042-f9250dd79fe9/1/TNcQtlNz4NkQ2nBjb8FDwGul3aw.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/6f40dd-4c07-405b-a042-f9250dd79fe9/1/TNcQtlNz4NkQ2nBjb8FDwGul3aw.mft
rsync://rpki.ripe.net/repository/DEFAULT/TNcQtlNz4NkQ2nBjb8FDwGul3aw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:ce:75:2c:ac:81:5a:d2:a1:93:fc:0e:33:db:f3:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cd710b65373e0d910da70636fc143c06ba5ddac
Validity
Not Before: Jun 13 15:00:27 2025 GMT
Not After : Jun 14 15:00:27 2025 GMT
Subject: CN=5f40b3431d85a7a05bf2a982c5a355075dbb9818
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:ac:ab:7f:6c:31:0e:17:4a:65:4d:44:94:2c:
78:3a:11:66:5e:1f:d0:c8:79:7d:1e:e9:6f:69:4a:
a8:49:49:0e:77:73:6d:64:4e:62:8e:9f:f4:42:02:
34:ef:cd:92:54:74:6a:1b:b7:2d:ea:3c:0d:8e:06:
ba:a8:8b:29:bb:e8:1d:98:f6:a6:82:59:bb:fd:58:
e4:f5:e3:bc:9e:71:0a:f0:42:9a:af:c6:5c:25:7d:
18:01:89:c2:a9:63:28:5e:b2:75:1b:6f:5e:9f:e6:
68:4d:75:84:38:cd:ef:bf:06:4f:4f:68:73:b3:69:
ea:f0:88:0c:3d:a1:b2:20:4b:70:ad:7b:6a:92:b3:
32:e9:7f:52:de:89:c7:0c:d1:0f:44:6b:96:85:0b:
52:63:53:bc:94:f3:a3:5a:eb:00:9f:8e:bd:ba:9f:
ea:c9:32:8f:2e:dd:84:ae:b9:25:54:a3:be:56:cf:
f5:03:3c:91:85:de:19:eb:86:11:be:4c:2a:1f:74:
37:ca:bb:3e:cf:ff:a8:6a:5b:1e:85:a2:01:04:85:
16:7a:d2:94:b0:e8:69:7d:f2:38:4c:f9:e8:0c:3f:
0b:2a:70:f9:52:d5:44:ac:a3:23:69:53:55:1a:3c:
33:3f:b9:a3:74:31:84:70:91:dc:8f:39:ee:c5:5e:
d5:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:40:B3:43:1D:85:A7:A0:5B:F2:A9:82:C5:A3:55:07:5D:BB:98:18
X509v3 Authority Key Identifier:
keyid:4C:D7:10:B6:53:73:E0:D9:10:DA:70:63:6F:C1:43:C0:6B:A5:DD:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TNcQtlNz4NkQ2nBjb8FDwGul3aw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6f40dd-4c07-405b-a042-f9250dd79fe9/1/TNcQtlNz4NkQ2nBjb8FDwGul3aw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6f40dd-4c07-405b-a042-f9250dd79fe9/1/TNcQtlNz4NkQ2nBjb8FDwGul3aw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:2f:a7:3a:93:f2:9d:fe:89:7e:15:b0:35:63:39:6f:27:23:
bb:db:e9:e2:ce:bc:bc:4c:59:3b:9e:b4:6d:42:8a:84:d8:94:
24:cc:19:43:cc:44:eb:ae:e6:ce:a4:5b:ef:64:15:2d:77:dd:
53:c5:50:16:5c:5b:20:be:e0:89:9d:f5:5a:aa:76:62:50:7c:
64:e6:e4:90:9b:40:02:ce:34:f3:55:f3:2a:07:d9:e3:ad:04:
6c:e5:18:3f:20:33:3e:2d:27:e1:a6:c6:30:aa:1a:38:4b:62:
36:ff:8f:77:3a:f8:22:82:4d:b5:e7:0e:fc:8a:45:cc:bf:24:
2b:cd:82:c4:fa:4a:8e:65:9f:66:52:81:8b:44:06:c9:ae:35:
b6:1f:62:7f:a3:46:14:e5:aa:78:b8:07:0c:f9:e5:74:bb:4c:
be:5b:e8:9c:39:cd:24:88:2e:87:e5:f0:41:a6:ca:be:e6:bf:
85:39:1c:0b:1b:21:c3:fa:af:aa:05:df:c0:16:a2:b6:31:c6:
5d:71:36:e1:b6:ae:31:b0:11:90:f2:63:df:4d:d9:44:ca:b7:
00:c2:06:d1:eb:15:50:66:65:13:d6:87:f0:cd:a1:c5:a8:c0:
58:29:3d:cc:0e:6b:dd:0e:f8:08:17:2a:96:37:25:3c:44:61:
09:20:fe:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:08:28 2025 by rpki-client