
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/f89fbd-5142-4bcc-bab1-994ef87db3a3/1/tIO8CnGlLQzzmJUiNnV1lZ69zvU.mft
File: tIO8CnGlLQzzmJUiNnV1lZ69zvU.mft (raw, json)
Hash identifier: eQ7mVvv6tOyBrbJGo6u1APzz1BCICHRYuMxqSseIIkI=
Subject key identifier: B8:E5:75:91:74:84:7F:3C:E4:26:27:8F:A6:01:0A:7A:D3:74:0A:EC
Authority key identifier: B4:83:BC:0A:71:A5:2D:0C:F3:98:95:22:36:75:75:95:9E:BD:CE:F5
Certificate issuer: /CN=b483bc0a71a52d0cf3989522367575959ebdcef5
Certificate serial: 019750B43244FBC097CC6C783C7DB11F27FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tIO8CnGlLQzzmJUiNnV1lZ69zvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/f89fbd-5142-4bcc-bab1-994ef87db3a3/1/tIO8CnGlLQzzmJUiNnV1lZ69zvU.mft
Manifest number: 150E
Signing time: Sun 08 Jun 2025 18:01:15 +0000
Manifest this update: Sun 08 Jun 2025 18:01:15 +0000
Manifest next update: Mon 09 Jun 2025 18:01:15 +0000
Files and hashes: 1: tIO8CnGlLQzzmJUiNnV1lZ69zvU.crl (hash: e4UHsF0Kflpq5A5k8Av/BTw8z929/pBexcc5gAY/PaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/f89fbd-5142-4bcc-bab1-994ef87db3a3/1/tIO8CnGlLQzzmJUiNnV1lZ69zvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/f89fbd-5142-4bcc-bab1-994ef87db3a3/1/tIO8CnGlLQzzmJUiNnV1lZ69zvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tIO8CnGlLQzzmJUiNnV1lZ69zvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 17:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:b4:32:44:fb:c0:97:cc:6c:78:3c:7d:b1:1f:27:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b483bc0a71a52d0cf3989522367575959ebdcef5
Validity
Not Before: Jun 8 18:01:15 2025 GMT
Not After : Jun 9 18:01:15 2025 GMT
Subject: CN=b8e5759174847f3ce426278fa6010a7ad3740aec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b2:5c:7c:bb:e7:68:fb:05:5e:4d:60:7e:24:
09:35:36:d5:48:d7:25:f2:2f:21:e8:b8:1f:05:16:
56:82:e5:53:00:65:3d:45:49:27:00:df:bc:e9:7d:
3f:b1:09:1a:a7:8c:55:c3:12:d2:15:da:96:37:e3:
83:18:8b:48:15:4a:10:4c:86:d4:30:bc:a9:2b:d9:
d3:a3:ca:22:18:85:d1:85:77:0a:65:97:6d:34:0a:
91:45:c3:e6:87:2c:4a:d7:f4:93:7d:70:4b:d1:ab:
8f:46:9c:3d:7b:91:00:86:8a:a8:b0:55:99:92:28:
f1:f0:8a:9a:a7:9e:8f:bb:7a:eb:28:86:8a:b9:b4:
03:c1:45:d7:0e:10:4f:f0:1c:c6:37:6c:89:42:c1:
a1:ca:70:82:b4:6d:4c:9f:00:b5:5c:44:3c:64:7f:
6d:cb:df:f0:8c:a5:b7:25:7f:6c:78:9a:b7:54:c6:
a5:89:31:86:53:d5:79:7b:d8:20:58:2f:39:22:9f:
c3:c0:0b:71:29:7c:bb:eb:bc:a5:3d:07:23:93:0a:
57:2a:47:c7:20:3a:48:eb:e0:4f:9b:04:d0:cd:4d:
6a:d5:48:9b:a8:07:06:4a:b8:8b:ce:1e:48:fd:4f:
9c:92:b1:2e:06:ae:5c:67:0b:f0:6a:be:19:4e:29:
0c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:E5:75:91:74:84:7F:3C:E4:26:27:8F:A6:01:0A:7A:D3:74:0A:EC
X509v3 Authority Key Identifier:
keyid:B4:83:BC:0A:71:A5:2D:0C:F3:98:95:22:36:75:75:95:9E:BD:CE:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tIO8CnGlLQzzmJUiNnV1lZ69zvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f89fbd-5142-4bcc-bab1-994ef87db3a3/1/tIO8CnGlLQzzmJUiNnV1lZ69zvU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f89fbd-5142-4bcc-bab1-994ef87db3a3/1/tIO8CnGlLQzzmJUiNnV1lZ69zvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:13:74:91:c3:ca:4e:44:0e:dc:de:56:35:d5:16:de:7e:59:
24:4b:05:31:a7:29:c7:b2:c0:7b:e4:8e:4c:45:1b:0e:cc:7f:
7e:9f:e5:d4:4a:dc:46:fa:a8:50:0e:9a:81:95:d0:68:2b:e2:
b9:cd:d4:69:94:62:4f:8d:98:4e:18:5f:0f:eb:4a:89:2a:2b:
4c:be:6f:a4:3e:13:39:ef:24:4f:27:5d:b0:18:60:fe:d7:e8:
3f:c5:a7:a8:93:10:00:34:3e:21:f3:b0:ab:83:b4:9b:6d:8d:
4b:5e:96:c5:17:e9:e2:cb:f7:f1:cd:16:f9:2e:41:50:7e:7a:
cd:b8:f3:ee:7b:9c:2a:76:4a:2b:3e:18:d0:ee:18:94:d3:fc:
83:6f:11:af:10:ab:c9:34:02:7a:ad:85:7b:a4:b0:19:24:15:
97:54:68:cb:51:4e:ca:4c:67:90:76:52:7a:9d:ed:1b:f2:a2:
a7:65:73:20:0d:c8:2d:3d:14:65:cd:c4:5e:20:89:4f:fc:d2:
b6:48:4f:86:ba:37:8e:2f:12:c6:4a:f7:eb:6b:cf:7a:78:b0:
af:86:e6:74:9b:d0:54:b3:a2:d5:c3:7e:7f:53:39:db:4b:c7:
18:05:1f:94:04:cc:30:76:c9:b7:fc:75:0b:64:fd:b0:b0:2d:
b1:38:53:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 02:36:29 2025 by rpki-client