Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/a58197-eb09-4415-a61d-abd61aa82426/1/TkifZhWfd7tY0rvH5Pwd_Z3csDQ.mft
File: TkifZhWfd7tY0rvH5Pwd_Z3csDQ.mft (raw, json)
Hash identifier: FRCZPSxSzCc6g/UpLuQaGcv8HV+NW7rEJ9W9aJf/oEY=
Subject key identifier: 52:3D:0E:7B:00:67:91:60:0C:10:E2:63:DF:20:36:78:11:FA:D2:3F
Authority key identifier: 4E:48:9F:66:15:9F:77:BB:58:D2:BB:C7:E4:FC:1D:FD:9D:DC:B0:34
Certificate issuer: /CN=4e489f66159f77bb58d2bbc7e4fc1dfd9ddcb034
Certificate serial: 01976DABB8E59B14263D6E7B1586C6ED8306
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TkifZhWfd7tY0rvH5Pwd_Z3csDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/a58197-eb09-4415-a61d-abd61aa82426/1/TkifZhWfd7tY0rvH5Pwd_Z3csDQ.mft
Manifest number: 158B
Signing time: Sat 14 Jun 2025 09:00:59 +0000
Manifest this update: Sat 14 Jun 2025 09:00:59 +0000
Manifest next update: Sun 15 Jun 2025 09:00:59 +0000
Files and hashes: 1: TkifZhWfd7tY0rvH5Pwd_Z3csDQ.crl (hash: +QiyP/tq3N12yamaiMlPYsyIXhMQtoTdyl/2+1Ig+cw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/a58197-eb09-4415-a61d-abd61aa82426/1/TkifZhWfd7tY0rvH5Pwd_Z3csDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/a58197-eb09-4415-a61d-abd61aa82426/1/TkifZhWfd7tY0rvH5Pwd_Z3csDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/TkifZhWfd7tY0rvH5Pwd_Z3csDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 09:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:ab:b8:e5:9b:14:26:3d:6e:7b:15:86:c6:ed:83:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e489f66159f77bb58d2bbc7e4fc1dfd9ddcb034
Validity
Not Before: Jun 14 09:00:59 2025 GMT
Not After : Jun 15 09:00:59 2025 GMT
Subject: CN=523d0e7b006791600c10e263df20367811fad23f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:28:10:31:52:aa:62:e0:ed:3a:a4:52:d9:d0:
63:18:31:b5:4a:9d:c8:b4:9e:ca:97:cd:08:bf:59:
38:a7:40:1a:41:ba:94:43:4d:23:47:57:bd:ce:97:
06:7c:78:5e:19:8e:b0:58:5e:8e:42:db:2b:52:ba:
5c:a8:b4:d0:9e:4f:13:ac:60:fb:b8:8a:2b:13:54:
4d:9c:8e:87:b7:47:82:0c:14:61:30:ae:7d:54:3d:
bc:c7:c5:18:b5:a4:6b:15:25:84:ee:38:39:72:7a:
7c:1b:e0:56:d8:6f:bb:f2:db:c9:d3:54:ec:e6:ba:
e8:96:25:00:e4:8b:e5:fd:c1:48:0f:18:8d:a4:72:
40:67:62:35:69:3f:62:7c:18:60:95:f7:f2:c5:7a:
d8:ff:8f:e5:a4:de:c4:0c:4e:e2:ae:df:56:b0:0e:
62:1c:4e:7f:0a:62:2f:e7:65:99:81:f9:52:54:9d:
3d:b9:4f:5c:8b:4b:fd:94:1e:db:a0:ba:23:2c:9f:
8b:c8:36:8d:8c:8e:2b:60:d4:2e:0a:0e:83:9a:79:
03:20:8a:4d:f4:f1:f8:41:d7:b2:5d:2d:18:df:d3:
bc:1a:ee:d6:32:1b:78:31:e8:cd:70:df:29:9b:a4:
e4:df:2d:8e:3a:34:dc:ca:65:53:d6:95:2a:81:f7:
68:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:3D:0E:7B:00:67:91:60:0C:10:E2:63:DF:20:36:78:11:FA:D2:3F
X509v3 Authority Key Identifier:
keyid:4E:48:9F:66:15:9F:77:BB:58:D2:BB:C7:E4:FC:1D:FD:9D:DC:B0:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TkifZhWfd7tY0rvH5Pwd_Z3csDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a58197-eb09-4415-a61d-abd61aa82426/1/TkifZhWfd7tY0rvH5Pwd_Z3csDQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a58197-eb09-4415-a61d-abd61aa82426/1/TkifZhWfd7tY0rvH5Pwd_Z3csDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:a6:42:ff:2a:e0:f5:bb:41:7d:6b:4c:2d:cd:9d:72:31:57:
3e:b8:99:2b:3f:6e:ba:7f:1d:66:27:ec:a0:33:0c:03:58:df:
d6:9e:99:54:a1:6b:bd:28:38:21:c4:3e:28:0d:7e:d2:21:a5:
7d:3f:dd:e8:3e:bd:6d:d2:13:8a:9d:2c:8e:1c:0d:4d:f3:ce:
d6:b4:12:75:eb:4b:55:68:1c:f3:44:42:fa:6a:3d:65:7d:fa:
6d:37:69:57:ae:76:9b:3f:ce:77:18:53:7d:6b:e9:68:30:8a:
d7:63:04:62:a7:f5:3d:80:90:b1:d6:d5:66:40:bd:0a:09:c7:
11:ad:02:b3:d1:70:36:47:43:7e:f0:9d:22:20:e0:2d:28:61:
71:c0:1c:57:e6:bf:43:61:c4:d3:00:cc:5e:7f:2e:52:b3:ae:
09:ef:45:2b:2d:c9:6e:c8:d9:2b:d2:c6:fd:16:37:56:79:8f:
ea:16:bc:f6:13:99:af:63:7e:30:d1:9a:7d:21:d8:d6:4c:c8:
03:ad:43:67:9c:28:27:12:9f:19:be:b0:e0:43:40:fd:63:75:
1d:87:78:88:bf:ad:23:0d:6c:a1:10:5e:7b:f0:a4:ce:73:6d:
83:a9:24:d4:5e:08:a0:7f:42:ad:dc:86:55:8c:e7:a9:a3:8a:
7c:e0:c3:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:54:47 2025 by rpki-client