Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/16e2aa-ddbd-4ee1-ae60-08bc640aed67/1/tWqJV8zDCqTsLUeOU_OHJsmVWjE.mft
File: tWqJV8zDCqTsLUeOU_OHJsmVWjE.mft (raw, json)
Hash identifier: siZgaGQK/Ms6lxJFatoKAShk/ix3CbkwiKdq3bmiD/E=
Subject key identifier: 20:27:13:86:1E:37:84:A9:6C:CA:45:A7:6B:B1:F2:F0:3E:AA:21:1B
Authority key identifier: B5:6A:89:57:CC:C3:0A:A4:EC:2D:47:8E:53:F3:87:26:C9:95:5A:31
Certificate issuer: /CN=b56a8957ccc30aa4ec2d478e53f38726c9955a31
Certificate serial: 01976F2C5F412752FEE757254E38B2B8451C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tWqJV8zDCqTsLUeOU_OHJsmVWjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/16e2aa-ddbd-4ee1-ae60-08bc640aed67/1/tWqJV8zDCqTsLUeOU_OHJsmVWjE.mft
Manifest number: 158A
Signing time: Sat 14 Jun 2025 16:01:08 +0000
Manifest this update: Sat 14 Jun 2025 16:01:08 +0000
Manifest next update: Sun 15 Jun 2025 16:01:08 +0000
Files and hashes: 1: tWqJV8zDCqTsLUeOU_OHJsmVWjE.crl (hash: rPHpBRH7q7lKv2VLzDvQ3IDZXcQ9ch+0FwenpNSuWYM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/16e2aa-ddbd-4ee1-ae60-08bc640aed67/1/tWqJV8zDCqTsLUeOU_OHJsmVWjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/16e2aa-ddbd-4ee1-ae60-08bc640aed67/1/tWqJV8zDCqTsLUeOU_OHJsmVWjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/tWqJV8zDCqTsLUeOU_OHJsmVWjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:2c:5f:41:27:52:fe:e7:57:25:4e:38:b2:b8:45:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b56a8957ccc30aa4ec2d478e53f38726c9955a31
Validity
Not Before: Jun 14 16:01:08 2025 GMT
Not After : Jun 15 16:01:08 2025 GMT
Subject: CN=202713861e3784a96cca45a76bb1f2f03eaa211b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:65:59:6a:51:18:e4:1a:0e:f8:dd:1a:d3:c7:
49:bc:e7:28:e7:b1:8b:bd:15:6e:d7:4f:c1:97:a1:
b3:f1:11:85:ce:c9:4f:d1:de:9c:99:fe:28:b6:6c:
43:94:7c:f4:4b:f3:0d:c4:57:b5:ef:71:b5:c8:53:
0a:58:14:b8:fb:97:a7:94:d5:a0:b7:dd:40:06:b5:
1e:e4:3f:bb:47:e6:25:10:cd:cd:5e:55:23:3b:1b:
72:6a:0a:01:df:9a:d6:5c:ec:51:9c:25:62:5e:f2:
5b:95:49:38:00:0e:13:0f:c4:25:a1:43:b9:e8:fd:
dc:c6:b0:88:01:05:8c:6e:75:2f:5e:5f:59:e1:9d:
38:14:4c:0c:a2:35:d6:9a:5d:19:1b:74:6c:21:36:
0b:17:15:d6:8e:5b:40:a5:5e:35:82:d5:aa:36:d2:
1a:c9:2f:43:1e:a7:98:3e:ea:db:0a:1e:4b:79:4f:
7b:d5:4b:dc:57:be:b3:a2:57:3b:f7:0a:11:46:17:
4c:84:aa:9f:49:1d:c1:4b:b4:21:fd:f0:77:4b:32:
e5:06:53:79:e0:5d:4d:e6:c5:8f:f8:9a:df:c4:99:
77:d7:7d:bf:e4:8d:6f:17:a4:92:e8:10:ff:42:6c:
34:1a:ad:2e:9d:35:7e:1b:a0:5d:c6:de:e3:36:32:
7b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:27:13:86:1E:37:84:A9:6C:CA:45:A7:6B:B1:F2:F0:3E:AA:21:1B
X509v3 Authority Key Identifier:
keyid:B5:6A:89:57:CC:C3:0A:A4:EC:2D:47:8E:53:F3:87:26:C9:95:5A:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tWqJV8zDCqTsLUeOU_OHJsmVWjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/16e2aa-ddbd-4ee1-ae60-08bc640aed67/1/tWqJV8zDCqTsLUeOU_OHJsmVWjE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/16e2aa-ddbd-4ee1-ae60-08bc640aed67/1/tWqJV8zDCqTsLUeOU_OHJsmVWjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:84:ef:82:85:05:69:d9:b2:9a:87:38:0b:97:1c:86:a3:87:
20:3a:b1:72:95:83:6a:8a:cf:bc:22:0e:02:b3:30:dd:4c:64:
d5:02:2a:d4:46:81:27:ba:11:ed:e7:cf:77:c8:77:0f:a8:3e:
c4:cd:17:1d:40:58:6a:1f:43:46:93:c6:80:bf:d0:ea:b8:bd:
c7:dd:bb:09:80:f0:36:51:c6:b3:7f:2b:d5:1d:4b:85:0e:40:
c9:e2:52:53:4e:ca:13:1a:20:d4:05:72:f8:d2:7f:9f:48:47:
9f:c4:fa:5e:f5:7a:f6:97:12:8f:22:72:eb:63:87:fd:58:e9:
19:bf:ea:27:6a:17:a3:c8:47:09:58:9f:93:23:cd:fd:66:30:
91:0c:98:2c:c3:76:cb:1a:1c:c9:22:a9:15:c1:2e:4a:6d:83:
a1:ac:65:75:45:cd:bc:42:c6:b6:94:1c:0d:e9:fe:24:3b:a9:
a5:a8:84:bd:99:c7:e3:d5:38:09:8e:c9:cc:09:88:98:02:5f:
a3:ff:bd:ae:c1:8d:22:87:7f:45:6b:47:bf:be:ea:92:7a:4c:
f3:5c:f1:eb:00:13:79:d9:61:0b:33:f7:70:3d:d4:55:68:3f:
7b:31:8c:16:7f:77:f0:92:1c:b1:23:74:0d:96:79:c4:fa:4b:
a2:43:a7:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:59:45 2025 by rpki-client