Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/8dd52e-6d5d-4d37-bf0e-720e86525dd2/1/tgLHVGpnwMWYp0_yv1w5IyU079U.mft
File: tgLHVGpnwMWYp0_yv1w5IyU079U.mft (raw, json)
Hash identifier: h8v4h3cjpqOelN3U+yf1Z+JtSnPEprCsTZwzM2wSF8E=
Subject key identifier: 2D:FC:A4:65:5C:8F:5D:2A:D2:53:D1:5C:8D:6E:3B:D5:DD:69:7D:E0
Authority key identifier: B6:02:C7:54:6A:67:C0:C5:98:A7:4F:F2:BF:5C:39:23:25:34:EF:D5
Certificate issuer: /CN=b602c7546a67c0c598a74ff2bf5c39232534efd5
Certificate serial: 0197CC4CFCD1BB06883327157BBE84E09173
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tgLHVGpnwMWYp0_yv1w5IyU079U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/8dd52e-6d5d-4d37-bf0e-720e86525dd2/1/tgLHVGpnwMWYp0_yv1w5IyU079U.mft
Manifest number: 146C
Signing time: Wed 02 Jul 2025 18:01:26 +0000
Manifest this update: Wed 02 Jul 2025 18:01:26 +0000
Manifest next update: Thu 03 Jul 2025 18:01:26 +0000
Files and hashes: 1: tgLHVGpnwMWYp0_yv1w5IyU079U.crl (hash: C+BUaLGpqs4JcPJaWB+83mhCuzT+PbIZWjGIdUzlf5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/8dd52e-6d5d-4d37-bf0e-720e86525dd2/1/tgLHVGpnwMWYp0_yv1w5IyU079U.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/8dd52e-6d5d-4d37-bf0e-720e86525dd2/1/tgLHVGpnwMWYp0_yv1w5IyU079U.mft
rsync://rpki.ripe.net/repository/DEFAULT/tgLHVGpnwMWYp0_yv1w5IyU079U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cc:4c:fc:d1:bb:06:88:33:27:15:7b:be:84:e0:91:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b602c7546a67c0c598a74ff2bf5c39232534efd5
Validity
Not Before: Jul 2 18:01:26 2025 GMT
Not After : Jul 3 18:01:26 2025 GMT
Subject: CN=2dfca4655c8f5d2ad253d15c8d6e3bd5dd697de0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:33:0a:9e:cc:cc:74:1c:c6:fd:d1:11:f0:5d:
ad:2b:82:77:ad:24:6e:bf:da:31:4c:79:f2:9f:90:
40:97:e7:0e:d8:8f:64:5f:dd:09:b5:90:a1:c6:31:
ab:3e:77:fc:24:6d:81:b7:72:9c:32:08:40:de:fc:
cc:43:b7:8a:b1:a8:aa:45:3f:58:e4:49:9b:29:6e:
c6:c0:ae:c2:c1:1f:6f:4e:0e:ae:cc:41:ea:31:31:
9a:d0:95:c4:2b:50:9d:7c:f3:b0:8d:ce:8d:fd:df:
3b:40:73:11:de:85:02:ef:f7:0b:1f:ea:1f:a5:4f:
de:9f:06:5c:44:51:42:60:aa:5f:14:fd:72:d4:c0:
96:91:a3:e5:ba:71:44:bb:0b:ad:d1:08:9a:f4:64:
72:7d:19:40:d1:7f:ff:49:30:1f:fe:ac:bb:2c:21:
12:6b:9b:01:c0:a3:2a:b4:b2:fa:39:1b:6f:c3:cb:
67:d4:ff:b9:9d:06:12:10:3f:1c:39:4f:aa:2b:00:
2c:b6:c2:ae:5d:9a:3c:2a:46:00:a2:79:b7:c9:20:
4c:fd:64:3a:0b:f8:44:df:06:d0:96:99:fe:47:83:
f0:3e:d7:33:13:8f:07:f7:38:23:f5:42:09:66:9b:
2c:5e:db:82:17:df:ca:7e:f9:99:36:e2:dc:64:74:
2d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:FC:A4:65:5C:8F:5D:2A:D2:53:D1:5C:8D:6E:3B:D5:DD:69:7D:E0
X509v3 Authority Key Identifier:
keyid:B6:02:C7:54:6A:67:C0:C5:98:A7:4F:F2:BF:5C:39:23:25:34:EF:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tgLHVGpnwMWYp0_yv1w5IyU079U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8dd52e-6d5d-4d37-bf0e-720e86525dd2/1/tgLHVGpnwMWYp0_yv1w5IyU079U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8dd52e-6d5d-4d37-bf0e-720e86525dd2/1/tgLHVGpnwMWYp0_yv1w5IyU079U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:e9:db:9e:94:28:5f:5f:8d:4f:fa:cd:4e:bc:fe:81:cc:aa:
23:e5:54:ad:52:42:f8:46:74:6c:a4:94:f0:bd:18:54:3c:dd:
90:8c:6e:0f:00:d0:bf:38:cb:05:da:bd:71:bd:75:46:b2:b6:
2d:57:3c:76:70:7f:4b:04:7f:8f:1c:43:fb:76:0e:cd:80:37:
9b:3c:0a:a7:28:1c:a5:29:c7:6c:a9:b9:1b:ce:32:36:13:cf:
b2:9b:0d:84:1f:3a:fa:ea:bb:5c:1c:35:0a:83:6d:94:d2:82:
4f:e7:86:c9:ef:88:65:ed:2a:0d:a9:1a:7e:1b:7a:bc:f5:c8:
19:92:29:e5:e0:9b:cc:53:1f:a6:e5:f5:8b:9b:95:b5:80:62:
f3:db:18:e7:8f:00:4b:a0:40:8f:d9:18:dc:e7:9f:9a:6e:25:
73:22:f9:c2:f7:f4:1f:a8:b6:0e:fc:e3:5c:e7:26:bc:e1:39:
c1:bc:11:38:16:ba:62:c1:8e:9d:13:b7:30:4c:29:20:3c:8b:
42:7c:19:04:0e:76:0e:1e:45:fe:11:76:05:02:70:52:1a:f2:
d2:6f:8e:1f:2d:1e:f5:e5:77:89:46:30:9c:1f:05:69:3d:72:
74:78:d1:e3:a6:82:56:8a:85:ad:f0:a6:d2:63:74:ac:f5:c0:
ae:94:49:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 19:56:18 2025 by rpki-client