Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/6a4b86-32b4-405f-bd65-68083709a4b5/1/TUknoUH7JbdYJMa-rvBnnTT8Sb0.mft
File: TUknoUH7JbdYJMa-rvBnnTT8Sb0.mft (raw, json)
Hash identifier: d9lXE/mCo2bI3dpk6kBXy9J8njm8XuhYKPE9GL4En+Q=
Subject key identifier: BE:F6:E9:16:D3:C0:28:3A:2B:0B:0C:1E:22:F1:1F:27:D5:B3:CC:BB
Authority key identifier: 4D:49:27:A1:41:FB:25:B7:58:24:C6:BE:AE:F0:67:9D:34:FC:49:BD
Certificate issuer: /CN=4d4927a141fb25b75824c6beaef0679d34fc49bd
Certificate serial: 019771F6350C70DD66C9EC688797532EDFAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TUknoUH7JbdYJMa-rvBnnTT8Sb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/6a4b86-32b4-405f-bd65-68083709a4b5/1/TUknoUH7JbdYJMa-rvBnnTT8Sb0.mft
Manifest number: 0286
Signing time: Sun 15 Jun 2025 05:00:50 +0000
Manifest this update: Sun 15 Jun 2025 05:00:50 +0000
Manifest next update: Mon 16 Jun 2025 05:00:50 +0000
Files and hashes: 1: TUknoUH7JbdYJMa-rvBnnTT8Sb0.crl (hash: yXpmK0zJOT7Cb7A9h58IN4OIVTI3FZYc2pB4aIoT1Js=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/6a4b86-32b4-405f-bd65-68083709a4b5/1/TUknoUH7JbdYJMa-rvBnnTT8Sb0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/6a4b86-32b4-405f-bd65-68083709a4b5/1/TUknoUH7JbdYJMa-rvBnnTT8Sb0.mft
rsync://rpki.ripe.net/repository/DEFAULT/TUknoUH7JbdYJMa-rvBnnTT8Sb0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:f6:35:0c:70:dd:66:c9:ec:68:87:97:53:2e:df:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d4927a141fb25b75824c6beaef0679d34fc49bd
Validity
Not Before: Jun 15 05:00:50 2025 GMT
Not After : Jun 16 05:00:50 2025 GMT
Subject: CN=bef6e916d3c0283a2b0b0c1e22f11f27d5b3ccbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:49:ca:15:6a:1c:63:21:ff:90:3b:d7:b2:2c:
ca:b8:e8:26:a3:7c:bd:c4:51:fd:91:78:73:09:3c:
95:a1:b5:35:04:ec:7e:fd:60:84:e8:aa:3c:6a:04:
8a:36:83:96:30:fa:63:6c:98:63:61:70:13:76:7d:
b3:19:99:4c:12:20:97:6b:1f:d5:9f:f8:42:60:46:
c8:34:07:53:12:5a:ff:e3:a3:2b:bc:2f:9f:ee:94:
1c:ea:bf:f8:39:a9:10:b6:76:1b:e5:f5:62:ff:4e:
48:52:7a:49:3e:bf:89:45:d2:a3:d0:4f:de:1b:67:
46:49:6c:75:31:f5:60:51:21:b9:e9:61:88:50:37:
81:af:4c:9d:b9:b9:54:7a:6f:94:ab:03:87:17:ac:
8d:ab:f1:ed:a2:9d:65:0f:96:e4:db:b6:9c:f8:53:
02:80:16:06:5f:04:c9:38:69:f0:3b:f1:c1:cc:db:
98:f0:a2:09:82:34:57:41:ba:be:1f:9c:82:e7:9a:
43:cd:4f:e3:04:87:02:34:d0:b9:7a:5b:24:94:fc:
92:81:f9:b3:d5:8f:5c:29:be:b5:6e:e1:f8:0a:02:
fa:d0:de:d9:e8:41:5e:70:50:8c:cc:f3:65:c7:9b:
67:28:c1:d3:ba:a1:4b:ad:75:17:8c:13:f7:cc:07:
b9:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:F6:E9:16:D3:C0:28:3A:2B:0B:0C:1E:22:F1:1F:27:D5:B3:CC:BB
X509v3 Authority Key Identifier:
keyid:4D:49:27:A1:41:FB:25:B7:58:24:C6:BE:AE:F0:67:9D:34:FC:49:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TUknoUH7JbdYJMa-rvBnnTT8Sb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/6a4b86-32b4-405f-bd65-68083709a4b5/1/TUknoUH7JbdYJMa-rvBnnTT8Sb0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/6a4b86-32b4-405f-bd65-68083709a4b5/1/TUknoUH7JbdYJMa-rvBnnTT8Sb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:1b:62:40:39:d1:6b:96:0c:c1:7a:8a:88:ca:81:45:22:fa:
62:84:7c:12:0d:41:24:e7:e3:7d:0e:a5:38:c8:74:6d:ae:d4:
07:9a:9e:90:9d:4d:d5:c9:41:74:58:c9:e4:55:31:51:7c:47:
6e:b8:8f:e3:37:76:5e:66:55:0c:73:0d:f4:6a:45:54:1e:97:
e5:ca:55:a8:8e:a6:65:dc:e5:11:de:a1:f3:8e:f2:af:55:ac:
1e:72:74:97:4d:e6:17:a5:0e:55:cb:85:27:db:bb:f1:62:ec:
bc:d3:05:15:17:3f:57:49:bf:01:c0:fd:18:65:32:06:ac:b9:
91:11:41:51:21:95:e1:0b:48:a3:2d:b1:aa:86:79:8d:cc:48:
08:2f:33:9d:2e:78:7f:3d:f9:df:2f:90:bc:c6:cd:f2:c7:ee:
bb:83:34:91:94:36:f3:d0:cd:e7:1a:a4:0e:f0:eb:49:6b:6e:
ed:4c:9a:93:b9:ec:81:70:23:e1:7d:7f:67:8c:87:52:aa:af:
e3:13:66:f5:b8:c4:c9:cd:97:9f:13:1f:e6:b0:1d:07:34:be:
02:c6:aa:36:e2:c3:7c:84:1d:1c:15:60:b4:5b:56:87:bd:de:
be:c2:30:2e:3f:8c:dd:d1:2d:2d:3e:75:6c:10:39:0b:09:23:
a8:0a:75:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:36:00 2025 by rpki-client