Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/e71c9c-f589-476c-b080-c01db9d53479/1/TJ2SOjtDQWlZV2vLQAQWylz2Bg0.mft
File: TJ2SOjtDQWlZV2vLQAQWylz2Bg0.mft (raw, json)
Hash identifier: q5GTyFTJjVtTv6fMwtET/RAulOFXG4XBT2gDdXIi8dM=
Subject key identifier: 8D:A0:8F:02:49:60:60:5D:66:EE:0E:39:51:81:CA:4F:DE:14:E4:87
Authority key identifier: 4C:9D:92:3A:3B:43:41:69:59:57:6B:CB:40:04:16:CA:5C:F6:06:0D
Certificate issuer: /CN=4c9d923a3b43416959576bcb400416ca5cf6060d
Certificate serial: 0197696105DC48743AD33EC0118893835705
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TJ2SOjtDQWlZV2vLQAQWylz2Bg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/e71c9c-f589-476c-b080-c01db9d53479/1/TJ2SOjtDQWlZV2vLQAQWylz2Bg0.mft
Manifest number: 06FD
Signing time: Fri 13 Jun 2025 13:00:55 +0000
Manifest this update: Fri 13 Jun 2025 13:00:55 +0000
Manifest next update: Sat 14 Jun 2025 13:00:55 +0000
Files and hashes: 1: TJ2SOjtDQWlZV2vLQAQWylz2Bg0.crl (hash: Qe+DEVmGnBJBZarsWJZQRZOZ4LIp1Y7okYqkBDrN1Ng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/e71c9c-f589-476c-b080-c01db9d53479/1/TJ2SOjtDQWlZV2vLQAQWylz2Bg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/e71c9c-f589-476c-b080-c01db9d53479/1/TJ2SOjtDQWlZV2vLQAQWylz2Bg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/TJ2SOjtDQWlZV2vLQAQWylz2Bg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:61:05:dc:48:74:3a:d3:3e:c0:11:88:93:83:57:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c9d923a3b43416959576bcb400416ca5cf6060d
Validity
Not Before: Jun 13 13:00:55 2025 GMT
Not After : Jun 14 13:00:55 2025 GMT
Subject: CN=8da08f024960605d66ee0e395181ca4fde14e487
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:7e:4b:b0:7d:f5:5b:86:9d:bb:b1:3e:4e:ad:
88:d3:f8:25:4b:29:05:26:a5:ac:d3:7b:14:02:ba:
3c:75:5a:dc:17:2a:35:1c:eb:d5:3a:40:86:3b:15:
a9:07:c7:dc:86:af:29:3e:c5:2b:21:22:2f:9b:e9:
bb:14:56:4e:25:71:95:f9:3c:c8:9a:a3:d0:09:43:
8e:e9:87:63:2d:2d:44:ee:f1:12:46:4e:06:30:39:
b6:9e:4a:dd:9b:97:c9:13:a3:89:ff:06:32:2c:4e:
8e:53:e4:1f:31:3a:6d:ba:70:1b:d6:2d:23:d8:23:
34:55:ce:52:9b:91:e9:75:cd:b1:0c:28:33:03:32:
12:94:fd:6e:d9:ed:28:7c:0e:18:bb:1d:a9:a9:cb:
9a:1b:eb:7d:bc:a1:f8:df:4d:30:e6:bd:bd:e0:be:
16:3b:3c:2c:c0:45:0d:14:10:a0:16:b9:80:b1:f4:
c5:dc:cc:6f:16:0d:db:23:08:9c:41:f4:c8:47:d6:
a9:4e:04:bf:7d:b3:de:b3:2a:04:18:84:57:bb:d7:
eb:e0:8b:1f:7c:84:15:98:5d:e5:be:cc:9f:24:b1:
0e:e2:6e:2b:e2:d4:f9:fe:6f:dc:b1:af:3a:96:90:
34:4d:96:0b:8c:e6:51:38:75:b6:e5:04:92:fb:03:
c4:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:A0:8F:02:49:60:60:5D:66:EE:0E:39:51:81:CA:4F:DE:14:E4:87
X509v3 Authority Key Identifier:
keyid:4C:9D:92:3A:3B:43:41:69:59:57:6B:CB:40:04:16:CA:5C:F6:06:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TJ2SOjtDQWlZV2vLQAQWylz2Bg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/e71c9c-f589-476c-b080-c01db9d53479/1/TJ2SOjtDQWlZV2vLQAQWylz2Bg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/e71c9c-f589-476c-b080-c01db9d53479/1/TJ2SOjtDQWlZV2vLQAQWylz2Bg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:2b:85:4a:38:d3:36:91:07:11:21:b0:9c:55:7a:6a:f1:bc:
17:8d:bd:e1:d3:83:b5:23:4e:20:8c:15:bb:09:a6:2f:8c:15:
23:ee:3a:22:bc:d0:e2:f8:69:c8:4b:75:63:e6:f9:31:39:48:
61:a8:b8:21:e4:66:c5:05:b2:1d:fa:a8:75:2c:37:cb:65:96:
7e:3f:65:ab:4d:09:8c:55:69:57:a6:37:aa:6a:39:9f:b2:7d:
f7:04:e9:95:d4:ef:16:ec:2c:bf:1b:97:8f:bc:fa:d3:a0:39:
97:5c:d6:5f:c7:48:dd:da:3f:b1:66:47:2e:16:5a:5b:ac:b0:
30:c8:93:ed:fa:ec:13:5f:d7:6d:e5:1c:c3:45:7f:e3:17:5d:
a8:e8:51:96:74:e2:47:ad:27:b8:77:c3:9a:fb:e1:80:4c:c0:
26:3c:a0:bd:51:a7:de:11:a9:d6:bf:ce:f1:73:f8:8f:06:85:
65:0f:e8:18:e4:6f:d6:c2:66:29:39:98:b8:02:77:0f:44:aa:
b1:72:b8:66:37:22:a4:e0:28:dd:eb:26:cf:3f:8e:26:44:b6:
64:3b:1b:6e:7a:2e:bc:37:fd:49:83:e6:c1:5a:e7:1d:5e:74:
39:a7:14:c6:bb:8c:c9:7b:5f:31:64:e8:c7:23:fa:76:3e:a2:
01:88:66:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:16:29 2025 by rpki-client