Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/887501-4d8e-4beb-9590-65079b75868a/1/TTpxp39MqbpTb5hhKpxW1AwMO50.mft
File: TTpxp39MqbpTb5hhKpxW1AwMO50.mft (raw, json)
Hash identifier: 6qFHiCAPFmz4imGPNMp5J2A4UGGmts9t/O0fOR/TKYM=
Subject key identifier: CC:99:D7:CF:8E:92:D0:C0:1F:69:02:C5:FC:AE:77:9F:FF:0A:D7:22
Authority key identifier: 4D:3A:71:A7:7F:4C:A9:BA:53:6F:98:61:2A:9C:56:D4:0C:0C:3B:9D
Certificate issuer: /CN=4d3a71a77f4ca9ba536f98612a9c56d40c0c3b9d
Certificate serial: 01975800031DAD8350806540E3683C945786
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TTpxp39MqbpTb5hhKpxW1AwMO50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/887501-4d8e-4beb-9590-65079b75868a/1/TTpxp39MqbpTb5hhKpxW1AwMO50.mft
Manifest number: 1581
Signing time: Tue 10 Jun 2025 04:01:24 +0000
Manifest this update: Tue 10 Jun 2025 04:01:24 +0000
Manifest next update: Wed 11 Jun 2025 04:01:24 +0000
Files and hashes: 1: TTpxp39MqbpTb5hhKpxW1AwMO50.crl (hash: 8JpNBkmjd1AT5eA+uJv8pZEu4k7/POL8OYpS34wDcy0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/887501-4d8e-4beb-9590-65079b75868a/1/TTpxp39MqbpTb5hhKpxW1AwMO50.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/887501-4d8e-4beb-9590-65079b75868a/1/TTpxp39MqbpTb5hhKpxW1AwMO50.mft
rsync://rpki.ripe.net/repository/DEFAULT/TTpxp39MqbpTb5hhKpxW1AwMO50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 04:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:58:00:03:1d:ad:83:50:80:65:40:e3:68:3c:94:57:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d3a71a77f4ca9ba536f98612a9c56d40c0c3b9d
Validity
Not Before: Jun 10 04:01:24 2025 GMT
Not After : Jun 11 04:01:24 2025 GMT
Subject: CN=cc99d7cf8e92d0c01f6902c5fcae779fff0ad722
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5d:cd:12:f9:81:15:a0:34:f0:92:bc:44:c9:
50:9a:22:75:d0:3d:14:63:2b:3e:ef:a7:15:43:9d:
5f:ca:90:d7:28:6f:3b:f0:27:b6:4f:1a:fe:db:70:
87:14:cf:54:26:87:00:60:42:df:55:fd:19:8b:d9:
ce:5c:79:42:37:61:dc:69:88:a1:55:9c:35:d6:7e:
35:4e:7b:31:97:a6:cc:0b:2e:03:e1:b0:8a:c1:4f:
6c:8c:99:2e:de:9b:4d:6a:ac:ce:6c:55:38:b3:ff:
01:77:de:69:c7:ea:5a:4a:12:1f:b0:f3:90:73:82:
93:80:b1:50:86:be:34:70:e3:d8:50:53:25:5d:29:
64:57:7e:81:e2:a6:48:9b:0f:b5:8c:a8:70:c0:52:
2e:bc:06:8c:3f:6e:d6:d0:cf:d1:0b:2b:e5:da:41:
30:5a:2b:c5:31:9b:86:66:c5:2d:fb:27:53:00:29:
ec:4e:47:c5:c2:a5:53:2a:b3:f3:39:7a:7a:ee:1a:
d9:1c:df:4e:1e:b9:1e:4d:21:2f:a6:71:84:5d:2d:
06:18:f1:19:5d:23:3e:ef:5e:fe:0a:5d:8d:1a:a1:
8f:29:cf:8d:8a:37:a6:d8:f1:33:fb:df:28:22:8d:
9d:f2:c1:11:cc:53:22:3a:b7:7b:1a:e3:e9:0a:51:
e7:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:99:D7:CF:8E:92:D0:C0:1F:69:02:C5:FC:AE:77:9F:FF:0A:D7:22
X509v3 Authority Key Identifier:
keyid:4D:3A:71:A7:7F:4C:A9:BA:53:6F:98:61:2A:9C:56:D4:0C:0C:3B:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TTpxp39MqbpTb5hhKpxW1AwMO50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/887501-4d8e-4beb-9590-65079b75868a/1/TTpxp39MqbpTb5hhKpxW1AwMO50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/887501-4d8e-4beb-9590-65079b75868a/1/TTpxp39MqbpTb5hhKpxW1AwMO50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:16:84:ea:eb:be:fe:40:7d:0b:58:d2:87:1f:0e:b5:81:1d:
6c:a7:2b:66:2b:f7:e3:f4:70:7f:cf:9e:e8:92:6c:f6:2c:ec:
9e:97:de:b3:23:27:59:dd:f4:01:eb:bd:bf:21:c6:14:4e:d4:
54:38:a0:85:c9:65:46:02:73:a8:7b:32:00:36:3e:ba:6b:05:
ad:5b:dc:32:7a:14:8b:35:b1:27:33:c8:f3:8e:79:0a:cc:23:
6a:2b:d4:10:f7:dd:12:38:1a:8f:ab:8c:aa:e5:3f:68:63:7f:
73:d5:1a:63:9f:fd:af:13:d2:72:6b:2e:dd:5a:99:ce:ee:94:
9c:b0:ea:82:ec:0c:87:77:98:09:34:53:72:97:32:99:61:35:
79:53:99:44:32:5c:23:82:35:31:50:82:a6:ea:45:a8:34:43:
75:cd:ba:14:bc:de:52:63:d2:34:ac:fc:f3:8f:75:58:f7:fd:
19:a3:d9:86:87:b0:c9:ef:86:21:6d:fd:78:3b:2f:11:68:b5:
bd:32:68:a7:20:2a:e2:15:1c:b3:89:c7:19:60:67:88:db:4e:
cc:76:af:55:3b:9a:bc:c0:11:37:a9:36:53:b4:4c:d8:fc:55:
af:e0:27:cc:94:ae:0b:a1:5c:4a:04:87:b3:95:63:d8:70:7a:
c9:45:26:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 15:57:52 2025 by rpki-client