
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/f56fa9-f9fe-40f5-a853-832ab844172b/1/TcAjDNQV2G6G_YiTE0KHzlSmh9c.mft
File: TcAjDNQV2G6G_YiTE0KHzlSmh9c.mft (raw, json)
Hash identifier: Pb/qna/380jTf5Ur4P2d13qLVXZ/1IIzF/EiRopaJsg=
Subject key identifier: 0C:97:D5:A1:3A:64:5E:AD:43:6E:70:09:2E:FE:9D:D2:44:81:24:52
Authority key identifier: 4D:C0:23:0C:D4:15:D8:6E:86:FD:88:93:13:42:87:CE:54:A6:87:D7
Certificate issuer: /CN=4dc0230cd415d86e86fd8893134287ce54a687d7
Certificate serial: 01976BF46AC135AD33F9CFD4E73596AEFEEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TcAjDNQV2G6G_YiTE0KHzlSmh9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/f56fa9-f9fe-40f5-a853-832ab844172b/1/TcAjDNQV2G6G_YiTE0KHzlSmh9c.mft
Manifest number: 54
Signing time: Sat 14 Jun 2025 01:01:09 +0000
Manifest this update: Sat 14 Jun 2025 01:01:09 +0000
Manifest next update: Sun 15 Jun 2025 01:01:09 +0000
Files and hashes: 1: TcAjDNQV2G6G_YiTE0KHzlSmh9c.crl (hash: IJI6U66bWQq3WmvtwE4rPK2k6e9GsylCjxHK7ZGH+74=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/f56fa9-f9fe-40f5-a853-832ab844172b/1/TcAjDNQV2G6G_YiTE0KHzlSmh9c.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/f56fa9-f9fe-40f5-a853-832ab844172b/1/TcAjDNQV2G6G_YiTE0KHzlSmh9c.mft
rsync://rpki.ripe.net/repository/DEFAULT/TcAjDNQV2G6G_YiTE0KHzlSmh9c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:f4:6a:c1:35:ad:33:f9:cf:d4:e7:35:96:ae:fe:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dc0230cd415d86e86fd8893134287ce54a687d7
Validity
Not Before: Jun 14 01:01:09 2025 GMT
Not After : Jun 15 01:01:09 2025 GMT
Subject: CN=0c97d5a13a645ead436e70092efe9dd244812452
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:7d:71:d1:9e:b3:03:43:4a:f4:4e:cf:50:bb:
13:f8:f2:85:04:c2:1a:c7:b6:21:81:47:37:d4:cd:
a4:49:aa:66:eb:6c:ac:eb:91:15:76:bb:f4:a3:e6:
40:bf:d0:76:66:e7:79:23:24:41:ba:84:79:7c:b3:
32:0d:b5:db:c7:dc:22:5d:d7:55:8d:74:92:e1:2a:
c8:65:df:0e:13:d1:7d:e0:dd:ae:61:c3:35:1d:56:
47:c0:b2:40:92:5c:7b:51:64:2f:30:c4:db:9b:ea:
cb:14:74:11:e9:8b:5e:6d:9f:e8:fe:15:52:66:5e:
8c:a8:4c:fd:f8:3d:8e:f0:90:9f:d0:1e:8e:df:f7:
11:7f:ba:ab:54:c5:4d:a9:3e:81:16:60:f2:82:f1:
75:8d:88:a9:86:61:9b:cf:13:1b:c4:c4:5a:28:f3:
85:be:63:7c:46:ed:ec:88:c9:a0:ca:21:9b:7b:eb:
61:8d:f6:c5:7f:44:dc:00:73:b4:c8:29:e2:c3:ff:
28:10:8d:d6:70:9d:2b:30:93:45:24:f6:55:91:07:
d7:55:32:48:a3:c7:75:fc:c7:34:3e:6d:f4:bb:da:
db:0c:86:b7:d6:c9:1e:91:0c:d9:75:05:5c:07:ae:
eb:79:10:88:af:b2:40:1d:19:88:cf:5c:22:28:17:
3e:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:97:D5:A1:3A:64:5E:AD:43:6E:70:09:2E:FE:9D:D2:44:81:24:52
X509v3 Authority Key Identifier:
keyid:4D:C0:23:0C:D4:15:D8:6E:86:FD:88:93:13:42:87:CE:54:A6:87:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TcAjDNQV2G6G_YiTE0KHzlSmh9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/f56fa9-f9fe-40f5-a853-832ab844172b/1/TcAjDNQV2G6G_YiTE0KHzlSmh9c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/f56fa9-f9fe-40f5-a853-832ab844172b/1/TcAjDNQV2G6G_YiTE0KHzlSmh9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:6c:a5:93:4f:06:b4:76:82:bb:84:58:a8:26:08:e1:eb:0c:
2c:c2:ec:7c:b4:26:2e:76:6e:d7:e7:7a:05:e2:38:c4:ae:ef:
b0:22:d9:38:62:5a:2f:6c:cd:0f:10:2d:8e:b5:e7:f8:58:3f:
b8:bf:bb:d1:65:2b:df:fa:7b:5a:b6:7b:01:6f:ca:b5:83:97:
77:d6:eb:0a:d8:ff:eb:5e:5d:96:08:58:36:d5:58:19:08:8a:
12:4b:af:59:b8:b3:69:ae:2c:c9:c4:8c:5f:21:31:23:82:fc:
39:9c:51:8b:84:78:f5:e9:10:81:5f:f9:93:61:cf:43:0a:92:
9f:4d:e8:11:26:89:ab:2a:77:61:97:2d:fa:68:38:3e:c3:bc:
12:b5:ef:13:70:09:31:c0:02:10:6f:02:22:ea:c6:5f:4b:69:
12:9d:2f:91:89:d6:93:86:64:83:d8:f2:23:dd:35:17:b0:9d:
81:40:88:51:6d:d8:2d:e2:2a:97:df:e5:07:15:c5:a4:8e:b0:
15:0c:3b:57:18:af:fe:ee:0f:9f:6c:d2:f7:0a:18:95:66:86:
61:42:0b:fc:69:2b:e2:22:24:06:05:d0:f2:1d:31:f7:a2:3f:
4a:92:57:40:0d:fb:0d:f5:d3:a3:f6:15:27:a0:8c:6b:62:57:
18:17:ce:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:10:45 2025 by rpki-client