Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/552e68-611d-4ad8-a7e1-48bfac2cdc72/1/Ltf7wd8AcKz1s6Z85OIS29A6-tc.mft
File: Ltf7wd8AcKz1s6Z85OIS29A6-tc.mft (raw, json)
Hash identifier: ByAs2sMJWfOV/rS4ShVvGoGM758703bWHKL3mEswK+I=
Subject key identifier: 56:20:42:85:72:D6:1F:C0:92:8D:1C:3B:91:20:51:BC:FF:E7:A5:74
Authority key identifier: 2E:D7:FB:C1:DF:00:70:AC:F5:B3:A6:7C:E4:E2:12:DB:D0:3A:FA:D7
Certificate issuer: /CN=2ed7fbc1df0070acf5b3a67ce4e212dbd03afad7
Certificate serial: 01974A7A90C9FB12F5BF52CF7D6B72EA4104
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ltf7wd8AcKz1s6Z85OIS29A6-tc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/552e68-611d-4ad8-a7e1-48bfac2cdc72/1/Ltf7wd8AcKz1s6Z85OIS29A6-tc.mft
Manifest number: 05A9
Signing time: Sat 07 Jun 2025 13:00:35 +0000
Manifest this update: Sat 07 Jun 2025 13:00:35 +0000
Manifest next update: Sun 08 Jun 2025 13:00:35 +0000
Files and hashes: 1: Ltf7wd8AcKz1s6Z85OIS29A6-tc.crl (hash: CskBG7fM9fUCitTCZYNctno5fDictkxtY8OCO0QJc6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/552e68-611d-4ad8-a7e1-48bfac2cdc72/1/Ltf7wd8AcKz1s6Z85OIS29A6-tc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/552e68-611d-4ad8-a7e1-48bfac2cdc72/1/Ltf7wd8AcKz1s6Z85OIS29A6-tc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ltf7wd8AcKz1s6Z85OIS29A6-tc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 13:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7a:90:c9:fb:12:f5:bf:52:cf:7d:6b:72:ea:41:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ed7fbc1df0070acf5b3a67ce4e212dbd03afad7
Validity
Not Before: Jun 7 13:00:35 2025 GMT
Not After : Jun 8 13:00:35 2025 GMT
Subject: CN=5620428572d61fc0928d1c3b912051bcffe7a574
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:7a:9f:90:4b:da:26:db:ee:ae:4f:35:8f:39:
3a:dc:d8:45:51:60:fa:69:b2:8a:d1:0f:da:7c:66:
8f:b8:6a:82:fb:69:58:94:9e:c5:92:e3:cf:7e:14:
d9:a0:9b:41:c3:ed:58:d7:13:8c:31:2b:01:70:94:
35:d3:4c:84:3a:83:d9:ef:6b:df:9c:7d:d7:63:84:
7b:39:ee:fc:6c:9d:90:82:1e:07:64:ef:9f:7b:f0:
0c:b2:d3:d4:8d:c0:c7:30:cb:91:5e:cc:46:3d:ac:
d3:c4:48:fc:2a:1b:51:5c:62:bc:68:46:67:4f:50:
10:f9:03:a6:76:59:0e:aa:a5:db:81:3d:b8:2d:02:
84:89:9d:92:49:a9:44:cd:bf:a9:d1:f7:60:ef:12:
14:0f:a9:23:da:50:f5:ce:e4:61:b6:e4:55:c1:25:
c6:da:d1:e8:d4:43:e9:90:64:d7:a4:d0:e6:52:25:
46:b7:93:08:7b:4d:c7:3f:bf:41:ab:f0:3b:8e:51:
11:b4:a9:82:e1:4e:35:5d:9e:91:3d:42:97:27:d0:
60:96:99:45:51:6a:6e:0c:2f:9e:96:e8:0f:14:86:
24:bd:37:f1:67:1a:e1:7e:b4:98:11:b6:3f:3e:a3:
dc:4e:0e:39:b2:ce:e3:05:bd:21:25:52:5d:84:15:
71:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:20:42:85:72:D6:1F:C0:92:8D:1C:3B:91:20:51:BC:FF:E7:A5:74
X509v3 Authority Key Identifier:
keyid:2E:D7:FB:C1:DF:00:70:AC:F5:B3:A6:7C:E4:E2:12:DB:D0:3A:FA:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ltf7wd8AcKz1s6Z85OIS29A6-tc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/552e68-611d-4ad8-a7e1-48bfac2cdc72/1/Ltf7wd8AcKz1s6Z85OIS29A6-tc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/552e68-611d-4ad8-a7e1-48bfac2cdc72/1/Ltf7wd8AcKz1s6Z85OIS29A6-tc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:4f:74:9d:40:8f:e3:82:2c:0d:31:e2:e5:ef:93:44:27:73:
4d:c6:c6:cf:84:c2:b8:8d:fd:0d:45:1c:3b:80:c5:76:8b:14:
60:21:5c:d1:6a:e7:34:4b:f6:02:ba:39:2c:e9:f2:77:83:b2:
a5:63:38:20:0f:b8:cd:7b:e4:fb:26:d9:87:93:c4:ee:7b:5c:
5e:e7:52:02:ab:40:54:22:a4:ca:c1:1e:1b:48:01:ba:7f:59:
fa:ac:14:75:cf:d0:e9:70:1c:f4:57:8a:a9:80:fe:8c:0c:43:
8c:38:82:c4:bf:c9:7d:a0:a3:e0:39:eb:e0:11:91:7b:19:27:
cf:ea:a6:d7:05:10:c0:69:c5:4f:11:73:a5:08:11:71:7b:f0:
32:dd:b6:6e:21:9b:ea:64:91:21:be:17:a2:50:f4:07:2b:67:
ee:e1:56:10:ca:b1:71:f0:f6:ca:a2:94:bd:8e:14:08:76:5c:
74:a7:13:42:23:cd:db:8e:bd:94:1d:97:0f:91:09:20:26:0f:
5c:30:9c:e0:e8:1b:9a:c4:45:61:a9:07:29:66:b3:e8:1a:de:
55:5c:ec:af:a5:39:88:5a:4a:51:6b:3c:53:6a:6d:f0:9e:cd:
97:2d:e8:8c:0a:f4:50:66:90:35:50:c4:aa:d7:c7:65:52:cd:
19:8c:64:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:47:46 2025 by rpki-client