Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/77ce38-402c-4cb9-8582-221449118309/1/TeztaXzW72A8kPgBiBg7zjAgQOE.mft
File: TeztaXzW72A8kPgBiBg7zjAgQOE.mft (raw, json)
Hash identifier: LPJb8XPpRWH/ZyYDeLhMPJdaV03iTYU10ttPdyeOr3s=
Subject key identifier: C1:1C:48:BB:03:89:A2:B2:9B:1A:D6:26:C1:69:A6:67:2A:5D:BF:65
Authority key identifier: 4D:EC:ED:69:7C:D6:EF:60:3C:90:F8:01:88:18:3B:CE:30:20:40:E1
Certificate issuer: /CN=4deced697cd6ef603c90f80188183bce302040e1
Certificate serial: 01984A09D139DC2072B5C028C2F87CE070EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TeztaXzW72A8kPgBiBg7zjAgQOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/77ce38-402c-4cb9-8582-221449118309/1/TeztaXzW72A8kPgBiBg7zjAgQOE.mft
Manifest number: 059F
Signing time: Sun 27 Jul 2025 04:00:14 +0000
Manifest this update: Sun 27 Jul 2025 04:00:14 +0000
Manifest next update: Mon 28 Jul 2025 04:00:14 +0000
Files and hashes: 1: TeztaXzW72A8kPgBiBg7zjAgQOE.crl (hash: aJ4E/kD6gBFGhiJnKM+UhpuI9dZVQR/5TD46fXNHRlE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/77ce38-402c-4cb9-8582-221449118309/1/TeztaXzW72A8kPgBiBg7zjAgQOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/77ce38-402c-4cb9-8582-221449118309/1/TeztaXzW72A8kPgBiBg7zjAgQOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/TeztaXzW72A8kPgBiBg7zjAgQOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:09:d1:39:dc:20:72:b5:c0:28:c2:f8:7c:e0:70:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4deced697cd6ef603c90f80188183bce302040e1
Validity
Not Before: Jul 27 04:00:14 2025 GMT
Not After : Jul 28 04:00:14 2025 GMT
Subject: CN=c11c48bb0389a2b29b1ad626c169a6672a5dbf65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:59:e5:f3:19:5f:bb:3c:21:e0:1a:e6:09:f7:
c0:fa:24:96:89:54:33:f0:16:43:e3:30:21:2f:cb:
58:68:61:04:fc:ea:fd:f5:8b:a7:6d:dd:40:7e:be:
b0:4f:ac:eb:0a:39:26:a3:f7:58:38:8c:ab:cd:c7:
6e:8a:c2:45:03:f1:33:50:4d:24:0c:8f:a3:fa:97:
fd:83:54:cd:99:ac:2d:ea:54:d8:23:00:14:72:f8:
21:4a:40:b8:ca:fb:87:56:5e:a5:8e:45:11:62:d1:
b7:9e:3e:66:1a:bc:67:dc:85:d3:df:db:90:35:be:
d3:d8:7d:b7:4c:49:f0:00:45:2e:b6:2e:2e:a9:14:
df:42:a6:01:0b:36:ee:d4:95:d8:db:c7:20:a9:47:
fc:83:9a:73:07:3c:22:2a:a0:d4:a4:05:eb:72:f9:
a1:c7:19:9c:91:2f:6a:0b:cd:d8:00:19:9d:38:0c:
be:3c:c7:b6:a9:41:4a:36:30:d1:1b:ff:9f:4f:3b:
de:81:2b:57:0f:1b:97:ad:7a:8a:b9:96:cf:1a:9e:
cb:a4:77:de:7a:a8:da:8b:6f:73:e3:fd:df:33:72:
01:bd:47:d3:60:2f:69:ee:e0:75:ed:4a:5b:a4:f7:
28:ab:1c:2a:30:9a:cd:32:2d:cb:66:f4:fe:28:96:
85:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:1C:48:BB:03:89:A2:B2:9B:1A:D6:26:C1:69:A6:67:2A:5D:BF:65
X509v3 Authority Key Identifier:
keyid:4D:EC:ED:69:7C:D6:EF:60:3C:90:F8:01:88:18:3B:CE:30:20:40:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TeztaXzW72A8kPgBiBg7zjAgQOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/77ce38-402c-4cb9-8582-221449118309/1/TeztaXzW72A8kPgBiBg7zjAgQOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/77ce38-402c-4cb9-8582-221449118309/1/TeztaXzW72A8kPgBiBg7zjAgQOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:bf:01:41:6e:e3:d9:f1:82:87:98:d6:d2:cc:c5:91:82:a7:
59:be:75:86:c7:0b:bb:f3:c8:95:45:18:df:21:f6:b3:b8:43:
9c:ad:91:3e:c4:33:2c:18:3e:74:65:dc:f3:c0:d2:db:04:0f:
85:e4:94:9c:e1:92:20:02:c3:97:00:17:9a:1a:2d:ca:60:54:
09:d4:d2:7e:8c:1b:98:fc:4c:35:cf:1e:a7:ab:c9:56:6c:01:
b7:d4:b0:07:a0:5a:0f:2e:7e:52:c5:36:fd:75:41:7d:53:40:
0e:0b:27:03:0e:f6:94:1f:5b:a8:0f:cd:d5:5d:87:02:a7:ad:
e6:44:ec:32:d6:01:46:a2:11:45:94:b0:c8:00:26:8e:65:0d:
0b:c0:05:b6:6a:f1:15:d8:be:b3:82:a1:6c:ec:51:bf:8f:7f:
ff:b6:ba:9e:8f:e4:e7:d8:a9:d5:af:00:35:4f:30:c2:38:38:
b7:54:f9:29:08:c3:7b:30:b3:be:13:b3:72:1f:ea:92:34:d1:
1a:9b:9a:45:32:90:8b:fd:de:95:3c:ff:c6:62:b4:64:bc:79:
91:e1:50:c5:b5:ab:3b:24:1f:f6:b9:95:e0:6b:b9:a1:28:7f:
17:3c:c9:3c:e0:ec:05:ae:f4:6b:f5:bd:81:20:42:c0:2b:c0:
33:06:81:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:31:32 2025 by rpki-client