Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/6f40dd-4c07-405b-a042-f9250dd79fe9/1/TNcQtlNz4NkQ2nBjb8FDwGul3aw.mft
File: TNcQtlNz4NkQ2nBjb8FDwGul3aw.mft (raw, json)
Hash identifier: JOOswGMFG5NoQYWU0SU0h8slfFOT3lIb0vQS54R1pfc=
Subject key identifier: 6C:AC:33:CA:4F:0E:F2:6D:98:FF:16:56:8D:A0:F9:88:97:1A:9F:0A
Authority key identifier: 4C:D7:10:B6:53:73:E0:D9:10:DA:70:63:6F:C1:43:C0:6B:A5:DD:AC
Certificate issuer: /CN=4cd710b65373e0d910da70636fc143c06ba5ddac
Certificate serial: 019748FA42EEF38712D0378C691171E1DFF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TNcQtlNz4NkQ2nBjb8FDwGul3aw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/6f40dd-4c07-405b-a042-f9250dd79fe9/1/TNcQtlNz4NkQ2nBjb8FDwGul3aw.mft
Manifest number: 14D2
Signing time: Sat 07 Jun 2025 06:00:50 +0000
Manifest this update: Sat 07 Jun 2025 06:00:50 +0000
Manifest next update: Sun 08 Jun 2025 06:00:50 +0000
Files and hashes: 1: TNcQtlNz4NkQ2nBjb8FDwGul3aw.crl (hash: 0YMNpjbGAv/yeQa7hV4tp76GG4tgNOkpQL8LCKtlKMA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/6f40dd-4c07-405b-a042-f9250dd79fe9/1/TNcQtlNz4NkQ2nBjb8FDwGul3aw.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/6f40dd-4c07-405b-a042-f9250dd79fe9/1/TNcQtlNz4NkQ2nBjb8FDwGul3aw.mft
rsync://rpki.ripe.net/repository/DEFAULT/TNcQtlNz4NkQ2nBjb8FDwGul3aw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:42:ee:f3:87:12:d0:37:8c:69:11:71:e1:df:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cd710b65373e0d910da70636fc143c06ba5ddac
Validity
Not Before: Jun 7 06:00:50 2025 GMT
Not After : Jun 8 06:00:50 2025 GMT
Subject: CN=6cac33ca4f0ef26d98ff16568da0f988971a9f0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:14:27:6f:f7:e3:ca:61:de:cd:8b:3d:23:fc:
66:9e:5a:b0:fb:dc:bb:8e:b0:4e:83:03:94:5a:19:
d2:19:5d:0a:0a:58:4b:9d:6b:08:d1:35:00:35:ee:
24:f9:8a:b3:16:ff:eb:80:a5:fb:ec:32:63:46:a4:
54:40:ce:00:eb:d8:c7:6c:ae:4d:f0:8e:58:99:78:
4f:a1:d1:a3:a4:8c:24:ec:6d:d7:95:1a:8c:f8:b9:
c8:4f:04:4c:4d:7f:55:79:59:d7:1e:02:dd:3c:d7:
6d:7e:b6:68:b8:7d:e0:2a:52:1c:f3:2f:38:76:8f:
61:50:e8:08:96:5f:90:73:fd:e4:22:2a:66:5d:2f:
c5:e5:a8:e6:55:cf:2c:9b:26:e3:db:a3:34:27:d1:
86:d1:af:a8:47:ee:b4:fd:7e:62:88:9e:d2:ae:1e:
f1:bc:d1:43:21:22:31:16:e6:4b:6f:fb:99:be:4f:
a7:b1:96:09:e1:9c:cc:33:f2:77:90:31:02:77:cf:
a5:b5:86:06:db:ef:f0:fe:a2:1d:d7:1e:fa:31:fd:
ce:f4:f7:a0:f2:4f:b7:65:cc:63:5e:8c:47:51:40:
10:0b:19:79:b9:9d:84:1a:2d:ce:22:ea:c1:d5:3b:
23:0d:1e:ed:e2:f0:5e:e1:02:eb:03:3c:e4:84:ce:
a0:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:AC:33:CA:4F:0E:F2:6D:98:FF:16:56:8D:A0:F9:88:97:1A:9F:0A
X509v3 Authority Key Identifier:
keyid:4C:D7:10:B6:53:73:E0:D9:10:DA:70:63:6F:C1:43:C0:6B:A5:DD:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TNcQtlNz4NkQ2nBjb8FDwGul3aw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6f40dd-4c07-405b-a042-f9250dd79fe9/1/TNcQtlNz4NkQ2nBjb8FDwGul3aw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6f40dd-4c07-405b-a042-f9250dd79fe9/1/TNcQtlNz4NkQ2nBjb8FDwGul3aw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:de:3d:a1:ae:5f:64:e7:4b:b3:2f:1d:7f:3c:9d:fc:82:82:
48:a2:40:e3:20:c7:d8:96:65:c7:51:3f:3c:82:0f:95:8a:46:
8c:8e:a6:b7:af:6d:85:00:da:95:c7:c5:be:ce:6d:a0:dc:06:
c9:3f:61:67:5f:4a:73:33:d8:65:11:31:ba:86:4f:e2:8d:1d:
a2:9b:b7:6b:4b:62:7c:47:ae:1f:45:ec:48:75:0f:d0:56:95:
88:a5:43:33:84:87:ab:09:65:40:89:3a:40:39:af:38:51:4d:
cf:9d:55:34:0f:e0:f5:d0:5d:59:ce:8c:a7:f6:af:03:e4:35:
84:76:d6:98:f1:86:6d:de:81:9b:6f:2a:91:09:10:6e:9d:f2:
ae:fb:f2:76:2d:cf:3a:9c:90:69:03:d1:15:fb:c2:4b:f8:0b:
e9:be:ea:7b:c8:8f:59:52:75:0a:39:0b:6a:26:f5:44:99:6a:
ba:a0:e8:f9:4b:cf:9a:e5:c7:01:5c:ec:86:d6:4f:c2:b0:ec:
34:42:84:b2:16:86:94:0c:b1:9a:4b:19:4e:a8:ed:14:fa:b5:
8d:d6:a5:7d:5e:98:2b:5d:ad:a6:10:f8:01:48:16:4d:d2:b5:
c3:dc:15:a1:ea:3c:29:5e:fe:23:b6:1e:67:b9:03:1f:ba:ca:
74:3e:79:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:50:33 2025 by rpki-client