Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/901607-b1ee-49f0-bde2-7cba35cb6b81/1/tPtrTEeRZokREVxp4mlk89XsovQ.mft
File: tPtrTEeRZokREVxp4mlk89XsovQ.mft (raw, json)
Hash identifier: /0y/5/8voN+2pypPu8FbuGclqqlx3IY15VmLHHOeNsQ=
Subject key identifier: 8B:4E:45:24:40:DD:FB:83:3B:89:9A:C6:B4:3B:1B:D0:F0:68:89:83
Authority key identifier: B4:FB:6B:4C:47:91:66:89:11:11:5C:69:E2:69:64:F3:D5:EC:A2:F4
Certificate issuer: /CN=b4fb6b4c4791668911115c69e26964f3d5eca2f4
Certificate serial: 01976EBE3051876273AB6DE3A752F9417111
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPtrTEeRZokREVxp4mlk89XsovQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/901607-b1ee-49f0-bde2-7cba35cb6b81/1/tPtrTEeRZokREVxp4mlk89XsovQ.mft
Manifest number: 02EA
Signing time: Sat 14 Jun 2025 14:00:47 +0000
Manifest this update: Sat 14 Jun 2025 14:00:47 +0000
Manifest next update: Sun 15 Jun 2025 14:00:47 +0000
Files and hashes: 1: tPtrTEeRZokREVxp4mlk89XsovQ.crl (hash: sdgdMOiL8/7Py39nmhjxzqZAGJOBuae88ICtvboI3I8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/901607-b1ee-49f0-bde2-7cba35cb6b81/1/tPtrTEeRZokREVxp4mlk89XsovQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/901607-b1ee-49f0-bde2-7cba35cb6b81/1/tPtrTEeRZokREVxp4mlk89XsovQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/tPtrTEeRZokREVxp4mlk89XsovQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:be:30:51:87:62:73:ab:6d:e3:a7:52:f9:41:71:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4fb6b4c4791668911115c69e26964f3d5eca2f4
Validity
Not Before: Jun 14 14:00:47 2025 GMT
Not After : Jun 15 14:00:47 2025 GMT
Subject: CN=8b4e452440ddfb833b899ac6b43b1bd0f0688983
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:86:d3:d3:0d:0c:ea:01:1c:1d:3d:44:e1:16:
c3:15:e8:98:7e:81:be:38:f1:2e:33:20:46:32:4f:
3b:23:f2:0d:ca:a5:4f:6c:65:51:c8:e1:5d:6d:90:
a9:54:0e:e5:50:3d:c5:46:c2:b3:bf:76:cf:37:9b:
99:6f:3a:a8:8d:63:b1:bf:c8:b1:e7:71:25:54:22:
7d:2c:d0:a2:20:26:b4:d7:0a:f1:57:6e:c6:57:fa:
f0:0a:c2:7f:d2:9b:33:7a:9b:c0:4d:17:06:62:49:
98:07:06:20:bf:6d:9c:1e:55:b9:e0:c5:38:f7:7b:
e0:9b:ac:55:d3:03:1b:20:50:1c:1d:75:fa:36:a1:
e5:13:3d:56:69:c6:7b:d0:de:84:c5:85:44:e5:08:
8e:71:22:2b:7f:61:e7:da:f0:d4:99:93:9e:ab:45:
76:81:a6:df:f0:af:f2:c6:30:13:1e:67:ef:f2:d6:
9a:f9:1e:65:fc:d1:a7:f9:56:95:0c:80:94:15:ef:
3b:09:f2:8f:d0:81:50:db:89:6e:24:d6:3c:1b:ff:
17:fa:a9:45:ee:85:34:f5:9c:84:73:d3:c7:ca:e4:
73:e6:eb:52:c4:41:30:8f:a9:80:eb:eb:76:a2:af:
70:83:b7:15:27:18:c6:22:ad:54:60:f2:76:24:8e:
13:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:4E:45:24:40:DD:FB:83:3B:89:9A:C6:B4:3B:1B:D0:F0:68:89:83
X509v3 Authority Key Identifier:
keyid:B4:FB:6B:4C:47:91:66:89:11:11:5C:69:E2:69:64:F3:D5:EC:A2:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPtrTEeRZokREVxp4mlk89XsovQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/901607-b1ee-49f0-bde2-7cba35cb6b81/1/tPtrTEeRZokREVxp4mlk89XsovQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/901607-b1ee-49f0-bde2-7cba35cb6b81/1/tPtrTEeRZokREVxp4mlk89XsovQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:54:67:73:e6:e2:48:62:98:77:58:39:6c:29:03:42:28:06:
e8:74:8d:43:b8:0f:d1:0f:b9:55:7a:e3:28:5c:f5:18:28:3f:
39:20:03:a0:9a:7b:f0:86:eb:9b:94:f3:98:93:46:b3:03:c2:
46:3d:12:22:37:74:45:c3:7b:c6:01:9c:53:f7:48:fb:98:82:
4a:f5:92:87:e1:2f:cf:ba:6f:41:23:1a:e0:68:88:e5:a4:88:
13:ce:09:86:32:5d:5b:0f:33:bb:d7:9f:8c:47:09:74:a1:2d:
04:d4:3d:8d:f8:01:bf:82:2b:d5:3f:ef:56:7a:d1:39:5c:aa:
87:8a:04:5d:d1:3e:82:3b:b3:07:c6:9a:af:fa:60:0c:e9:6f:
6a:2c:a1:29:0a:d9:43:33:ec:f1:43:e8:29:05:11:21:e0:f8:
b3:54:20:cb:1a:db:4f:cc:15:d9:55:f4:7a:57:eb:02:30:d3:
31:35:81:de:77:1f:b6:6a:a6:b4:ce:01:87:a3:27:81:ae:3d:
4e:c7:c3:14:d0:e2:df:5e:82:6d:9b:6d:f4:36:06:29:58:55:
91:83:a6:b8:05:10:b2:bf:ea:90:5f:48:58:d4:0c:c4:47:4c:
71:1f:3e:f1:1b:57:03:d4:37:16:f6:2f:74:57:87:11:d2:4b:
a7:90:64:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:09:37 2025 by rpki-client