Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/e703c8-465f-47a5-952c-495e188701b6/1/tTmDGDXIfHUB9sN8tI5gp5WjlLs.mft
File: tTmDGDXIfHUB9sN8tI5gp5WjlLs.mft (raw, json)
Hash identifier: DrYrM6wlAtYQjN9LUfz8ligyQnTNsIIzKc2aD3MFWAI=
Subject key identifier: 9C:5B:5A:93:0A:02:B6:AE:3A:BA:04:50:BA:11:57:4E:D0:43:09:5C
Authority key identifier: B5:39:83:18:35:C8:7C:75:01:F6:C3:7C:B4:8E:60:A7:95:A3:94:BB
Certificate issuer: /CN=b539831835c87c7501f6c37cb48e60a795a394bb
Certificate serial: 01976961068F0708B4820262E85553C36A25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tTmDGDXIfHUB9sN8tI5gp5WjlLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/e703c8-465f-47a5-952c-495e188701b6/1/tTmDGDXIfHUB9sN8tI5gp5WjlLs.mft
Manifest number: 158C
Signing time: Fri 13 Jun 2025 13:00:55 +0000
Manifest this update: Fri 13 Jun 2025 13:00:55 +0000
Manifest next update: Sat 14 Jun 2025 13:00:55 +0000
Files and hashes: 1: tTmDGDXIfHUB9sN8tI5gp5WjlLs.crl (hash: V7nUlFclUzdHkH2Ve+wUZ7EQJLjjRc3l9Ef4ixSNyfU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/e703c8-465f-47a5-952c-495e188701b6/1/tTmDGDXIfHUB9sN8tI5gp5WjlLs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/e703c8-465f-47a5-952c-495e188701b6/1/tTmDGDXIfHUB9sN8tI5gp5WjlLs.mft
rsync://rpki.ripe.net/repository/DEFAULT/tTmDGDXIfHUB9sN8tI5gp5WjlLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:61:06:8f:07:08:b4:82:02:62:e8:55:53:c3:6a:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b539831835c87c7501f6c37cb48e60a795a394bb
Validity
Not Before: Jun 13 13:00:55 2025 GMT
Not After : Jun 14 13:00:55 2025 GMT
Subject: CN=9c5b5a930a02b6ae3aba0450ba11574ed043095c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:56:a1:99:1c:66:4e:68:16:80:24:b4:c1:63:
52:3e:11:a5:27:54:6d:28:6b:ea:9d:0d:37:79:00:
10:aa:0d:fb:9c:0a:62:5f:9f:f7:4d:18:d7:d1:bf:
f9:f6:9e:d8:27:fc:70:b9:6a:e8:94:9b:1b:f2:4c:
d2:02:1e:d2:e9:69:a6:79:fc:03:c5:f7:93:f3:ce:
3a:02:fc:a6:1d:b4:5a:f1:48:34:64:a8:9c:99:a4:
8a:66:b5:0f:19:4d:fc:6e:df:f3:15:db:7f:67:e9:
ac:16:d6:60:44:d8:da:35:46:59:c8:42:31:85:5a:
e2:30:93:d0:a7:40:49:a1:9b:f4:4f:02:57:1d:6a:
a1:0b:ef:f1:3f:c6:53:b0:41:c5:ad:4d:3d:b2:a4:
ad:65:ad:17:59:a5:2c:d5:d6:80:54:5e:97:c0:40:
58:82:03:1c:fb:fe:5c:7e:ea:5a:1f:09:22:ca:8d:
c5:a7:76:41:86:18:d4:ca:9c:f0:84:7c:43:22:38:
cb:8a:e2:6d:d7:ac:b8:89:49:7e:12:30:69:95:07:
e6:f6:9d:d9:bd:2a:1f:f1:bc:d2:8a:20:9b:5c:1a:
02:69:3d:7a:42:74:85:a7:b5:92:da:93:e3:e6:58:
07:4b:1c:e6:ab:ea:fe:20:80:2c:90:9e:01:b9:16:
1e:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:5B:5A:93:0A:02:B6:AE:3A:BA:04:50:BA:11:57:4E:D0:43:09:5C
X509v3 Authority Key Identifier:
keyid:B5:39:83:18:35:C8:7C:75:01:F6:C3:7C:B4:8E:60:A7:95:A3:94:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tTmDGDXIfHUB9sN8tI5gp5WjlLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/e703c8-465f-47a5-952c-495e188701b6/1/tTmDGDXIfHUB9sN8tI5gp5WjlLs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/e703c8-465f-47a5-952c-495e188701b6/1/tTmDGDXIfHUB9sN8tI5gp5WjlLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:96:6c:ca:b0:dd:f0:3b:35:bc:3a:34:00:66:e9:6b:d7:76:
ab:6a:f9:58:03:62:a0:08:53:ab:0a:89:0a:18:ca:7c:de:7a:
5b:a6:dd:fd:ed:67:fe:67:0c:18:ea:53:ad:3d:36:c7:cc:a2:
46:ed:56:ff:2f:59:93:9d:3d:51:68:80:87:08:a4:de:61:c1:
f4:b7:f6:f5:9d:81:59:cc:52:64:80:59:ed:b8:48:74:19:50:
e3:56:02:2b:90:1d:60:3a:2a:7d:4d:d4:02:11:dd:95:f2:c9:
6a:99:3e:e6:af:f8:dc:2a:b5:f0:34:d8:67:a5:b4:48:37:a0:
02:3c:19:30:ef:8b:4a:dc:bb:2d:9d:ad:c0:87:c8:c8:0b:5a:
cb:37:35:92:be:e6:94:77:fb:dc:bb:fe:a1:04:5d:d5:bc:7a:
d8:d6:39:4c:00:29:66:95:5e:04:68:6a:93:9c:ad:dc:2f:53:
e6:c4:1f:7c:25:46:49:f7:92:bb:6d:5c:f5:6b:b3:f9:37:61:
17:93:61:df:05:aa:db:13:d6:f1:bf:be:9d:a3:cd:50:e0:2f:
c5:d4:13:86:39:56:1f:47:ec:6d:e3:39:8c:a9:5b:aa:37:a8:
e5:09:43:14:ff:f3:5e:a0:ba:31:94:2a:c1:b6:a4:6b:fc:6f:
4f:09:bd:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:02:30 2025 by rpki-client