Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/19c93b-c9a1-494b-9bc0-0f2b540eca08/1/tz2I10aK9gGvFMXh7ZA8TzbK9fo.mft
File: tz2I10aK9gGvFMXh7ZA8TzbK9fo.mft (raw, json)
Hash identifier: FJR4+ZijCIhPrXQlr6WR9AVHvpQsccQXc+JSs3i0zRY=
Subject key identifier: 26:F9:24:C9:5A:CC:D9:E9:4F:12:91:26:B7:75:25:88:2F:F7:77:02
Authority key identifier: B7:3D:88:D7:46:8A:F6:01:AF:14:C5:E1:ED:90:3C:4F:36:CA:F5:FA
Certificate issuer: /CN=b73d88d7468af601af14c5e1ed903c4f36caf5fa
Certificate serial: 01974A7AE8C8A842131F50A4874650E0B11C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tz2I10aK9gGvFMXh7ZA8TzbK9fo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/19c93b-c9a1-494b-9bc0-0f2b540eca08/1/tz2I10aK9gGvFMXh7ZA8TzbK9fo.mft
Manifest number: 1579
Signing time: Sat 07 Jun 2025 13:00:58 +0000
Manifest this update: Sat 07 Jun 2025 13:00:58 +0000
Manifest next update: Sun 08 Jun 2025 13:00:58 +0000
Files and hashes: 1: tz2I10aK9gGvFMXh7ZA8TzbK9fo.crl (hash: YMUwemEX4xCEZEkwt5fraOtqxauZWPR2UyLLGDNkOoE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/19c93b-c9a1-494b-9bc0-0f2b540eca08/1/tz2I10aK9gGvFMXh7ZA8TzbK9fo.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/19c93b-c9a1-494b-9bc0-0f2b540eca08/1/tz2I10aK9gGvFMXh7ZA8TzbK9fo.mft
rsync://rpki.ripe.net/repository/DEFAULT/tz2I10aK9gGvFMXh7ZA8TzbK9fo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7a:e8:c8:a8:42:13:1f:50:a4:87:46:50:e0:b1:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b73d88d7468af601af14c5e1ed903c4f36caf5fa
Validity
Not Before: Jun 7 13:00:58 2025 GMT
Not After : Jun 8 13:00:58 2025 GMT
Subject: CN=26f924c95accd9e94f129126b77525882ff77702
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a5:3e:5c:3e:a8:42:1e:13:b1:3b:d5:a8:96:
35:67:ea:72:66:5e:61:aa:92:52:80:99:05:2a:6d:
6f:9b:96:66:fc:38:d9:e7:75:14:ea:7b:1d:d2:f0:
e8:f5:76:c3:b6:2d:3e:23:06:9c:99:79:a1:8f:22:
bb:b8:5b:a1:76:59:4c:3a:b6:35:b8:7b:a8:25:f7:
c8:c2:ec:dc:0b:c9:e5:fc:b5:58:8b:e7:99:b3:2f:
d7:49:4d:13:5b:63:46:47:39:cd:c6:2f:89:e8:93:
27:54:96:c2:98:96:51:81:85:57:2a:4e:eb:54:a6:
ef:a4:e2:6a:18:a7:bc:8c:36:f1:b1:b0:6e:43:42:
d5:28:ab:fe:8e:d2:68:bb:9e:e1:fe:21:a3:e0:69:
d7:b9:12:f2:bb:2e:8c:e7:0d:7e:57:ab:71:f4:de:
4f:8f:18:90:3d:9e:10:10:39:95:03:b4:11:c0:0f:
6a:75:84:e9:80:3e:c3:39:de:49:9c:dc:32:ab:0b:
3d:a4:48:f8:5a:e6:11:c3:3c:db:88:0d:5c:0d:fc:
0d:2a:cf:c5:26:c8:8f:2a:fb:cc:87:c0:c7:f8:80:
10:d8:0a:64:53:d3:19:45:03:aa:96:e0:6f:a0:73:
bb:fc:2d:8a:3b:73:25:e2:a2:7b:d1:1c:55:6f:06:
ad:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:F9:24:C9:5A:CC:D9:E9:4F:12:91:26:B7:75:25:88:2F:F7:77:02
X509v3 Authority Key Identifier:
keyid:B7:3D:88:D7:46:8A:F6:01:AF:14:C5:E1:ED:90:3C:4F:36:CA:F5:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tz2I10aK9gGvFMXh7ZA8TzbK9fo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/19c93b-c9a1-494b-9bc0-0f2b540eca08/1/tz2I10aK9gGvFMXh7ZA8TzbK9fo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/19c93b-c9a1-494b-9bc0-0f2b540eca08/1/tz2I10aK9gGvFMXh7ZA8TzbK9fo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:e2:bd:55:60:00:54:7a:23:4e:4e:09:75:89:86:e7:a7:73:
3b:2c:b8:ef:65:92:e6:99:af:5a:f2:4a:9f:2c:8b:04:b6:86:
a9:6a:27:6b:72:ce:72:35:c7:82:cd:fd:8c:87:8a:81:aa:4e:
a2:f6:cf:d1:d0:39:52:dd:c0:ba:bf:53:41:99:ae:92:cc:60:
1d:05:b7:c5:f8:1e:6c:c6:eb:e0:62:72:1d:e0:05:71:ad:a3:
3c:c5:41:6a:de:3f:4d:5c:64:19:4a:b2:c3:5b:7f:d3:21:6f:
25:1f:66:f4:00:30:90:27:20:66:c5:91:68:aa:a4:16:e4:94:
7f:4d:ba:a2:9a:2d:26:08:87:32:80:cc:c1:e7:b9:58:2f:47:
01:84:81:d0:1e:6f:c3:87:bd:57:86:b8:d2:12:58:b8:b4:05:
fa:38:b1:f1:93:35:71:3e:dd:8e:6b:bb:43:91:af:22:75:39:
de:be:8c:36:77:ee:fc:ed:2b:c3:a8:c9:22:b1:e2:01:dd:4e:
86:37:37:80:98:d3:93:65:d0:7d:75:c1:c1:bf:b1:29:c9:f1:
f5:09:43:90:40:7d:b4:1e:8c:96:c2:c9:07:4c:37:62:67:0b:
c7:b8:80:08:f4:4f:66:7a:cf:df:6c:54:fa:d6:48:eb:66:46:
68:1e:73:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:35:13 2025 by rpki-client