Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.mft
File: CEl1fj41qqtdV8UYYkOkNxc-TTY.mft (raw, json)
Hash identifier: I4an/+Og58ybD8URBTptAyj5NWIgjAdNKdNfa3wMhH4=
Subject key identifier: F3:19:A0:C6:3D:42:28:02:A6:96:B7:0E:03:45:F5:39:55:94:41:90
Authority key identifier: 08:49:75:7E:3E:35:AA:AB:5D:57:C5:18:62:43:A4:37:17:3E:4D:36
Certificate issuer: /CN=0849757e3e35aaab5d57c5186243a437173e4d36
Certificate serial: 01976960AE9EA8A4CF59FD89A740ACA3CBA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CEl1fj41qqtdV8UYYkOkNxc-TTY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.mft
Manifest number: 12C6
Signing time: Fri 13 Jun 2025 13:00:33 +0000
Manifest this update: Fri 13 Jun 2025 13:00:33 +0000
Manifest next update: Sat 14 Jun 2025 13:00:33 +0000
Files and hashes: 1: CEl1fj41qqtdV8UYYkOkNxc-TTY.crl (hash: oY9uKRTOPkXxuOR/DtvCdI+3S37VYsmv2llKYot4oow=)
2: ughB2qwCJjXq23HnnasoQDdXgE8.roa (hash: LImj3hNpOasXYHWcbm9URdJgBeEySrqqax18nJO4GMo=)
3: v0jeM-EK5U0lFswlXgsyLuIVWWw.roa (hash: M3nsb4FrAgnB7zU3prkNFU+S+Vg3EPSnI0a1Dxv4l5Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CEl1fj41qqtdV8UYYkOkNxc-TTY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:60:ae:9e:a8:a4:cf:59:fd:89:a7:40:ac:a3:cb:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0849757e3e35aaab5d57c5186243a437173e4d36
Validity
Not Before: Jun 13 13:00:33 2025 GMT
Not After : Jun 14 13:00:33 2025 GMT
Subject: CN=f319a0c63d422802a696b70e0345f53955944190
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ad:e1:43:c3:21:db:e7:9e:d8:bf:c3:a6:e8:
82:83:48:80:70:a8:2d:ae:8f:5b:98:01:f8:58:dc:
31:32:4b:12:99:6e:20:c3:fe:d5:e4:90:17:90:fc:
c0:f8:18:89:4e:74:fb:31:3a:a6:e7:20:cf:1d:5f:
9c:7d:0a:ac:9c:0d:52:89:e5:2b:f7:2b:ae:c6:33:
ef:e9:8a:7a:e0:44:9a:6e:03:ab:9c:ae:e8:c8:56:
6b:8c:c3:37:a2:19:6c:ad:e9:55:bb:5a:df:36:a1:
38:d3:ad:0b:43:ab:ee:1f:fc:de:8a:a3:30:9e:5f:
11:94:64:58:05:cd:46:cd:bf:0f:73:53:8b:28:42:
15:a6:a1:71:22:62:58:17:bc:85:df:0b:cb:3e:94:
c0:96:4d:29:d7:78:38:47:b0:25:0f:9b:b9:d1:ba:
50:bd:28:e6:59:77:d1:73:9c:25:7c:43:4e:0b:5a:
56:42:a6:05:cf:f8:f8:46:ef:bb:0c:a2:29:13:ae:
87:a9:03:15:0d:05:a0:ba:76:bd:0a:12:c7:4b:19:
6d:43:28:8f:00:b6:9e:fc:30:b5:05:e5:cf:6f:ff:
67:24:b3:97:4a:31:49:53:28:4a:d6:b9:63:29:bf:
db:25:f1:df:4a:4f:f1:91:81:14:b8:1b:54:0c:33:
48:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:19:A0:C6:3D:42:28:02:A6:96:B7:0E:03:45:F5:39:55:94:41:90
X509v3 Authority Key Identifier:
keyid:08:49:75:7E:3E:35:AA:AB:5D:57:C5:18:62:43:A4:37:17:3E:4D:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CEl1fj41qqtdV8UYYkOkNxc-TTY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:52:67:6d:f4:9f:8f:88:3f:49:6c:6b:1a:a5:00:7d:2f:a9:
fc:93:7d:54:8f:00:69:51:85:1d:3a:cf:af:c7:c5:b1:c3:76:
4c:78:e1:6f:6e:31:e6:57:80:1d:b4:da:42:60:b5:fc:ae:54:
c3:eb:00:3a:ed:02:9a:7a:29:4e:dd:22:6b:2a:68:11:1c:63:
eb:b6:6e:49:8d:0a:dd:2c:67:3c:b7:0a:aa:6f:e6:59:4c:f1:
6a:7e:69:8e:0f:61:ed:af:d0:b0:d2:47:6e:4d:36:1f:fc:49:
e0:a2:e6:31:e2:b0:6f:08:7f:19:8a:b9:18:c9:4d:d7:35:d9:
ba:69:20:5d:6a:a7:a3:2a:b5:f1:f2:3d:a2:ea:91:df:07:bb:
3f:f1:0f:3a:c6:05:12:1f:db:e0:92:7f:9b:5c:5c:7e:6e:08:
17:84:bd:7a:22:6b:3b:1b:93:31:84:9b:c7:dc:b2:20:07:09:
89:f7:21:97:ea:b9:27:29:fa:7c:69:6b:62:52:f3:89:2e:56:
ff:2c:bc:6a:b0:8c:94:78:b0:fd:0f:51:cf:ba:70:2a:ba:84:
1f:f1:46:de:a1:c9:d2:ed:26:b7:7b:cc:40:28:b3:22:d2:42:
38:52:7d:0b:90:ea:d7:95:d4:1f:0d:f6:85:e3:56:fe:85:a5:
0f:1e:b6:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:14:01 2025 by rpki-client