Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/677106-4099-4aef-8cc6-e960a50cdc81/1/tPo4W-BSv6QF36zSnyarbwAeYEc.mft
File: tPo4W-BSv6QF36zSnyarbwAeYEc.mft (raw, json)
Hash identifier: gwLqC27rhvo0cAsmcGodvo8sHZaJx/3U248opXkBHrk=
Subject key identifier: 11:36:6E:4B:D3:65:E4:1D:54:AC:EA:0D:7C:64:F2:D9:09:4B:8D:26
Authority key identifier: B4:FA:38:5B:E0:52:BF:A4:05:DF:AC:D2:9F:26:AB:6F:00:1E:60:47
Certificate issuer: /CN=b4fa385be052bfa405dfacd29f26ab6f001e6047
Certificate serial: 01975CEE7D40B000BB4C56B786DC2162F99E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPo4W-BSv6QF36zSnyarbwAeYEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/677106-4099-4aef-8cc6-e960a50cdc81/1/tPo4W-BSv6QF36zSnyarbwAeYEc.mft
Manifest number: 0400
Signing time: Wed 11 Jun 2025 03:00:22 +0000
Manifest this update: Wed 11 Jun 2025 03:00:22 +0000
Manifest next update: Thu 12 Jun 2025 03:00:22 +0000
Files and hashes: 1: tPo4W-BSv6QF36zSnyarbwAeYEc.crl (hash: /Fa+D1aCuPzx0DHI3ekfFUWYV1WfOEqMCLWORc+qoWs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/677106-4099-4aef-8cc6-e960a50cdc81/1/tPo4W-BSv6QF36zSnyarbwAeYEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/677106-4099-4aef-8cc6-e960a50cdc81/1/tPo4W-BSv6QF36zSnyarbwAeYEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/tPo4W-BSv6QF36zSnyarbwAeYEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 03:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5c:ee:7d:40:b0:00:bb:4c:56:b7:86:dc:21:62:f9:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4fa385be052bfa405dfacd29f26ab6f001e6047
Validity
Not Before: Jun 11 03:00:22 2025 GMT
Not After : Jun 12 03:00:22 2025 GMT
Subject: CN=11366e4bd365e41d54acea0d7c64f2d9094b8d26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:30:e1:3a:69:d3:22:92:5f:b9:c2:f4:a6:80:
48:94:9c:05:55:2e:78:4f:36:f2:a0:7f:b6:bd:b4:
c3:32:87:4d:90:99:df:cb:7c:83:3c:7b:81:f3:c6:
fc:a3:20:17:9d:ec:44:e6:be:0e:63:46:b8:88:41:
4c:f8:93:af:b0:65:3c:20:f8:ce:d3:e7:15:6c:99:
10:37:b1:f8:94:3a:d5:2f:d9:b1:23:6d:04:0e:0d:
d0:a9:e5:66:04:e2:a7:28:de:92:a0:80:a2:d9:33:
fd:7f:d2:e5:38:5e:d5:09:e9:0d:3c:db:b7:f6:de:
fa:be:5f:58:59:38:63:2a:a2:54:c2:f9:4e:5f:b7:
32:a7:79:32:68:39:25:03:f5:e4:d0:35:81:f2:b4:
26:89:c5:2b:86:6d:2b:9a:b3:5d:e5:4d:a9:9d:d9:
ea:f2:d7:a9:21:d8:61:e8:32:02:f1:a9:ed:e7:ea:
9a:49:86:f1:5b:55:27:65:fb:74:27:ad:f5:b5:14:
93:df:db:ed:f4:ea:57:cb:43:f8:c7:1f:e4:0e:de:
4c:6f:3c:69:b3:74:b3:6d:2c:2a:f6:c2:f8:9d:74:
28:26:ea:f5:9e:8d:35:cb:e2:a6:98:da:19:e1:cc:
81:c0:ed:e1:11:5e:61:fd:7e:db:9e:1e:42:a0:c8:
0d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:36:6E:4B:D3:65:E4:1D:54:AC:EA:0D:7C:64:F2:D9:09:4B:8D:26
X509v3 Authority Key Identifier:
keyid:B4:FA:38:5B:E0:52:BF:A4:05:DF:AC:D2:9F:26:AB:6F:00:1E:60:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPo4W-BSv6QF36zSnyarbwAeYEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/677106-4099-4aef-8cc6-e960a50cdc81/1/tPo4W-BSv6QF36zSnyarbwAeYEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/677106-4099-4aef-8cc6-e960a50cdc81/1/tPo4W-BSv6QF36zSnyarbwAeYEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:96:90:38:7a:3d:3b:93:63:9c:8e:a9:b3:1a:e9:59:7d:0f:
3d:ba:13:e1:ea:f0:f8:84:94:ea:7c:cd:85:d9:55:58:ba:39:
8e:f0:a6:5e:71:8a:5d:2c:1d:9c:4f:96:ae:1b:de:75:19:5d:
62:13:6d:b6:96:49:00:67:08:3a:8d:12:d0:48:aa:7f:9c:96:
5f:a6:49:65:23:d2:ec:46:5d:3c:e8:38:53:6e:7e:27:a1:11:
71:3d:df:1b:e8:da:21:37:cd:b0:78:67:82:fb:f7:29:6b:bc:
94:d4:82:b6:04:80:0b:9b:5d:8b:ce:52:7f:36:0e:36:78:cf:
0e:67:ff:27:ca:11:57:7b:e4:78:54:f0:b6:32:0b:54:15:00:
36:48:d5:bd:b7:0a:67:0d:b6:41:4d:12:ea:9a:29:33:16:84:
bc:9a:3a:60:8f:51:61:10:9c:e9:46:17:21:6c:75:de:60:23:
f8:ee:69:64:97:aa:75:0a:2f:ac:ae:32:06:90:56:8d:2b:9b:
9e:91:ed:96:12:20:7f:ff:54:dd:64:ff:a5:69:c8:a7:f6:71:
eb:d5:f9:82:07:23:fc:f9:8c:93:45:9e:6f:01:67:28:64:ac:
cf:c3:80:35:c3:2d:1f:a8:94:53:4f:53:30:81:be:53:92:4c:
35:ec:07:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 13:23:16 2025 by rpki-client