Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/651421-3300-4886-bbe5-84abcfbcdf5e/1/tKbCB0KCIvY_ycuoOdDb2aaVCzE.mft
File: tKbCB0KCIvY_ycuoOdDb2aaVCzE.mft (raw, json)
Hash identifier: zegdjRdLBNDjQWNmVEI/BAsOOXxmLltyV8YF3jlSu+Q=
Subject key identifier: 85:C8:3A:DE:9A:19:78:C4:A4:AC:9F:F0:FA:86:28:F8:3C:A4:01:EB
Authority key identifier: B4:A6:C2:07:42:82:22:F6:3F:C9:CB:A8:39:D0:DB:D9:A6:95:0B:31
Certificate issuer: /CN=b4a6c207428222f63fc9cba839d0dbd9a6950b31
Certificate serial: 0197654CDE77FB74CAD734CA4BFF47C0FDF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tKbCB0KCIvY_ycuoOdDb2aaVCzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/651421-3300-4886-bbe5-84abcfbcdf5e/1/tKbCB0KCIvY_ycuoOdDb2aaVCzE.mft
Manifest number: 3F
Signing time: Thu 12 Jun 2025 18:00:25 +0000
Manifest this update: Thu 12 Jun 2025 18:00:25 +0000
Manifest next update: Fri 13 Jun 2025 18:00:25 +0000
Files and hashes: 1: tKbCB0KCIvY_ycuoOdDb2aaVCzE.crl (hash: iVJcKzzU8gUEP7ie3xge5eyLR4sWe35ivzhVHnEs59g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/651421-3300-4886-bbe5-84abcfbcdf5e/1/tKbCB0KCIvY_ycuoOdDb2aaVCzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/651421-3300-4886-bbe5-84abcfbcdf5e/1/tKbCB0KCIvY_ycuoOdDb2aaVCzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/tKbCB0KCIvY_ycuoOdDb2aaVCzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:65:4c:de:77:fb:74:ca:d7:34:ca:4b:ff:47:c0:fd:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4a6c207428222f63fc9cba839d0dbd9a6950b31
Validity
Not Before: Jun 12 18:00:25 2025 GMT
Not After : Jun 13 18:00:25 2025 GMT
Subject: CN=85c83ade9a1978c4a4ac9ff0fa8628f83ca401eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:db:e6:66:4f:69:ac:e7:ad:57:e5:39:02:94:
ae:9f:39:63:16:fc:22:e9:21:0c:fa:6b:c3:06:93:
91:1d:2c:22:ce:59:40:7d:9e:aa:d8:2e:34:2c:da:
2e:c1:73:6b:32:fc:38:92:f7:c9:90:6d:4a:bc:d4:
40:45:1e:76:53:6f:5a:f6:4d:37:19:d7:44:de:10:
fd:90:c2:69:2d:ff:14:5e:ee:7c:bf:d1:07:bb:a0:
0e:33:f4:15:bc:bd:db:d1:36:56:8a:d2:57:07:a6:
12:4f:51:ab:66:05:20:54:6d:32:89:66:36:21:01:
50:3f:6c:b7:d6:90:ef:cd:73:a8:d3:57:8a:73:bf:
59:cb:0d:09:bb:f0:fe:e2:2d:83:90:62:85:55:15:
ca:2f:d2:ea:eb:5d:87:80:8a:3c:03:01:50:17:11:
ce:e3:25:77:9b:45:fe:85:07:a3:fc:05:99:19:5b:
d1:74:7a:c1:7d:07:a3:59:78:56:9f:1e:70:24:ad:
32:6a:e4:75:de:be:22:ce:6b:d6:4d:8c:c3:8f:bb:
d9:bf:65:e3:c2:67:a6:24:f9:2f:7f:48:d9:45:59:
a7:ff:06:54:f2:f7:9d:9d:e8:09:fb:af:83:fa:7b:
70:3f:53:15:63:aa:bb:64:c4:af:47:7b:6d:b6:4f:
fc:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:C8:3A:DE:9A:19:78:C4:A4:AC:9F:F0:FA:86:28:F8:3C:A4:01:EB
X509v3 Authority Key Identifier:
keyid:B4:A6:C2:07:42:82:22:F6:3F:C9:CB:A8:39:D0:DB:D9:A6:95:0B:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tKbCB0KCIvY_ycuoOdDb2aaVCzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/651421-3300-4886-bbe5-84abcfbcdf5e/1/tKbCB0KCIvY_ycuoOdDb2aaVCzE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/651421-3300-4886-bbe5-84abcfbcdf5e/1/tKbCB0KCIvY_ycuoOdDb2aaVCzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:6b:40:e7:14:a5:87:a3:a0:8b:6d:3a:bd:60:29:95:6a:20:
42:ae:36:c2:d1:06:cf:15:57:b1:e7:66:9e:3b:a6:03:08:fd:
4d:5b:a2:60:f4:c6:70:ae:0f:3d:a7:b8:5d:d7:c4:c0:05:45:
a2:93:71:65:db:01:ab:9a:1b:6d:3a:55:d6:be:3a:c6:9a:f8:
7c:40:2e:14:93:5e:e4:08:b3:c4:c4:d1:c1:45:e5:2b:4e:04:
27:c3:92:4a:92:9c:76:73:79:82:cc:a9:90:49:ed:71:89:7a:
cc:86:83:e4:2b:c9:c7:7a:36:7f:af:d7:ca:84:f2:73:d7:fd:
13:53:38:eb:d8:a0:6f:ec:f4:53:14:e7:2c:31:78:ff:43:c7:
33:64:41:f5:d7:0a:f7:2b:b9:07:75:df:9a:9d:a0:4f:fc:b5:
fb:68:ef:02:2a:1d:85:a1:ae:9a:bd:d1:0f:31:70:e8:53:ba:
f8:0f:52:86:c1:49:f7:78:36:5e:ba:8d:b3:53:a7:b9:7a:e7:
73:01:1b:50:da:6b:f0:ba:1b:3a:6e:fa:c0:6c:46:4c:78:f1:
d3:2d:93:68:5e:61:b2:85:77:f6:2a:24:4d:79:9f:b8:8b:4a:
25:bd:c3:de:54:02:01:5a:2e:3c:dd:78:d6:9a:6a:f8:1c:49:
85:c6:9e:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 23:15:20 2025 by rpki-client