Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/c6994c-a8c0-47e0-a006-b086666e2ada/1/tpGf6MvvmrMgrH4ONGh51J0YV9Y.mft
File: tpGf6MvvmrMgrH4ONGh51J0YV9Y.mft (raw, json)
Hash identifier: 4j/o90AFXOpEertsjVgrcPa2J5/Mu3pLhkP/r44CuLs=
Subject key identifier: 96:67:F6:C0:50:61:3D:A6:1E:F2:C1:11:59:89:1E:29:90:90:93:0A
Authority key identifier: B6:91:9F:E8:CB:EF:9A:B3:20:AC:7E:0E:34:68:79:D4:9D:18:57:D6
Certificate issuer: /CN=b6919fe8cbef9ab320ac7e0e346879d49d1857d6
Certificate serial: 01974A7AAABBCD889265E87C4BB695594B98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tpGf6MvvmrMgrH4ONGh51J0YV9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/c6994c-a8c0-47e0-a006-b086666e2ada/1/tpGf6MvvmrMgrH4ONGh51J0YV9Y.mft
Manifest number: 0634
Signing time: Sat 07 Jun 2025 13:00:42 +0000
Manifest this update: Sat 07 Jun 2025 13:00:42 +0000
Manifest next update: Sun 08 Jun 2025 13:00:42 +0000
Files and hashes: 1: tpGf6MvvmrMgrH4ONGh51J0YV9Y.crl (hash: TR/PQcxtfTLpbZNH0/UfbGZ1va67q5+P48E3c82tqP0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/c6994c-a8c0-47e0-a006-b086666e2ada/1/tpGf6MvvmrMgrH4ONGh51J0YV9Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/c6994c-a8c0-47e0-a006-b086666e2ada/1/tpGf6MvvmrMgrH4ONGh51J0YV9Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/tpGf6MvvmrMgrH4ONGh51J0YV9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 13:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7a:aa:bb:cd:88:92:65:e8:7c:4b:b6:95:59:4b:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6919fe8cbef9ab320ac7e0e346879d49d1857d6
Validity
Not Before: Jun 7 13:00:42 2025 GMT
Not After : Jun 8 13:00:42 2025 GMT
Subject: CN=9667f6c050613da61ef2c11159891e299090930a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:26:c6:87:54:d7:0c:f1:25:e0:01:39:c2:d7:
f3:ea:48:b7:5c:67:aa:1c:cb:ff:b4:d1:a3:6c:4b:
fe:c2:11:58:ed:2e:2a:c6:8f:60:d3:27:24:1f:2b:
cc:a1:8c:0b:31:e1:99:c9:07:ff:3e:3c:35:34:0b:
80:be:a0:b6:8d:9c:ae:12:07:cf:24:c6:37:06:a7:
86:da:c7:c0:29:d4:0b:8a:3f:94:cb:5f:4a:a1:78:
c3:ff:c8:52:59:c7:65:6b:32:a0:dc:82:53:de:94:
9b:6a:92:d8:4b:43:85:6c:99:e8:18:87:8a:a2:22:
43:4c:6e:aa:21:be:59:5f:86:36:9d:a1:f8:7e:23:
62:10:f4:34:c9:4c:c1:a3:2d:bd:a8:41:b5:41:7a:
f8:da:dd:c5:bf:e8:c3:5f:2a:15:a5:0a:f5:c3:3c:
76:3c:3b:9e:ab:19:2d:f3:2c:5e:96:34:4c:d1:02:
54:bf:55:33:a4:d0:a5:1e:5c:b1:bc:2b:89:41:ca:
8c:71:97:cb:95:e6:ae:26:93:03:d7:5f:5f:0c:4f:
69:54:58:62:e5:db:7d:7c:ce:67:21:4a:8b:b3:00:
8d:bc:26:25:77:51:50:53:4a:ca:e1:1e:c3:6d:98:
59:a5:12:29:e4:6b:f8:60:1a:4d:9e:b2:8c:86:06:
07:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:67:F6:C0:50:61:3D:A6:1E:F2:C1:11:59:89:1E:29:90:90:93:0A
X509v3 Authority Key Identifier:
keyid:B6:91:9F:E8:CB:EF:9A:B3:20:AC:7E:0E:34:68:79:D4:9D:18:57:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tpGf6MvvmrMgrH4ONGh51J0YV9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/c6994c-a8c0-47e0-a006-b086666e2ada/1/tpGf6MvvmrMgrH4ONGh51J0YV9Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/c6994c-a8c0-47e0-a006-b086666e2ada/1/tpGf6MvvmrMgrH4ONGh51J0YV9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:66:fd:31:1e:fc:2b:35:68:75:6c:ba:ce:cc:05:e2:c3:f7:
ad:c6:7a:44:a5:fa:f4:fe:72:71:0a:07:48:5a:0f:42:96:0f:
44:69:4a:ab:76:6f:c3:7f:00:5a:18:f7:5b:85:1c:4d:b1:ca:
31:20:85:c6:96:12:90:71:ab:ce:b0:4b:0d:ad:77:84:6b:be:
23:32:d9:8d:68:a6:65:e1:ee:87:c1:59:eb:83:d9:d4:fb:1e:
af:df:a8:0c:af:54:29:c8:65:3c:d2:76:bf:c7:1e:2d:5e:03:
7d:ec:c7:61:7f:f5:2f:f8:43:ff:b5:66:ce:4f:9f:ec:2f:05:
46:58:c7:b2:4e:fe:17:dd:31:9d:f9:9a:24:af:0b:eb:95:82:
ab:bd:8e:8c:3a:fb:b7:bc:31:50:94:e6:62:a6:84:1b:18:7f:
7f:4d:31:09:9c:cb:f9:de:cd:20:17:d8:12:62:1f:4b:29:55:
13:19:e5:d1:02:1c:f6:a6:7a:7e:75:3d:96:63:e7:17:a0:89:
6a:41:5b:da:2f:e9:00:76:fe:9d:ba:95:3e:83:93:4a:6c:92:
92:82:47:5a:bf:6f:5f:d7:4e:b4:6a:53:0f:cf:f9:41:cd:7d:
00:98:99:fe:0a:aa:a6:7c:07:9c:d4:bd:9f:5c:fd:5e:f6:a5:
50:55:c1:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:19:29 2025 by rpki-client