Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/fdff01-762f-43a9-a4be-7bb1844014d6/1/tT8fJDLiJL3km_qxn2dTYpq1cH8.mft
File: tT8fJDLiJL3km_qxn2dTYpq1cH8.mft (raw, json)
Hash identifier: 75iVCW14dzPkt59mRor7Iw9T1JlDp2dtxHYzTtCqwrg=
Subject key identifier: AE:6B:6E:E3:66:31:F7:1C:F6:77:A4:BF:EB:04:44:B0:01:90:C6:85
Authority key identifier: B5:3F:1F:24:32:E2:24:BD:E4:9B:FA:B1:9F:67:53:62:9A:B5:70:7F
Certificate issuer: /CN=b53f1f2432e224bde49bfab19f6753629ab5707f
Certificate serial: 01974A7AE43A36C1F44669D80DF81996A31B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tT8fJDLiJL3km_qxn2dTYpq1cH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/fdff01-762f-43a9-a4be-7bb1844014d6/1/tT8fJDLiJL3km_qxn2dTYpq1cH8.mft
Manifest number: 0BDA
Signing time: Sat 07 Jun 2025 13:00:57 +0000
Manifest this update: Sat 07 Jun 2025 13:00:57 +0000
Manifest next update: Sun 08 Jun 2025 13:00:57 +0000
Files and hashes: 1: tT8fJDLiJL3km_qxn2dTYpq1cH8.crl (hash: BHtzITFJzELimd8dHDcsqpshGP2asaI4lIZ21DMVNC0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/fdff01-762f-43a9-a4be-7bb1844014d6/1/tT8fJDLiJL3km_qxn2dTYpq1cH8.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/fdff01-762f-43a9-a4be-7bb1844014d6/1/tT8fJDLiJL3km_qxn2dTYpq1cH8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tT8fJDLiJL3km_qxn2dTYpq1cH8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7a:e4:3a:36:c1:f4:46:69:d8:0d:f8:19:96:a3:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b53f1f2432e224bde49bfab19f6753629ab5707f
Validity
Not Before: Jun 7 13:00:57 2025 GMT
Not After : Jun 8 13:00:57 2025 GMT
Subject: CN=ae6b6ee36631f71cf677a4bfeb0444b00190c685
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:24:09:2a:4d:10:63:1e:1d:25:79:9d:f6:c9:
f6:2b:af:3c:a2:0f:e0:cb:e2:5b:10:1a:c0:05:9f:
09:50:0b:68:71:34:14:41:95:09:8a:82:2c:a5:43:
e4:fb:40:e0:5d:66:f2:06:43:67:88:a7:5c:df:90:
bb:65:74:3b:6c:d8:73:60:bc:3f:1a:44:0c:3b:70:
33:d1:b4:6b:d1:00:df:28:be:80:64:4f:1c:03:2e:
04:3d:4b:29:fa:b7:41:aa:d7:cc:b9:22:e6:07:26:
b7:be:db:5f:cd:f6:53:ea:16:02:b2:b5:a9:d1:30:
5c:53:e0:dd:7d:98:56:84:ed:cc:dd:d8:d8:31:3e:
46:38:ee:70:0e:1b:fa:39:3d:14:09:95:1e:d1:c2:
ac:fb:fb:b6:f9:9e:4b:b8:f8:2a:c1:d6:3b:7c:11:
0c:e4:f8:26:73:ac:4c:50:72:2f:b0:b1:44:02:c2:
50:0b:24:47:e1:7f:93:f8:9c:37:2e:98:6f:55:fa:
d6:db:9d:2a:ed:22:92:61:a0:9f:6f:c0:6a:28:df:
e6:24:4f:d9:7e:79:32:61:66:22:5d:d8:f1:11:c0:
9b:b3:e3:76:e4:6d:dd:34:28:95:87:0b:f0:d4:30:
18:c4:9d:c4:b3:84:27:f3:63:0e:67:de:31:38:c7:
db:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:6B:6E:E3:66:31:F7:1C:F6:77:A4:BF:EB:04:44:B0:01:90:C6:85
X509v3 Authority Key Identifier:
keyid:B5:3F:1F:24:32:E2:24:BD:E4:9B:FA:B1:9F:67:53:62:9A:B5:70:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tT8fJDLiJL3km_qxn2dTYpq1cH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/fdff01-762f-43a9-a4be-7bb1844014d6/1/tT8fJDLiJL3km_qxn2dTYpq1cH8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/fdff01-762f-43a9-a4be-7bb1844014d6/1/tT8fJDLiJL3km_qxn2dTYpq1cH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:f9:b1:cb:d6:fb:4d:92:07:43:f2:e0:f2:95:8f:5b:52:d4:
41:cb:04:69:6d:2e:7c:20:4f:9f:51:03:1d:e5:8c:82:f1:c4:
13:8d:69:88:67:af:b8:9d:03:f0:cb:d8:88:44:4f:3d:9a:75:
08:cb:cb:6c:17:3a:12:26:f4:bc:f6:17:ad:14:bb:20:5d:b1:
bf:ec:67:f2:6d:cb:7d:17:af:87:29:88:a3:fc:49:de:97:ab:
9a:ff:b4:26:44:a0:bc:08:76:3d:ad:e9:9c:24:95:d5:d8:65:
03:42:40:bd:8d:71:31:92:b6:2c:24:09:1a:ca:d0:c4:5c:6e:
e0:f7:a4:4e:ac:a5:52:59:22:df:f3:4e:68:ed:7f:9e:e0:0d:
64:57:02:fb:ba:11:cf:b4:93:70:f2:93:dd:e2:92:1c:8d:0b:
5a:34:03:62:0d:0e:5d:2a:9f:2a:52:f4:fd:10:07:89:9e:8f:
c1:e3:9f:a0:7b:19:44:72:7f:82:93:f6:78:a8:77:ae:50:9b:
1f:51:15:26:d0:8b:75:ab:eb:21:86:5c:cf:96:c3:b4:c0:de:
04:d1:52:b2:e8:a0:83:33:7d:04:a6:ce:f0:31:34:2e:37:4a:
25:19:fe:50:74:89:aa:fb:2e:c5:04:de:d7:d1:45:95:19:38:
7e:cb:85:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 20:28:18 2025 by rpki-client