Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/02b7d6-269b-4bb2-b455-391768573496/1/TjS6bj4mlMezjkZRr-4GGwsh3q4.mft
File: TjS6bj4mlMezjkZRr-4GGwsh3q4.mft (raw, json)
Hash identifier: ZZNRbKpRIfc7pE/j+zlu/iAUpHPLi8ncjUXon5+iCWc=
Subject key identifier: 30:AC:0A:62:5C:AF:56:EA:36:CB:99:10:70:4C:BB:F8:E5:D9:C0:64
Authority key identifier: 4E:34:BA:6E:3E:26:94:C7:B3:8E:46:51:AF:EE:06:1B:0B:21:DE:AE
Certificate issuer: /CN=4e34ba6e3e2694c7b38e4651afee061b0b21deae
Certificate serial: 01974E573C8309585AAFA6B7111ADB4B9EA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TjS6bj4mlMezjkZRr-4GGwsh3q4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/02b7d6-269b-4bb2-b455-391768573496/1/TjS6bj4mlMezjkZRr-4GGwsh3q4.mft
Manifest number: A0
Signing time: Sun 08 Jun 2025 07:00:29 +0000
Manifest this update: Sun 08 Jun 2025 07:00:29 +0000
Manifest next update: Mon 09 Jun 2025 07:00:29 +0000
Files and hashes: 1: TjS6bj4mlMezjkZRr-4GGwsh3q4.crl (hash: b83qXgGlYrf7kLckVd5GiEKLoRro31k1ybrW8XcD9E0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/02b7d6-269b-4bb2-b455-391768573496/1/TjS6bj4mlMezjkZRr-4GGwsh3q4.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/02b7d6-269b-4bb2-b455-391768573496/1/TjS6bj4mlMezjkZRr-4GGwsh3q4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TjS6bj4mlMezjkZRr-4GGwsh3q4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:57:3c:83:09:58:5a:af:a6:b7:11:1a:db:4b:9e:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e34ba6e3e2694c7b38e4651afee061b0b21deae
Validity
Not Before: Jun 8 07:00:29 2025 GMT
Not After : Jun 9 07:00:29 2025 GMT
Subject: CN=30ac0a625caf56ea36cb9910704cbbf8e5d9c064
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:e1:99:18:55:27:98:a6:6a:67:e7:5a:d7:ad:
9c:5b:63:f8:68:28:c3:b1:8e:99:81:7c:f0:2b:ab:
d3:5c:3d:0c:ce:09:e2:95:e7:27:35:a8:55:85:4b:
f6:30:51:06:70:50:6d:27:57:53:5a:71:87:20:a5:
b8:02:46:14:58:78:61:5f:ef:0d:b0:a5:7d:1b:3e:
16:24:29:aa:6b:7a:14:3a:b1:6f:36:88:63:86:bb:
44:d2:e2:c7:61:ef:6d:00:6a:ac:95:45:cd:83:af:
c1:53:1e:f8:28:07:59:91:71:6b:f7:ed:ac:4a:28:
92:9e:0f:38:fa:82:30:89:92:40:e6:3c:99:6c:6b:
58:05:44:e9:25:0c:74:8d:29:7a:a7:62:cd:be:69:
9f:52:b7:11:9b:a1:63:84:37:90:a0:8a:e0:1f:f3:
b8:7e:90:eb:4c:ed:76:b0:61:b6:d9:9d:e7:5a:15:
30:3c:ed:53:dc:17:b4:ec:b2:2d:d1:39:92:c6:f5:
ce:7f:97:69:8e:4e:ae:fc:00:15:6f:19:25:5b:24:
51:c4:63:86:b2:10:42:e5:c8:d0:59:cd:57:e9:85:
32:62:62:d4:e3:fc:0d:b0:2c:7c:4e:9f:3d:bf:e4:
f3:07:75:38:9f:0b:64:c6:2a:9a:2a:a3:ad:e2:17:
a9:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:AC:0A:62:5C:AF:56:EA:36:CB:99:10:70:4C:BB:F8:E5:D9:C0:64
X509v3 Authority Key Identifier:
keyid:4E:34:BA:6E:3E:26:94:C7:B3:8E:46:51:AF:EE:06:1B:0B:21:DE:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TjS6bj4mlMezjkZRr-4GGwsh3q4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/02b7d6-269b-4bb2-b455-391768573496/1/TjS6bj4mlMezjkZRr-4GGwsh3q4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/02b7d6-269b-4bb2-b455-391768573496/1/TjS6bj4mlMezjkZRr-4GGwsh3q4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:95:57:93:4e:1a:03:93:e5:25:bf:ea:ff:a0:64:79:a3:af:
a2:c9:ff:0f:4d:36:0d:f1:57:67:7f:c5:7e:08:66:2d:9f:b8:
fa:6c:63:fa:1a:19:27:67:ec:a4:93:88:82:60:90:00:77:3c:
dc:70:a4:db:69:76:ee:4e:75:ea:ee:14:70:87:47:6a:d3:92:
6f:2a:9a:95:8e:92:eb:35:96:20:bf:60:74:30:95:9f:4c:a3:
04:23:df:00:7f:52:2b:49:c3:0c:69:92:35:81:cd:44:ed:74:
c1:b9:fe:32:36:4e:28:0d:78:a3:b8:d6:e2:54:74:b3:df:6a:
fc:a9:6c:d9:0b:1a:4f:8a:78:63:03:aa:23:65:5c:d2:05:b8:
36:20:c3:60:94:ba:39:f5:55:ec:74:b9:45:00:d9:c6:7e:15:
d0:e0:bd:c8:4c:e1:0f:e2:b2:f7:67:e2:f0:55:87:53:3e:1d:
b5:56:88:04:be:dd:28:c7:90:7f:e6:da:36:08:af:be:3a:06:
67:bf:34:d7:03:dd:26:75:cf:30:60:cd:39:dc:60:2a:92:91:
db:2a:b8:7f:bd:a5:1a:79:6d:81:8a:e4:c2:38:1b:d9:33:d4:
f6:50:ac:89:99:cb:11:88:87:4b:4e:c9:dd:d4:6a:b6:d7:27:
47:cf:dd:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 12:03:55 2025 by rpki-client