Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/64ecd9-a2f8-4685-a872-b4056916b18b/1/TwEzP4bKlwcaD5YSa6OOIlLnCjQ.mft
File: TwEzP4bKlwcaD5YSa6OOIlLnCjQ.mft (raw, json)
Hash identifier: MTd1jmtBP7FfkYMiJATxijxj+oVZARh2OU3TDR6SnUY=
Subject key identifier: 0E:08:94:BB:2C:22:33:8F:F7:C7:30:E1:69:0F:C8:C0:B4:36:FF:CD
Authority key identifier: 4F:01:33:3F:86:CA:97:07:1A:0F:96:12:6B:A3:8E:22:52:E7:0A:34
Certificate issuer: /CN=4f01333f86ca97071a0f96126ba38e2252e70a34
Certificate serial: 01976960F167823C57D2D84AA3E9BFDB9055
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TwEzP4bKlwcaD5YSa6OOIlLnCjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/64ecd9-a2f8-4685-a872-b4056916b18b/1/TwEzP4bKlwcaD5YSa6OOIlLnCjQ.mft
Manifest number: 087B
Signing time: Fri 13 Jun 2025 13:00:50 +0000
Manifest this update: Fri 13 Jun 2025 13:00:50 +0000
Manifest next update: Sat 14 Jun 2025 13:00:50 +0000
Files and hashes: 1: TwEzP4bKlwcaD5YSa6OOIlLnCjQ.crl (hash: UJ25uOxoW8u09ckhWbXY5R+IfnjhsqoN1s9mqmpSJgg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/64ecd9-a2f8-4685-a872-b4056916b18b/1/TwEzP4bKlwcaD5YSa6OOIlLnCjQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/64ecd9-a2f8-4685-a872-b4056916b18b/1/TwEzP4bKlwcaD5YSa6OOIlLnCjQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/TwEzP4bKlwcaD5YSa6OOIlLnCjQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:60:f1:67:82:3c:57:d2:d8:4a:a3:e9:bf:db:90:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f01333f86ca97071a0f96126ba38e2252e70a34
Validity
Not Before: Jun 13 13:00:50 2025 GMT
Not After : Jun 14 13:00:50 2025 GMT
Subject: CN=0e0894bb2c22338ff7c730e1690fc8c0b436ffcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:4b:5c:4b:cc:b5:be:48:35:ae:83:9c:53:d6:
fe:38:e2:3c:7e:8c:1c:9f:47:c3:ba:79:bc:7c:8d:
57:10:62:ab:14:2a:ee:b6:05:11:6c:74:14:b1:6b:
e8:d1:9e:8d:84:62:23:77:c9:89:02:2f:3e:64:ab:
76:42:f3:86:ed:19:47:fe:ec:fb:ac:e8:c9:40:78:
8a:70:bf:8c:95:8f:44:a1:d9:c4:60:5f:1e:42:7f:
97:7f:39:58:52:15:eb:36:ec:a2:30:f3:ce:da:ac:
73:2b:20:2b:de:35:62:a1:3f:7e:7d:ab:a7:46:ff:
3d:f5:c1:ed:fa:58:e6:21:3a:60:bc:67:e2:46:73:
7b:8f:c4:46:00:cd:b7:ad:1a:c8:09:f5:64:79:68:
e5:41:52:c0:ce:4e:71:39:a2:0f:80:33:b7:bd:69:
eb:0f:5a:55:32:98:8a:0f:8c:27:6e:e9:25:63:64:
df:d7:0a:b6:1f:7e:03:c5:42:01:54:c8:79:4c:7a:
b8:ce:56:89:6f:e8:59:cc:1c:0c:fe:98:89:aa:c1:
6e:ea:9c:33:9f:72:08:10:c4:a0:f6:7a:d7:0c:c8:
7a:60:7b:f2:86:1b:8d:5b:38:74:be:82:b9:47:84:
ae:d2:ce:2f:a8:b4:47:ff:1f:40:b5:d9:20:67:f8:
2e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:08:94:BB:2C:22:33:8F:F7:C7:30:E1:69:0F:C8:C0:B4:36:FF:CD
X509v3 Authority Key Identifier:
keyid:4F:01:33:3F:86:CA:97:07:1A:0F:96:12:6B:A3:8E:22:52:E7:0A:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TwEzP4bKlwcaD5YSa6OOIlLnCjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/64ecd9-a2f8-4685-a872-b4056916b18b/1/TwEzP4bKlwcaD5YSa6OOIlLnCjQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/64ecd9-a2f8-4685-a872-b4056916b18b/1/TwEzP4bKlwcaD5YSa6OOIlLnCjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:62:0f:87:8e:47:4e:f1:1b:f8:f3:38:ee:cf:6a:a3:36:b2:
c1:b4:9d:fc:af:d4:9d:7f:8d:b9:13:7d:84:8f:62:e4:a1:96:
32:33:ba:11:4e:db:90:de:94:fd:b9:2b:c6:1a:7a:1b:a3:e1:
cd:b0:15:a0:70:64:e8:f3:03:a2:5c:e3:e5:8c:5d:a0:54:75:
7c:e9:e9:58:e3:63:33:87:48:81:96:f1:be:a0:b4:fb:be:69:
69:b8:da:03:36:d1:d5:ad:cd:5f:5d:95:ae:cd:39:a0:cd:ae:
00:21:1a:39:94:7b:03:10:67:e9:af:0e:23:70:6b:c0:05:02:
bf:cf:8e:70:12:c8:53:00:85:54:8d:19:67:22:d8:1a:15:c4:
3d:d2:5d:21:27:63:17:59:0b:6a:c6:d0:0d:20:ac:8d:ea:e4:
6e:61:27:a0:32:a3:39:cc:c2:ba:c5:fe:85:c4:a5:6a:2f:5b:
45:af:60:b8:f5:97:0b:67:00:e1:d6:fd:36:d4:d3:d6:b0:f9:
71:06:dd:86:b6:4e:d1:29:7d:f4:5a:06:14:89:2f:8b:7a:a5:
ce:4b:4f:f4:bf:cf:32:5f:fd:09:c3:b1:d8:12:d1:47:6f:4c:
b1:ff:5a:0a:00:d9:c8:cb:5e:dc:eb:10:13:b4:65:d7:be:82:
aa:8e:a5:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:13:54 2025 by rpki-client