Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/a5a740-2bce-4338-99d7-782310e6662d/1/tRu6i9P6566CScnEYWi6kAI9sZQ.mft
File: tRu6i9P6566CScnEYWi6kAI9sZQ.mft (raw, json)
Hash identifier: PciWdfB7pLgOXffN8RIWxXuYjhWm1GtKhRul+yqsFHI=
Subject key identifier: 0B:2A:21:C3:CF:77:75:4B:AA:83:08:79:F9:37:2E:56:56:4A:11:E4
Authority key identifier: B5:1B:BA:8B:D3:FA:E7:AE:82:49:C9:C4:61:68:BA:90:02:3D:B1:94
Certificate issuer: /CN=b51bba8bd3fae7ae8249c9c46168ba90023db194
Certificate serial: 01976BBD5537B34E52C9FC73EE3B9219BA92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tRu6i9P6566CScnEYWi6kAI9sZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/a5a740-2bce-4338-99d7-782310e6662d/1/tRu6i9P6566CScnEYWi6kAI9sZQ.mft
Manifest number: 1589
Signing time: Sat 14 Jun 2025 00:00:59 +0000
Manifest this update: Sat 14 Jun 2025 00:00:59 +0000
Manifest next update: Sun 15 Jun 2025 00:00:59 +0000
Files and hashes: 1: tRu6i9P6566CScnEYWi6kAI9sZQ.crl (hash: ilDozfu9ik1S3LPW+IJs5/5kazFWFmMvNnCCaLVaH5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/a5a740-2bce-4338-99d7-782310e6662d/1/tRu6i9P6566CScnEYWi6kAI9sZQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/a5a740-2bce-4338-99d7-782310e6662d/1/tRu6i9P6566CScnEYWi6kAI9sZQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/tRu6i9P6566CScnEYWi6kAI9sZQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 00:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:bd:55:37:b3:4e:52:c9:fc:73:ee:3b:92:19:ba:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b51bba8bd3fae7ae8249c9c46168ba90023db194
Validity
Not Before: Jun 14 00:00:59 2025 GMT
Not After : Jun 15 00:00:59 2025 GMT
Subject: CN=0b2a21c3cf77754baa830879f9372e56564a11e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:cd:09:3b:96:44:de:ae:10:90:1a:ab:c2:cb:
99:4a:00:41:a0:6a:66:a3:45:31:f3:8c:4b:6d:eb:
2b:3d:63:71:b1:f6:ba:81:4c:df:bc:83:15:63:a5:
54:2e:ba:74:3f:7e:41:16:3e:6f:92:a1:e2:24:77:
20:a8:11:60:9d:f0:db:f6:ab:f3:f0:2d:ec:e7:9b:
2a:bd:0d:6f:cc:d6:26:08:b6:26:3d:4a:f3:de:f1:
f0:ce:5c:bc:4f:dc:ac:c0:19:1e:69:d1:29:af:8c:
1b:8a:67:16:8e:34:6e:29:8e:29:79:dd:c7:c7:fd:
8c:22:a9:10:25:4b:74:bb:58:86:16:cc:e9:41:83:
74:01:cc:33:4d:4d:17:ef:36:e8:24:0d:50:c0:e7:
ae:ad:f3:5e:de:cf:95:6c:18:9e:e7:84:20:1e:e8:
0b:56:c8:37:f9:7d:83:fd:6a:33:ca:13:48:1b:f0:
78:bf:43:92:81:ea:0e:3c:5c:e4:c7:d5:7d:12:d8:
59:6e:ef:51:b7:36:41:f8:83:78:21:30:c3:da:49:
b0:0f:38:75:fc:16:fe:c2:b4:2d:74:ae:ba:5e:29:
3d:c4:89:b1:65:a7:d0:82:81:13:4b:54:90:dc:3e:
bf:10:dc:a3:40:42:42:20:30:1f:13:82:a2:95:f5:
bd:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:2A:21:C3:CF:77:75:4B:AA:83:08:79:F9:37:2E:56:56:4A:11:E4
X509v3 Authority Key Identifier:
keyid:B5:1B:BA:8B:D3:FA:E7:AE:82:49:C9:C4:61:68:BA:90:02:3D:B1:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tRu6i9P6566CScnEYWi6kAI9sZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/a5a740-2bce-4338-99d7-782310e6662d/1/tRu6i9P6566CScnEYWi6kAI9sZQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/a5a740-2bce-4338-99d7-782310e6662d/1/tRu6i9P6566CScnEYWi6kAI9sZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:f1:9b:79:c1:fb:86:00:91:a2:fe:b3:37:7d:f4:8f:08:d5:
32:46:de:db:47:bc:fc:b0:66:55:4b:36:67:f2:99:ab:22:ca:
f1:0e:4c:27:34:0a:86:e0:0f:15:ef:88:36:75:65:f6:0a:5c:
15:3f:58:c1:5e:cf:74:a2:e8:ca:ef:ba:47:38:5f:b9:ce:da:
28:ed:e8:35:e3:e5:12:19:af:5e:5b:7b:f6:63:33:6e:78:24:
6f:51:8f:e8:68:b6:69:0d:ce:ed:15:be:0c:be:de:62:55:5f:
bf:83:bb:e6:ca:5a:2b:0d:65:74:e6:b4:fe:0e:ab:f3:91:ec:
f6:50:ea:a8:2a:5b:90:65:46:93:85:05:65:1a:61:b0:ae:5a:
8c:19:c5:1a:18:e4:3b:4f:3d:56:0c:86:51:59:41:0c:8f:6b:
2a:fb:c6:d3:74:40:a5:a7:8d:11:0e:f7:ea:8c:09:54:2f:39:
0d:44:62:18:4e:c5:8e:22:dd:14:08:2b:bf:c9:87:b5:40:d5:
12:66:ea:6e:1d:34:70:2a:af:3b:e6:6b:f7:f9:f6:84:1a:92:
ce:ca:4b:1e:c9:b5:07:4b:1f:c6:5c:72:57:e5:cc:aa:8d:0b:
4b:f6:16:76:ce:e9:d8:58:63:c0:38:c2:2a:af:76:17:15:1b:
82:9b:7e:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 06:35:25 2025 by rpki-client