Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1c2984-fd83-41ba-b1dc-f683b9681d61/1/tU0YlEyigIUFOR3pf6nWsrxhiZo.mft
File: tU0YlEyigIUFOR3pf6nWsrxhiZo.mft (raw, json)
Hash identifier: +j/USw3GEXkoqTP9ynvKEjnPS7ZURxvsKHgjz2mZrUc=
Subject key identifier: B2:38:C0:9F:F6:CA:0E:2A:BA:C9:CF:96:3A:C2:8B:09:72:90:DD:DD
Authority key identifier: B5:4D:18:94:4C:A2:80:85:05:39:1D:E9:7F:A9:D6:B2:BC:61:89:9A
Certificate issuer: /CN=b54d18944ca2808505391de97fa9d6b2bc61899a
Certificate serial: 01974C69614D5B56A414F8E60999F65333D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tU0YlEyigIUFOR3pf6nWsrxhiZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1c2984-fd83-41ba-b1dc-f683b9681d61/1/tU0YlEyigIUFOR3pf6nWsrxhiZo.mft
Manifest number: 101B
Signing time: Sat 07 Jun 2025 22:01:03 +0000
Manifest this update: Sat 07 Jun 2025 22:01:03 +0000
Manifest next update: Sun 08 Jun 2025 22:01:03 +0000
Files and hashes: 1: tU0YlEyigIUFOR3pf6nWsrxhiZo.crl (hash: TXpT50sNgggo0kmi02GL4WDTZZpyL/NB+TrSFKBlQLI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1c2984-fd83-41ba-b1dc-f683b9681d61/1/tU0YlEyigIUFOR3pf6nWsrxhiZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/1c2984-fd83-41ba-b1dc-f683b9681d61/1/tU0YlEyigIUFOR3pf6nWsrxhiZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/tU0YlEyigIUFOR3pf6nWsrxhiZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:69:61:4d:5b:56:a4:14:f8:e6:09:99:f6:53:33:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b54d18944ca2808505391de97fa9d6b2bc61899a
Validity
Not Before: Jun 7 22:01:03 2025 GMT
Not After : Jun 8 22:01:03 2025 GMT
Subject: CN=b238c09ff6ca0e2abac9cf963ac28b097290dddd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6f:a1:a9:54:3e:10:d5:2f:f2:58:8e:9d:b0:
ba:c4:92:65:a5:70:16:05:eb:ad:dc:db:56:cd:17:
b7:91:e5:57:4c:12:92:e8:80:4c:f1:4a:e1:08:0d:
8c:9f:91:70:b6:04:ba:ea:e6:07:f7:18:77:6a:76:
76:02:6d:25:aa:11:a8:51:68:fd:14:1d:ce:92:cc:
f7:fb:87:85:49:72:50:eb:47:e9:1d:26:f9:53:92:
48:19:a1:14:bc:12:d8:ef:6d:bf:f4:28:48:ef:2c:
34:6f:92:ed:9d:32:26:8c:89:ee:ff:ef:5d:f8:5d:
79:c9:85:70:22:07:3d:63:3f:db:3b:59:cc:08:c1:
76:ee:86:a4:a6:68:62:5b:1d:50:e9:83:18:f6:0a:
cb:3d:9a:7e:f8:06:6e:52:52:40:08:4b:a7:13:10:
c9:fe:93:a3:5e:0d:a1:47:f3:5a:86:a2:ce:e8:50:
c1:fa:e7:27:80:14:9e:72:5a:af:29:63:45:78:73:
37:44:ee:67:41:19:4d:4e:de:d8:65:f5:68:db:db:
1c:69:34:a5:95:1f:a3:bf:74:69:6f:bc:9b:a6:59:
8f:8f:7b:93:49:9a:35:9e:f2:0c:b5:25:41:50:36:
d5:c5:cf:f1:48:9c:97:94:d0:70:d3:52:b7:14:a7:
c7:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:38:C0:9F:F6:CA:0E:2A:BA:C9:CF:96:3A:C2:8B:09:72:90:DD:DD
X509v3 Authority Key Identifier:
keyid:B5:4D:18:94:4C:A2:80:85:05:39:1D:E9:7F:A9:D6:B2:BC:61:89:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tU0YlEyigIUFOR3pf6nWsrxhiZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1c2984-fd83-41ba-b1dc-f683b9681d61/1/tU0YlEyigIUFOR3pf6nWsrxhiZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1c2984-fd83-41ba-b1dc-f683b9681d61/1/tU0YlEyigIUFOR3pf6nWsrxhiZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:e0:49:b3:ff:28:80:2e:4d:45:67:bd:dc:0c:e7:96:4f:01:
f8:ef:78:a8:2b:b7:60:d3:1d:07:34:79:67:d8:9e:c2:ed:33:
11:ab:4d:a5:c0:ed:9d:4e:fc:4a:cc:df:7b:99:eb:1e:f1:a9:
e9:8b:e0:7f:c1:dc:70:bb:e3:85:18:5b:0e:de:19:f6:a5:c2:
59:ab:3e:c3:2e:3d:8f:3d:75:f0:37:c1:b3:e2:ca:53:ed:de:
2a:b5:24:00:4e:ee:46:32:b6:48:7d:6f:6b:47:48:2d:39:3a:
fc:a2:6a:c3:86:3d:b0:db:e6:41:12:88:e7:c4:ea:89:a1:93:
80:7c:6f:bc:6a:e4:77:82:c3:46:25:94:18:37:f8:4c:20:31:
99:fb:3a:37:bd:94:8c:f4:3e:bc:dc:b4:ed:41:c9:cd:7e:8f:
79:65:cc:7a:9e:5b:1f:82:c2:4c:d3:e6:35:bd:09:50:b5:9b:
ac:1d:79:f9:ab:60:a1:16:41:ae:7d:a2:9c:11:d2:e6:81:54:
d2:13:9b:cf:d3:b6:35:b3:f6:5a:8f:bd:5d:6f:41:f1:f8:f4:
54:90:4b:2b:ba:1b:c9:09:13:ba:3c:a8:dd:0c:30:01:e0:36:
79:d5:46:a9:ce:fe:51:0c:f0:84:68:69:ac:1a:ac:e3:a3:92:
06:5a:0b:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 05:50:32 2025 by rpki-client