Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/d46a81-3735-42c6-9bbb-1d1799b59c99/1/tLB5uhPORqvsf1vD893Ni7hnWQU.mft
File: tLB5uhPORqvsf1vD893Ni7hnWQU.mft (raw, json)
Hash identifier: fpqnNBFW8SpBMohKldTiwnsclYPIrgV38vP7/Za6So8=
Subject key identifier: 51:98:3C:D0:A6:67:BD:8C:29:9A:05:62:D8:36:61:02:EB:24:D1:FD
Authority key identifier: B4:B0:79:BA:13:CE:46:AB:EC:7F:5B:C3:F3:DD:CD:8B:B8:67:59:05
Certificate issuer: /CN=b4b079ba13ce46abec7f5bc3f3ddcd8bb8675905
Certificate serial: 01976961A41F8E7920A5003D6B43C02DA5ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tLB5uhPORqvsf1vD893Ni7hnWQU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/d46a81-3735-42c6-9bbb-1d1799b59c99/1/tLB5uhPORqvsf1vD893Ni7hnWQU.mft
Manifest number: 158A
Signing time: Fri 13 Jun 2025 13:01:36 +0000
Manifest this update: Fri 13 Jun 2025 13:01:36 +0000
Manifest next update: Sat 14 Jun 2025 13:01:36 +0000
Files and hashes: 1: tLB5uhPORqvsf1vD893Ni7hnWQU.crl (hash: P+eMViYXQVM4+wUbiL6CwOM1td/X0L5wdVXQXHBUczw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/d46a81-3735-42c6-9bbb-1d1799b59c99/1/tLB5uhPORqvsf1vD893Ni7hnWQU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/d46a81-3735-42c6-9bbb-1d1799b59c99/1/tLB5uhPORqvsf1vD893Ni7hnWQU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tLB5uhPORqvsf1vD893Ni7hnWQU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:61:a4:1f:8e:79:20:a5:00:3d:6b:43:c0:2d:a5:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4b079ba13ce46abec7f5bc3f3ddcd8bb8675905
Validity
Not Before: Jun 13 13:01:36 2025 GMT
Not After : Jun 14 13:01:36 2025 GMT
Subject: CN=51983cd0a667bd8c299a0562d8366102eb24d1fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:28:57:93:aa:5a:85:05:21:e7:9e:c7:06:0e:
a4:ae:0e:72:59:81:bf:32:6f:d3:e1:25:3e:06:c6:
35:44:cd:7b:56:f4:ff:46:d8:d7:9b:57:96:ff:8d:
94:99:0c:7f:19:6d:48:5e:00:d9:2f:03:98:e4:41:
29:bd:5a:24:94:a0:63:54:5c:05:1e:1d:66:cb:55:
e9:28:47:ee:58:aa:86:17:d0:8f:d7:83:70:d8:21:
30:9c:36:b8:08:eb:8c:a7:07:f0:3d:a3:5d:78:61:
c7:97:21:62:70:59:5d:49:c5:2f:50:e5:3f:b0:db:
c5:a5:4b:7f:b4:87:f3:75:57:4f:99:7e:0f:87:55:
59:07:9a:02:5f:67:92:86:4f:7c:f5:b1:de:d5:b7:
1a:ff:81:11:5d:97:8d:0a:2e:66:57:13:9a:29:49:
26:59:b1:5f:4d:13:16:75:42:bb:1a:d6:21:65:6a:
b2:34:2b:53:cc:62:37:0a:78:53:ac:72:fd:16:ce:
aa:ce:91:8e:c2:72:d8:1f:a8:af:a5:27:83:51:be:
92:ea:1b:e3:5b:1b:dd:19:e0:2b:4b:10:49:96:fd:
b5:2b:c7:df:a5:58:fd:2c:18:d3:c4:2c:d5:a7:f4:
ca:e4:9c:7e:d2:39:87:f0:6a:d7:28:82:d3:c1:ae:
ce:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:98:3C:D0:A6:67:BD:8C:29:9A:05:62:D8:36:61:02:EB:24:D1:FD
X509v3 Authority Key Identifier:
keyid:B4:B0:79:BA:13:CE:46:AB:EC:7F:5B:C3:F3:DD:CD:8B:B8:67:59:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tLB5uhPORqvsf1vD893Ni7hnWQU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d46a81-3735-42c6-9bbb-1d1799b59c99/1/tLB5uhPORqvsf1vD893Ni7hnWQU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d46a81-3735-42c6-9bbb-1d1799b59c99/1/tLB5uhPORqvsf1vD893Ni7hnWQU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:9e:3f:53:9d:85:6a:3b:e1:ec:46:77:5e:a5:be:b4:e6:7c:
74:a4:5a:2b:52:a7:09:c4:5b:7a:80:4a:26:5f:a9:79:b5:8a:
fc:f3:92:9a:2b:be:9f:e2:9c:6e:01:7c:65:ad:a5:7f:78:e7:
ea:96:ab:01:bc:ea:32:11:26:bc:a3:3f:e7:8e:55:38:b9:df:
e9:63:17:20:de:f5:33:06:c1:35:cc:9b:31:5e:43:ad:15:be:
9d:17:c1:c7:30:64:f6:2b:1d:01:cc:75:d3:b9:e5:8f:69:70:
18:ff:7f:fd:ee:59:81:fb:80:5a:f8:5d:aa:1a:7a:e8:7b:8b:
df:73:d1:61:b4:57:25:6b:df:07:48:2a:91:57:61:1b:18:71:
6f:09:50:97:f4:8c:2e:ac:3e:52:82:f0:20:87:d9:20:17:04:
9e:a8:34:ad:dc:7d:94:da:00:3b:c3:27:cc:d8:e4:8c:57:e6:
d9:72:26:cb:fe:43:39:e1:27:8a:04:7f:97:90:a8:d4:2f:a0:
a9:19:01:f3:49:55:68:41:93:ab:8e:bf:b0:71:90:57:d0:ba:
cf:8d:51:2d:62:51:c7:67:8a:d5:bc:c9:29:3f:13:d0:02:cd:
5b:a2:7e:a7:33:5b:77:04:15:6e:60:14:fd:07:14:f9:4b:9f:
94:3c:8f:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:09:14 2025 by rpki-client