Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/547e8e-41ba-4272-a294-0ae2b9d9d447/1/t2y_WSfEdpBf7aNOEUAUi_gF2bA.mft
File: t2y_WSfEdpBf7aNOEUAUi_gF2bA.mft (raw, json)
Hash identifier: GOq0mZF2ku6al+0auYYG8oHj7Kby8vPB0SdxJz/GkyA=
Subject key identifier: 1B:09:60:D7:B8:67:14:D1:99:84:F8:A0:57:07:23:8C:3B:81:C2:3D
Authority key identifier: B7:6C:BF:59:27:C4:76:90:5F:ED:A3:4E:11:40:14:8B:F8:05:D9:B0
Certificate issuer: /CN=b76cbf5927c476905feda34e1140148bf805d9b0
Certificate serial: 01976D3DD47923E60038DBD3B17EB8E70AD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t2y_WSfEdpBf7aNOEUAUi_gF2bA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/547e8e-41ba-4272-a294-0ae2b9d9d447/1/t2y_WSfEdpBf7aNOEUAUi_gF2bA.mft
Manifest number: 158A
Signing time: Sat 14 Jun 2025 07:00:57 +0000
Manifest this update: Sat 14 Jun 2025 07:00:57 +0000
Manifest next update: Sun 15 Jun 2025 07:00:57 +0000
Files and hashes: 1: t2y_WSfEdpBf7aNOEUAUi_gF2bA.crl (hash: SbTnEIt5ij1FQShXsgoCgpBoNf5M8cWhWsEUVnj+uVo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/547e8e-41ba-4272-a294-0ae2b9d9d447/1/t2y_WSfEdpBf7aNOEUAUi_gF2bA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/547e8e-41ba-4272-a294-0ae2b9d9d447/1/t2y_WSfEdpBf7aNOEUAUi_gF2bA.mft
rsync://rpki.ripe.net/repository/DEFAULT/t2y_WSfEdpBf7aNOEUAUi_gF2bA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3d:d4:79:23:e6:00:38:db:d3:b1:7e:b8:e7:0a:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b76cbf5927c476905feda34e1140148bf805d9b0
Validity
Not Before: Jun 14 07:00:57 2025 GMT
Not After : Jun 15 07:00:57 2025 GMT
Subject: CN=1b0960d7b86714d19984f8a05707238c3b81c23d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:aa:5a:22:ca:fa:a5:af:2d:14:27:2e:92:92:
82:fb:ab:42:a3:e5:01:f6:df:72:d8:4c:8c:a5:91:
ff:0a:46:b2:27:8a:43:17:bc:26:78:21:cd:80:02:
10:69:58:79:c6:b8:40:d7:73:9c:15:21:92:ff:31:
7c:6a:85:e2:1e:86:7d:97:c9:aa:0c:1a:bd:94:47:
99:a5:cc:c1:68:1e:17:22:bd:fa:16:61:36:d9:da:
5f:ad:44:2f:28:3b:8c:18:6e:18:a4:fe:d6:65:0f:
76:a4:ec:ef:d1:8f:a7:5a:f8:d4:00:c2:4e:5c:41:
23:ca:40:dd:2e:68:7f:7d:26:12:8f:6e:ad:8f:be:
6e:45:db:50:44:8e:c9:93:57:af:a0:b6:92:29:2c:
28:b9:e3:47:6d:c8:b3:f5:11:04:18:63:98:a0:71:
b8:a4:7e:75:cb:61:6e:22:9b:f0:ea:3c:0f:7a:87:
ee:a1:29:dd:98:19:4a:36:d3:9a:e4:97:ff:e2:05:
e5:a4:a1:7c:bb:18:bd:3a:60:d9:f1:00:33:eb:d2:
63:71:91:ac:6e:db:7b:27:53:9f:15:f4:31:3d:fd:
b6:db:54:a3:34:2c:8c:30:0e:d1:79:20:15:fb:0d:
4f:01:0d:0c:74:a4:f1:fc:29:94:88:14:fc:78:82:
20:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:09:60:D7:B8:67:14:D1:99:84:F8:A0:57:07:23:8C:3B:81:C2:3D
X509v3 Authority Key Identifier:
keyid:B7:6C:BF:59:27:C4:76:90:5F:ED:A3:4E:11:40:14:8B:F8:05:D9:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t2y_WSfEdpBf7aNOEUAUi_gF2bA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/547e8e-41ba-4272-a294-0ae2b9d9d447/1/t2y_WSfEdpBf7aNOEUAUi_gF2bA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/547e8e-41ba-4272-a294-0ae2b9d9d447/1/t2y_WSfEdpBf7aNOEUAUi_gF2bA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:7d:42:eb:72:44:25:58:62:34:f4:a4:86:e7:72:d6:15:16:
3e:23:45:56:6f:f7:97:79:05:bc:66:f8:8a:95:90:e7:49:89:
7b:a3:f1:a7:c4:9a:8e:48:69:f0:a6:aa:f4:c3:56:7d:c9:1e:
33:9d:70:c2:76:45:b6:cf:55:d4:b4:80:81:c4:bc:ba:34:97:
d2:16:a6:dd:67:7d:3b:5b:c6:50:8d:d3:0b:8b:a2:8d:0d:f7:
d7:1e:79:55:43:d4:af:55:0f:ad:4d:9f:0e:d9:1b:dc:7a:42:
41:0b:01:19:f2:ec:47:24:93:31:da:6a:4b:8f:51:93:65:08:
49:4d:f6:b7:4c:4a:2d:4a:50:fb:ce:20:68:07:b5:4a:8d:9a:
b3:b7:c8:cd:dd:db:c3:5e:48:3f:fc:25:3f:5f:9f:58:4e:03:
53:4a:e2:d6:ad:f2:71:79:7c:0f:b0:5b:8d:b4:db:88:5f:26:
35:c0:15:a7:37:11:8c:81:10:0e:95:43:60:f9:f6:bd:74:f0:
02:ec:f6:8f:ad:94:a6:15:bf:fb:ac:1d:35:8c:e7:50:47:07:
39:38:42:f1:a6:ee:77:56:e1:81:3b:0a:e5:b6:a9:1b:c4:dc:
7c:f0:bc:4c:f6:38:3b:55:23:15:3c:1d:99:8e:c1:6e:0a:a4:
7a:16:3b:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:39:27 2025 by rpki-client