Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/6e000e-e755-47e6-99a8-354871a85c7a/1/tt41SvltyILzXBLU9fpnUHY6tyA.mft
File: tt41SvltyILzXBLU9fpnUHY6tyA.mft (raw, json)
Hash identifier: eEVWPqh2RmuHM8LyUSx/NXnPe72QMwz0zq+oEep+q5A=
Subject key identifier: 7E:32:48:60:31:66:FF:3C:DC:20:58:1A:8F:B7:8C:BA:1E:5B:3D:D2
Authority key identifier: B6:DE:35:4A:F9:6D:C8:82:F3:5C:12:D4:F5:FA:67:50:76:3A:B7:20
Certificate issuer: /CN=b6de354af96dc882f35c12d4f5fa6750763ab720
Certificate serial: 0197488C04BEE4AE56837496397A5A7CEB9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tt41SvltyILzXBLU9fpnUHY6tyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/6e000e-e755-47e6-99a8-354871a85c7a/1/tt41SvltyILzXBLU9fpnUHY6tyA.mft
Manifest number: 0CA2
Signing time: Sat 07 Jun 2025 04:00:25 +0000
Manifest this update: Sat 07 Jun 2025 04:00:25 +0000
Manifest next update: Sun 08 Jun 2025 04:00:25 +0000
Files and hashes: 1: tt41SvltyILzXBLU9fpnUHY6tyA.crl (hash: MQk/YiSzZ9WurDlw8Y21oafwook+bY0IYdGaoa4uN1E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/6e000e-e755-47e6-99a8-354871a85c7a/1/tt41SvltyILzXBLU9fpnUHY6tyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/6e000e-e755-47e6-99a8-354871a85c7a/1/tt41SvltyILzXBLU9fpnUHY6tyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tt41SvltyILzXBLU9fpnUHY6tyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 04:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:04:be:e4:ae:56:83:74:96:39:7a:5a:7c:eb:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6de354af96dc882f35c12d4f5fa6750763ab720
Validity
Not Before: Jun 7 04:00:25 2025 GMT
Not After : Jun 8 04:00:25 2025 GMT
Subject: CN=7e3248603166ff3cdc20581a8fb78cba1e5b3dd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:40:b8:1d:af:23:c8:9e:27:0c:7e:03:97:29:
ca:a5:dc:af:72:0b:f1:d1:43:f1:f6:a0:82:31:75:
29:b6:38:d5:47:48:1a:9c:76:af:72:30:f6:58:b3:
9a:ad:4b:a1:2b:fb:10:98:df:26:56:27:09:9c:27:
08:38:ea:e1:6e:88:81:fe:04:ac:b4:02:9d:09:86:
62:d3:24:42:fb:a3:73:85:47:8d:48:13:a5:64:e3:
fb:3c:44:2f:41:ee:03:ff:a4:3f:5d:36:d4:77:62:
aa:66:ec:a2:5d:ad:85:9b:4f:ce:05:60:05:ce:f8:
25:2b:61:72:7f:92:54:01:86:f7:23:d5:05:fd:4a:
01:8c:c6:fb:0d:6c:56:f4:4c:24:ea:6b:e9:db:ae:
2a:02:f4:4b:1d:fe:de:0a:d1:38:24:7b:db:99:43:
36:a5:b4:75:6e:6a:d8:f1:08:97:e0:22:9d:35:f0:
90:fd:11:88:e3:8c:9b:10:e7:fc:8a:8e:02:05:ab:
f6:54:d0:21:13:21:a7:82:09:7d:01:8a:63:a2:51:
2d:3a:b1:09:6d:87:8d:21:c4:a0:ee:70:e3:15:cd:
d8:64:85:46:a6:07:fe:3a:3c:60:38:6f:5d:fb:6a:
3f:e5:19:44:02:77:62:7d:a4:ec:88:9a:58:a6:15:
1a:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:32:48:60:31:66:FF:3C:DC:20:58:1A:8F:B7:8C:BA:1E:5B:3D:D2
X509v3 Authority Key Identifier:
keyid:B6:DE:35:4A:F9:6D:C8:82:F3:5C:12:D4:F5:FA:67:50:76:3A:B7:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tt41SvltyILzXBLU9fpnUHY6tyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6e000e-e755-47e6-99a8-354871a85c7a/1/tt41SvltyILzXBLU9fpnUHY6tyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6e000e-e755-47e6-99a8-354871a85c7a/1/tt41SvltyILzXBLU9fpnUHY6tyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:61:2e:1f:12:e1:73:51:cb:b3:01:89:4e:8f:6b:a3:db:6b:
9b:74:65:9c:d4:57:9b:99:6b:54:1d:37:76:c7:45:e3:da:0a:
99:ed:08:4c:29:7a:9f:e6:8c:9a:de:0b:1f:d9:5e:1a:bd:b2:
d7:2a:80:00:2e:26:55:e0:c1:b2:eb:65:43:fe:fb:82:41:84:
99:5d:48:3d:11:ad:06:9f:41:56:57:b6:4f:70:1c:27:e8:9a:
41:56:fa:a1:c0:e8:27:92:79:18:24:1f:d9:58:c1:51:63:24:
db:78:03:0c:33:32:8e:54:65:11:63:f4:5c:12:02:e3:b7:42:
98:18:97:71:94:e1:17:e0:7e:51:a2:42:5a:4c:a3:ff:4e:f8:
f4:fe:ef:33:99:4f:fb:09:a1:de:45:75:33:06:4d:0d:88:3d:
e0:08:9d:f5:e6:f6:f2:26:a3:cc:92:c6:db:fc:1d:be:93:3e:
20:25:35:92:cb:c3:c4:32:98:f5:6d:6a:cb:09:ad:c5:d9:24:
b5:49:9c:64:b9:f2:00:1c:28:a8:c7:c7:23:13:e1:c4:aa:46:
dd:ef:7f:a2:17:d5:bd:e7:31:df:e3:32:b3:12:54:6a:0b:17:
9d:fc:08:3d:6a:66:e6:0d:99:52:e9:c6:f8:cd:ca:d4:63:4b:
d6:4a:0f:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 12:27:26 2025 by rpki-client