Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/1980bd-0753-4161-b6f5-9c72e157abb3/1/Tm_7mQbuvrofWxpVju1jcvZTzoY.mft
File: Tm_7mQbuvrofWxpVju1jcvZTzoY.mft (raw, json)
Hash identifier: rOhO+cvy5r+/z1oLBbZ0O4ghlKOqXMXBLgDrkXdkfrg=
Subject key identifier: 47:06:B8:A9:3E:1B:F5:8D:B3:68:47:1E:76:BA:82:96:A9:0E:8D:25
Authority key identifier: 4E:6F:FB:99:06:EE:BE:BA:1F:5B:1A:55:8E:ED:63:72:F6:53:CE:86
Certificate issuer: /CN=4e6ffb9906eebeba1f5b1a558eed6372f653ce86
Certificate serial: 019752A21618E59D775851CA34E21731964B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tm_7mQbuvrofWxpVju1jcvZTzoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/1980bd-0753-4161-b6f5-9c72e157abb3/1/Tm_7mQbuvrofWxpVju1jcvZTzoY.mft
Manifest number: 157E
Signing time: Mon 09 Jun 2025 03:00:43 +0000
Manifest this update: Mon 09 Jun 2025 03:00:43 +0000
Manifest next update: Tue 10 Jun 2025 03:00:43 +0000
Files and hashes: 1: Tm_7mQbuvrofWxpVju1jcvZTzoY.crl (hash: t5RzCdv2q2ypDaRMxGmEmfc+q4eQnf4kad8NLZObwa4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/1980bd-0753-4161-b6f5-9c72e157abb3/1/Tm_7mQbuvrofWxpVju1jcvZTzoY.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/1980bd-0753-4161-b6f5-9c72e157abb3/1/Tm_7mQbuvrofWxpVju1jcvZTzoY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tm_7mQbuvrofWxpVju1jcvZTzoY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:52:a2:16:18:e5:9d:77:58:51:ca:34:e2:17:31:96:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e6ffb9906eebeba1f5b1a558eed6372f653ce86
Validity
Not Before: Jun 9 03:00:43 2025 GMT
Not After : Jun 10 03:00:43 2025 GMT
Subject: CN=4706b8a93e1bf58db368471e76ba8296a90e8d25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c3:4e:2d:2d:f5:f8:41:ac:e5:ee:8d:0a:70:
b1:8c:e6:7d:b5:5e:ea:79:6e:16:e1:cf:df:ba:87:
ca:49:8f:f7:af:56:25:73:0b:18:fb:ed:58:98:4b:
6a:ad:dc:05:55:9e:b7:65:2e:69:ae:84:c0:eb:cf:
f2:11:18:ce:77:9b:2a:e4:25:43:ff:01:d8:cf:05:
bb:02:94:d0:c0:26:f7:26:81:77:ed:af:0f:cb:c5:
40:be:eb:32:85:ac:ba:24:6d:07:e3:da:b4:bc:56:
aa:16:2c:c8:96:76:58:5a:f8:df:07:a1:7d:33:57:
94:d0:94:33:72:59:b5:ed:9c:f6:da:6b:f0:f4:1e:
18:3a:76:82:5a:2a:e6:34:ce:c6:cb:3e:a5:3a:d1:
7b:c5:f9:56:a2:5f:f7:68:ea:34:11:fa:37:29:03:
b8:ed:de:ff:b7:16:45:11:8e:96:0d:6f:39:3d:57:
74:10:d0:41:68:c0:b8:5a:2e:b3:4f:94:bb:15:1f:
dd:09:f5:f2:1f:79:12:f9:47:e2:19:ff:dd:76:ce:
cc:1f:b9:85:62:bf:a9:0d:85:dc:9f:9c:d8:a9:8d:
25:24:2a:fd:b2:4d:52:83:1b:86:4f:aa:a8:5d:77:
5b:82:52:8f:f2:d3:5b:0a:7d:5f:d7:20:1b:da:a7:
d8:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:06:B8:A9:3E:1B:F5:8D:B3:68:47:1E:76:BA:82:96:A9:0E:8D:25
X509v3 Authority Key Identifier:
keyid:4E:6F:FB:99:06:EE:BE:BA:1F:5B:1A:55:8E:ED:63:72:F6:53:CE:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tm_7mQbuvrofWxpVju1jcvZTzoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/1980bd-0753-4161-b6f5-9c72e157abb3/1/Tm_7mQbuvrofWxpVju1jcvZTzoY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/1980bd-0753-4161-b6f5-9c72e157abb3/1/Tm_7mQbuvrofWxpVju1jcvZTzoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:25:38:67:41:46:cb:71:53:2f:55:e3:3a:68:f9:d0:53:f1:
a9:f0:90:15:8a:b4:53:9d:80:55:07:49:77:f2:96:f5:d8:9b:
f1:cd:a8:23:63:21:46:fd:fd:a8:9b:ca:06:5b:4c:9d:25:92:
64:92:ee:ac:74:57:4e:c9:e7:71:3e:c5:a9:ef:0d:29:06:1d:
99:a3:7e:9f:60:af:e5:f9:5a:f5:af:12:50:ef:65:d2:52:86:
1b:e2:8a:f2:e6:be:37:1c:93:86:74:36:3b:5b:a4:13:e7:63:
20:29:1d:53:c5:f1:f8:08:f2:2a:30:94:11:7f:c8:bf:2f:67:
67:94:56:72:03:e1:11:b9:27:d9:53:03:90:79:8d:a8:da:1e:
b5:2d:90:1b:91:10:d3:43:d8:f4:83:74:a3:08:e2:0f:ff:bf:
e2:0e:b4:92:1f:9f:ca:d5:50:8f:ee:b6:02:e1:db:ca:3a:3a:
fd:bb:54:e1:a6:f4:28:83:ad:21:3e:1d:80:f9:d0:3c:a7:c4:
ab:30:90:07:8d:23:62:e3:d1:96:c3:e0:27:b5:c6:e3:b9:fe:
c6:a4:37:30:f8:ba:e8:c8:49:bc:5e:a0:6b:e9:08:fd:fd:7e:
4c:b4:f1:c3:63:e6:9a:34:1c:80:5d:c1:67:13:d9:1f:cd:ba:
55:5d:c1:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 12:40:37 2025 by rpki-client