Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/639e5f-0797-4473-aeff-52f5753fc3be/1/TvYP_RC7937OmKeBY1mERCd9v6Q.mft
File: TvYP_RC7937OmKeBY1mERCd9v6Q.mft (raw, json)
Hash identifier: o0FVA0cxBpkV9fjaGzV7yqPySifFH1DJfIpXKsP8hsc=
Subject key identifier: 91:4C:33:C2:C1:08:1F:97:58:F2:BE:65:4E:E6:7F:21:62:1C:48:40
Authority key identifier: 4E:F6:0F:FD:10:BB:F7:7E:CE:98:A7:81:63:59:84:44:27:7D:BF:A4
Certificate issuer: /CN=4ef60ffd10bbf77ece98a78163598444277dbfa4
Certificate serial: 01976D3E003FE21F4FF5280E71B3201D81C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TvYP_RC7937OmKeBY1mERCd9v6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/639e5f-0797-4473-aeff-52f5753fc3be/1/TvYP_RC7937OmKeBY1mERCd9v6Q.mft
Manifest number: 158B
Signing time: Sat 14 Jun 2025 07:01:09 +0000
Manifest this update: Sat 14 Jun 2025 07:01:09 +0000
Manifest next update: Sun 15 Jun 2025 07:01:09 +0000
Files and hashes: 1: TvYP_RC7937OmKeBY1mERCd9v6Q.crl (hash: PRXOJEYFisip9e8FOZ7X/gJKax+f5RdxkY5/Uy3uPb8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/639e5f-0797-4473-aeff-52f5753fc3be/1/TvYP_RC7937OmKeBY1mERCd9v6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/639e5f-0797-4473-aeff-52f5753fc3be/1/TvYP_RC7937OmKeBY1mERCd9v6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/TvYP_RC7937OmKeBY1mERCd9v6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3e:00:3f:e2:1f:4f:f5:28:0e:71:b3:20:1d:81:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ef60ffd10bbf77ece98a78163598444277dbfa4
Validity
Not Before: Jun 14 07:01:09 2025 GMT
Not After : Jun 15 07:01:09 2025 GMT
Subject: CN=914c33c2c1081f9758f2be654ee67f21621c4840
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:44:01:8f:98:6b:4f:5b:2d:e7:e5:95:93:9f:
52:79:25:69:fe:97:31:09:a0:48:2a:22:bc:93:88:
96:04:aa:97:e2:56:d0:77:ae:b6:a2:7a:8e:3c:12:
2d:4f:b3:84:ba:40:8a:7d:24:31:e3:5b:e4:72:c6:
4e:e2:0d:b9:d3:a6:10:77:29:77:40:63:9f:06:d8:
c2:fb:3b:e6:7b:bf:fe:c3:a3:53:c6:6f:13:da:37:
d0:9b:e5:e6:f7:a1:ad:0b:ae:d2:1c:85:c7:b4:d4:
18:dd:be:2f:26:1d:b0:cb:ce:1c:4e:fb:42:38:e2:
a7:a3:8a:99:dc:e9:59:64:45:9d:d2:47:54:1a:9e:
fd:1c:4a:67:98:be:2d:53:f1:75:ad:e2:83:35:01:
07:a0:9b:51:d6:d8:e7:2f:44:39:06:51:8d:5c:3c:
fc:e5:90:dc:ae:95:53:98:7b:24:6b:e3:c4:34:d4:
a7:4f:d6:4e:d6:cb:d4:f1:49:a6:5e:48:ff:33:2b:
24:2a:17:e5:51:db:bc:34:76:61:f1:13:a9:47:99:
7e:d2:e0:1c:d0:75:e6:ee:7f:13:dc:52:d0:2c:f6:
ba:18:39:82:97:bf:07:eb:75:67:34:fd:fc:c6:62:
41:23:fa:ce:c2:60:ae:27:59:ff:0e:47:15:11:a5:
3a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:4C:33:C2:C1:08:1F:97:58:F2:BE:65:4E:E6:7F:21:62:1C:48:40
X509v3 Authority Key Identifier:
keyid:4E:F6:0F:FD:10:BB:F7:7E:CE:98:A7:81:63:59:84:44:27:7D:BF:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TvYP_RC7937OmKeBY1mERCd9v6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/639e5f-0797-4473-aeff-52f5753fc3be/1/TvYP_RC7937OmKeBY1mERCd9v6Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/639e5f-0797-4473-aeff-52f5753fc3be/1/TvYP_RC7937OmKeBY1mERCd9v6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:11:19:05:aa:03:6a:40:89:da:83:97:b3:f4:ab:f4:58:ac:
4a:22:ff:73:47:04:e4:ab:88:98:a2:c2:76:4f:9a:c6:ac:fc:
94:5b:4d:23:11:4b:9f:68:42:b5:1a:ec:34:69:e2:2e:c3:b2:
9f:eb:1d:40:61:35:02:b9:17:c5:b4:fe:78:1d:3b:bd:4d:81:
97:47:12:73:b4:f6:cb:03:db:42:4a:7f:de:da:8a:f6:ed:c5:
b9:8a:aa:b1:4d:67:20:67:23:0a:a9:c1:b2:96:fd:44:ea:05:
67:0c:d5:b9:96:3f:c1:ad:95:6f:84:46:f8:8e:bb:08:8f:be:
19:a9:84:0e:d5:21:db:21:55:04:40:31:dd:04:4c:cc:cf:42:
7d:61:74:ac:ef:da:a7:65:82:58:ca:15:45:e0:42:ae:6b:8b:
87:51:91:c5:57:57:bc:2c:76:14:a9:d0:95:53:17:e2:d7:c2:
d9:c5:ee:58:a7:11:f1:b2:20:75:ef:0f:b0:50:7d:8c:ae:9b:
28:1f:ee:19:4b:37:de:07:57:7d:f3:5b:f5:ab:cc:46:68:67:
cc:ea:b3:e8:ef:00:22:92:62:aa:57:9b:8d:39:84:84:20:5e:
d1:7d:1c:70:3b:05:5c:1b:09:ae:be:27:2e:cc:01:2f:8c:cd:
56:2d:83:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:50:44 2025 by rpki-client