
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/e4c319-7223-4246-b66b-f9d096524c13/1/TEYfg3hoy-rKF670hnhPYfSSQ-0.mft
File: TEYfg3hoy-rKF670hnhPYfSSQ-0.mft (raw, json)
Hash identifier: n4KzWOF/5HjsMYiNIPbvPIVR6jHGAyKmwOlUWuMKJTk=
Subject key identifier: 26:ED:06:CF:B4:87:7B:FD:BB:F4:0D:7C:4A:08:FF:B9:70:B4:F7:8E
Authority key identifier: 4C:46:1F:83:78:68:CB:EA:CA:17:AE:F4:86:78:4F:61:F4:92:43:ED
Certificate issuer: /CN=4c461f837868cbeaca17aef486784f61f49243ed
Certificate serial: 019750B41FFFC3E9B36DE9B8262919B69125
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TEYfg3hoy-rKF670hnhPYfSSQ-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/e4c319-7223-4246-b66b-f9d096524c13/1/TEYfg3hoy-rKF670hnhPYfSSQ-0.mft
Manifest number: 150F
Signing time: Sun 08 Jun 2025 18:01:11 +0000
Manifest this update: Sun 08 Jun 2025 18:01:11 +0000
Manifest next update: Mon 09 Jun 2025 18:01:11 +0000
Files and hashes: 1: TEYfg3hoy-rKF670hnhPYfSSQ-0.crl (hash: Ive2jDudX2Khy6r4nZMe5gO19G5TUqw95nJcc99XEWA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/e4c319-7223-4246-b66b-f9d096524c13/1/TEYfg3hoy-rKF670hnhPYfSSQ-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/e4c319-7223-4246-b66b-f9d096524c13/1/TEYfg3hoy-rKF670hnhPYfSSQ-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/TEYfg3hoy-rKF670hnhPYfSSQ-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 17:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:b4:1f:ff:c3:e9:b3:6d:e9:b8:26:29:19:b6:91:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c461f837868cbeaca17aef486784f61f49243ed
Validity
Not Before: Jun 8 18:01:11 2025 GMT
Not After : Jun 9 18:01:11 2025 GMT
Subject: CN=26ed06cfb4877bfdbbf40d7c4a08ffb970b4f78e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:7c:3d:f8:51:1a:0b:05:40:a5:75:2b:5e:35:
33:0a:09:bb:8e:ac:b2:01:23:a6:41:e6:f9:b4:ff:
d5:21:ee:03:99:12:4b:29:d4:7e:8c:d9:1a:52:57:
e9:85:75:ef:91:e0:42:b1:48:8e:f5:75:7f:c1:b6:
d1:64:fa:c2:08:12:4b:5c:7d:72:c0:f2:29:cc:4c:
bb:3c:3d:a9:25:26:7b:0f:65:c5:18:64:88:d4:88:
db:77:e3:63:e6:73:0f:a9:d7:9c:31:17:35:d1:03:
2d:13:23:78:14:65:da:e0:27:79:81:d2:71:96:ce:
78:f0:43:c9:cc:06:c8:bd:87:ae:f6:ee:f9:64:47:
71:1f:bc:f9:37:f9:48:da:29:01:16:78:a7:71:2a:
d7:d1:51:e9:50:ba:3e:9f:ca:68:d4:5c:06:12:fa:
3e:db:ac:46:4e:01:4d:c7:fc:c2:0d:f5:99:54:db:
dc:74:23:b1:77:ef:35:ec:4f:0b:98:56:5d:22:44:
51:ee:b8:0c:f2:23:f0:b4:95:ad:cc:61:d7:3d:47:
ad:d3:19:3b:88:af:d3:05:fc:f3:b7:ff:30:32:6e:
a7:9f:2e:e7:b6:5f:d8:e9:12:b0:9f:19:aa:b2:c8:
b1:63:6c:89:30:8c:39:f6:75:f3:a0:b7:c4:52:a5:
3a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:ED:06:CF:B4:87:7B:FD:BB:F4:0D:7C:4A:08:FF:B9:70:B4:F7:8E
X509v3 Authority Key Identifier:
keyid:4C:46:1F:83:78:68:CB:EA:CA:17:AE:F4:86:78:4F:61:F4:92:43:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TEYfg3hoy-rKF670hnhPYfSSQ-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/e4c319-7223-4246-b66b-f9d096524c13/1/TEYfg3hoy-rKF670hnhPYfSSQ-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/e4c319-7223-4246-b66b-f9d096524c13/1/TEYfg3hoy-rKF670hnhPYfSSQ-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:ea:68:fb:33:1c:cf:7b:b5:de:9b:13:ae:fa:11:fa:04:99:
8f:62:22:70:8f:a0:d6:c6:6b:00:8e:09:09:65:e8:c0:33:75:
8d:75:56:64:be:45:4f:1f:1d:d3:a1:46:0a:0f:43:cb:e1:ea:
a8:20:f4:84:42:b0:ff:ea:f7:50:74:95:6a:33:ff:5c:9e:5a:
ed:9d:f1:b5:fe:ab:ce:65:bc:5f:14:70:16:35:5a:09:f2:cd:
41:4e:54:0e:5e:fb:d2:ee:86:4c:1b:79:8b:52:cb:82:3a:01:
5b:78:b2:e5:65:14:a6:1e:0d:9a:f5:af:f4:09:e1:d3:9a:f1:
5a:5c:1d:70:02:4c:5e:37:b8:b9:b2:69:cd:64:20:03:b7:dd:
a8:0b:ae:14:d5:ab:86:8b:1b:64:d9:68:63:5a:54:cb:57:4e:
49:91:7b:7e:72:7a:a7:fc:41:8d:8e:da:75:ae:31:54:c5:62:
b5:40:eb:25:ac:09:09:06:58:eb:02:c1:ad:c2:1a:9c:0d:cb:
82:0b:a3:e1:8f:9a:1d:48:54:8a:c5:fa:2a:46:a8:37:8c:83:
15:dc:9b:97:9f:28:c0:4d:0e:87:4c:81:25:c9:ac:56:5d:8f:
c6:0b:02:16:3d:bd:01:16:8a:47:ee:06:60:35:a8:82:ff:69:
4f:32:76:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:29:08 2025 by rpki-client