Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/e79d38-a8ea-47c2-95dc-d194a7b05dda/1/TM6YuMJCaF3bYPTiEJwr01GmQn8.mft
File: TM6YuMJCaF3bYPTiEJwr01GmQn8.mft (raw, json)
Hash identifier: uJt4aRLOim20M+Zwgg8cOCxE7297cAdFQzOEVK2wFDM=
Subject key identifier: 85:83:B5:C0:3E:A0:ED:A3:7A:A8:EA:5F:21:8F:49:CF:28:3B:26:8A
Authority key identifier: 4C:CE:98:B8:C2:42:68:5D:DB:60:F4:E2:10:9C:2B:D3:51:A6:42:7F
Certificate issuer: /CN=4cce98b8c242685ddb60f4e2109c2bd351a6427f
Certificate serial: 01974E5803875B5E899F0AC4FC93458EC5A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TM6YuMJCaF3bYPTiEJwr01GmQn8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/e79d38-a8ea-47c2-95dc-d194a7b05dda/1/TM6YuMJCaF3bYPTiEJwr01GmQn8.mft
Manifest number: 157D
Signing time: Sun 08 Jun 2025 07:01:20 +0000
Manifest this update: Sun 08 Jun 2025 07:01:20 +0000
Manifest next update: Mon 09 Jun 2025 07:01:20 +0000
Files and hashes: 1: TM6YuMJCaF3bYPTiEJwr01GmQn8.crl (hash: YbAy2UNG/Mj7t/A79WVtlJekZDRTdZYWg+ILAXRvAIk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/e79d38-a8ea-47c2-95dc-d194a7b05dda/1/TM6YuMJCaF3bYPTiEJwr01GmQn8.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/e79d38-a8ea-47c2-95dc-d194a7b05dda/1/TM6YuMJCaF3bYPTiEJwr01GmQn8.mft
rsync://rpki.ripe.net/repository/DEFAULT/TM6YuMJCaF3bYPTiEJwr01GmQn8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:58:03:87:5b:5e:89:9f:0a:c4:fc:93:45:8e:c5:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cce98b8c242685ddb60f4e2109c2bd351a6427f
Validity
Not Before: Jun 8 07:01:20 2025 GMT
Not After : Jun 9 07:01:20 2025 GMT
Subject: CN=8583b5c03ea0eda37aa8ea5f218f49cf283b268a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d0:14:ef:53:1f:cd:00:f9:40:10:86:24:d3:
f1:aa:c9:7b:27:7f:4c:52:85:0a:7a:ea:af:9d:08:
49:53:b8:9b:46:eb:14:c4:f1:67:3b:c5:e6:9c:04:
70:11:21:48:0d:17:d8:05:61:00:fb:10:35:93:aa:
28:69:fd:e3:05:2d:a1:92:1b:19:d6:c6:5e:3b:7a:
69:ba:e2:d3:0d:4c:58:3e:d8:1e:40:bc:9a:3f:61:
11:6d:4f:38:a7:59:59:48:2c:59:00:4e:8d:8a:15:
94:70:67:07:81:7d:48:a3:23:dc:35:f5:41:c4:47:
ce:09:0d:3a:b8:31:c9:93:06:d1:f1:3e:ec:45:47:
90:15:3b:a0:d6:46:0a:7d:5d:e8:31:5b:e1:e9:61:
70:02:ad:80:8f:18:69:20:1c:42:72:b3:a4:a4:66:
74:03:68:b5:f9:06:e6:e5:fb:0f:8d:9f:fd:48:b4:
c7:04:64:16:a3:3e:8f:07:ae:3e:8d:44:34:eb:04:
28:25:bf:14:82:5b:e4:b0:97:b6:a9:c9:af:45:86:
31:c8:61:02:87:5b:e0:dc:2b:9d:3e:f0:0a:6b:56:
f1:97:02:e2:f2:a8:9c:cc:81:33:82:c7:ec:ee:56:
45:e2:7b:75:81:2a:dd:b7:ad:15:81:e2:2a:ad:ce:
b9:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:83:B5:C0:3E:A0:ED:A3:7A:A8:EA:5F:21:8F:49:CF:28:3B:26:8A
X509v3 Authority Key Identifier:
keyid:4C:CE:98:B8:C2:42:68:5D:DB:60:F4:E2:10:9C:2B:D3:51:A6:42:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TM6YuMJCaF3bYPTiEJwr01GmQn8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e79d38-a8ea-47c2-95dc-d194a7b05dda/1/TM6YuMJCaF3bYPTiEJwr01GmQn8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e79d38-a8ea-47c2-95dc-d194a7b05dda/1/TM6YuMJCaF3bYPTiEJwr01GmQn8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:9e:9b:65:fe:8d:d8:d9:a6:e7:c6:77:74:66:a8:0c:b5:15:
07:39:97:02:01:db:be:60:8b:79:23:29:66:ab:8b:19:e7:f1:
f7:6b:0a:fa:b4:4e:a8:ae:90:ec:a2:dd:fd:87:e7:e5:28:d1:
a9:f9:7b:65:8a:8d:1a:cd:4c:a4:4e:a3:f8:d7:94:23:a2:01:
6b:3f:bb:00:c1:90:0b:7d:13:22:ba:d4:3f:25:7e:8f:f3:82:
c7:fc:07:cf:0f:37:f4:cd:f3:3b:d5:39:4b:c0:1a:ef:11:64:
34:48:85:11:73:34:32:f8:06:db:3f:49:50:05:13:be:0b:3b:
d5:c8:e6:2f:53:d8:0d:16:d3:ed:a4:d8:95:e8:b5:96:10:55:
26:22:0b:eb:a7:31:90:72:2d:c9:85:28:a8:bf:f5:66:fb:e1:
8c:6f:c3:d6:70:85:09:cf:6b:02:1d:1d:20:36:4d:86:cc:06:
05:50:a5:33:6e:f5:be:f2:9e:76:f3:bd:ce:79:fd:21:4a:01:
ee:fe:97:e3:ff:7f:f2:8c:b0:08:95:28:f2:ff:c0:7a:cf:6c:
80:39:f6:57:1a:48:24:80:b2:51:78:37:86:5f:b9:61:f7:8b:
00:9c:36:10:f3:8e:18:78:d6:5a:82:33:4e:d8:2b:62:9a:0b:
fe:0b:95:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:31:26 2025 by rpki-client