Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/651421-3300-4886-bbe5-84abcfbcdf5e/1/tKbCB0KCIvY_ycuoOdDb2aaVCzE.mft
File: tKbCB0KCIvY_ycuoOdDb2aaVCzE.mft (raw, json)
Hash identifier: M9az0AnQ4pC9Mjg2Gxwo3tuDMUXU0kXhbjfAf2J/WtE=
Subject key identifier: 4A:12:43:E0:1F:C7:A1:E7:B4:86:3A:F7:0C:C3:6C:44:86:32:70:3E
Authority key identifier: B4:A6:C2:07:42:82:22:F6:3F:C9:CB:A8:39:D0:DB:D9:A6:95:0B:31
Certificate issuer: /CN=b4a6c207428222f63fc9cba839d0dbd9a6950b31
Certificate serial: 019755D9DCEEE0EEDADB7A7AB8997B75E85A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tKbCB0KCIvY_ycuoOdDb2aaVCzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/651421-3300-4886-bbe5-84abcfbcdf5e/1/tKbCB0KCIvY_ycuoOdDb2aaVCzE.mft
Manifest number: 37
Signing time: Mon 09 Jun 2025 18:00:30 +0000
Manifest this update: Mon 09 Jun 2025 18:00:30 +0000
Manifest next update: Tue 10 Jun 2025 18:00:30 +0000
Files and hashes: 1: tKbCB0KCIvY_ycuoOdDb2aaVCzE.crl (hash: eqzjrBAi830+bB3NYjmcFxbqF8d1SZtCPGOKw+21T50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/651421-3300-4886-bbe5-84abcfbcdf5e/1/tKbCB0KCIvY_ycuoOdDb2aaVCzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/651421-3300-4886-bbe5-84abcfbcdf5e/1/tKbCB0KCIvY_ycuoOdDb2aaVCzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/tKbCB0KCIvY_ycuoOdDb2aaVCzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:55:d9:dc:ee:e0:ee:da:db:7a:7a:b8:99:7b:75:e8:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4a6c207428222f63fc9cba839d0dbd9a6950b31
Validity
Not Before: Jun 9 18:00:30 2025 GMT
Not After : Jun 10 18:00:30 2025 GMT
Subject: CN=4a1243e01fc7a1e7b4863af70cc36c448632703e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:59:3c:a3:a8:e7:d0:84:2f:73:65:9e:87:a5:
e5:c7:73:b2:15:66:66:d9:34:23:65:20:0f:48:60:
57:50:39:4c:cb:f5:4a:6d:6b:6d:01:7f:9a:b0:3d:
e9:ff:1c:17:ff:0c:9c:39:eb:6d:61:7d:39:36:a4:
c8:f8:09:d6:8e:65:87:90:b1:4e:0d:64:fc:0e:76:
ab:21:3b:a3:f8:6c:46:5f:50:91:9c:e3:c6:bf:a7:
46:00:3d:5a:5f:0f:5b:5f:d1:3c:c5:0a:b0:c4:59:
1a:e4:47:8d:81:43:92:23:67:68:7d:07:7c:15:51:
3c:1a:62:0c:c0:70:25:5a:68:ff:ff:6d:15:dc:36:
b3:ea:e3:bf:a6:52:92:2d:0c:75:05:3f:51:6c:42:
01:01:18:e3:d0:40:ab:fc:91:a7:0b:6b:01:5d:63:
e0:4a:be:be:92:c3:aa:b4:17:9a:56:3d:c7:1e:43:
0f:e7:cd:ef:f7:57:7f:ad:ae:31:11:92:3a:32:89:
9f:4a:99:e2:c1:d7:79:d7:12:83:e9:79:e9:d5:14:
e8:f1:cf:85:92:2d:12:79:87:e6:aa:08:e3:23:34:
7c:33:6d:2f:d1:f9:d3:2f:c9:e8:df:6d:1e:e0:7e:
57:e0:ac:8d:a3:40:2f:6b:6b:0d:78:44:e7:84:20:
d0:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:12:43:E0:1F:C7:A1:E7:B4:86:3A:F7:0C:C3:6C:44:86:32:70:3E
X509v3 Authority Key Identifier:
keyid:B4:A6:C2:07:42:82:22:F6:3F:C9:CB:A8:39:D0:DB:D9:A6:95:0B:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tKbCB0KCIvY_ycuoOdDb2aaVCzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/651421-3300-4886-bbe5-84abcfbcdf5e/1/tKbCB0KCIvY_ycuoOdDb2aaVCzE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/651421-3300-4886-bbe5-84abcfbcdf5e/1/tKbCB0KCIvY_ycuoOdDb2aaVCzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:45:c8:7f:42:d5:2a:b6:5d:58:fe:4b:f8:7f:1f:a9:3e:29:
bc:91:aa:d9:07:27:f2:48:95:3a:bf:7b:88:66:c7:aa:90:c4:
c1:5b:f6:06:2d:c4:27:bb:c6:d2:cd:3e:9c:1e:75:12:30:31:
34:51:70:10:85:0a:a7:aa:95:56:25:72:7d:ad:29:71:68:72:
e6:38:0c:89:3e:c8:fa:f7:c2:1f:7d:ea:d9:74:65:ac:6f:50:
c3:5e:66:02:30:b9:b7:89:a0:ce:4f:63:03:3f:6b:b0:42:e0:
96:f9:62:6f:6e:41:28:56:2f:8b:55:7c:a4:e8:a8:71:17:a5:
3f:88:47:07:70:50:e4:9b:d8:62:92:ae:f2:c3:36:d7:5b:e3:
40:21:8a:d0:b9:88:53:63:fc:af:27:54:b4:bd:bd:14:63:4d:
2f:ed:05:e6:6e:b8:f7:b5:2d:68:96:4e:f8:ab:2f:10:2a:91:
e6:4d:d2:70:2b:75:d1:2b:10:f7:53:d4:db:8d:89:af:2a:3a:
f4:cd:cf:1f:c9:7b:bb:53:00:e6:d9:6e:df:50:5d:64:d3:09:
63:0c:6d:04:12:27:77:0d:a6:be:a0:66:30:a7:84:64:df:d2:
30:0f:2e:ad:10:ec:93:eb:79:4d:a3:00:7f:bb:e6:72:3c:98:
7e:56:29:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 22:59:17 2025 by rpki-client