Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/651421-3300-4886-bbe5-84abcfbcdf5e/1/tKbCB0KCIvY_ycuoOdDb2aaVCzE.mft
File: tKbCB0KCIvY_ycuoOdDb2aaVCzE.mft (raw, json)
Hash identifier: X4T+6EdSG3kCZwU4nokz42EtVLXuOH18brRUJlbUyAE=
Subject key identifier: 61:DE:60:51:B3:BB:54:FD:71:F6:4D:DB:24:F6:E6:29:FF:8B:FB:0A
Authority key identifier: B4:A6:C2:07:42:82:22:F6:3F:C9:CB:A8:39:D0:DB:D9:A6:95:0B:31
Certificate issuer: /CN=b4a6c207428222f63fc9cba839d0dbd9a6950b31
Certificate serial: 01975F82179B2861D4FB3734B04B3FB1A35D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tKbCB0KCIvY_ycuoOdDb2aaVCzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/651421-3300-4886-bbe5-84abcfbcdf5e/1/tKbCB0KCIvY_ycuoOdDb2aaVCzE.mft
Manifest number: 3C
Signing time: Wed 11 Jun 2025 15:00:50 +0000
Manifest this update: Wed 11 Jun 2025 15:00:50 +0000
Manifest next update: Thu 12 Jun 2025 15:00:50 +0000
Files and hashes: 1: tKbCB0KCIvY_ycuoOdDb2aaVCzE.crl (hash: dEqe+h/gvb/OP67J+IKUPh3hKZF77wDzBIyJvOcgyLU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/651421-3300-4886-bbe5-84abcfbcdf5e/1/tKbCB0KCIvY_ycuoOdDb2aaVCzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/651421-3300-4886-bbe5-84abcfbcdf5e/1/tKbCB0KCIvY_ycuoOdDb2aaVCzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/tKbCB0KCIvY_ycuoOdDb2aaVCzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 15:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5f:82:17:9b:28:61:d4:fb:37:34:b0:4b:3f:b1:a3:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4a6c207428222f63fc9cba839d0dbd9a6950b31
Validity
Not Before: Jun 11 15:00:50 2025 GMT
Not After : Jun 12 15:00:50 2025 GMT
Subject: CN=61de6051b3bb54fd71f64ddb24f6e629ff8bfb0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:90:fe:16:31:63:b2:33:76:f0:4a:58:b4:4e:
ce:c3:64:86:75:39:9b:85:43:fd:eb:42:b0:b3:0b:
54:ef:b3:79:4f:67:fb:48:83:fe:cc:b5:09:e8:ed:
95:e3:35:3b:f8:e4:57:87:f5:9c:c0:bd:27:8a:91:
42:be:e5:9c:75:b9:53:5f:1a:cf:28:03:f2:07:47:
5a:e4:ec:94:eb:e0:88:09:64:eb:d1:c6:c8:54:99:
d9:8a:3b:61:a9:a0:b9:e4:f7:a0:d7:6d:e8:89:de:
54:a3:04:d7:cb:48:5c:38:b0:8d:e6:4f:60:3f:c6:
58:e2:8c:0e:e1:5d:d8:9d:b9:ee:14:87:17:38:1f:
08:9e:31:1a:3c:4e:a0:85:6c:8f:b8:de:3d:bd:59:
67:36:19:53:99:98:19:4e:80:e4:12:8a:68:46:11:
1c:dd:61:3e:bc:2f:80:d1:10:59:3f:a3:18:53:ad:
b1:75:0f:94:41:13:4a:56:99:ab:43:4e:ca:99:62:
39:ce:15:f2:36:3d:58:cc:f1:5c:99:5d:28:40:8a:
45:bb:e5:33:14:28:f0:15:9b:fa:59:d7:5d:6d:e9:
48:1c:1d:27:f7:9b:2c:74:7c:8f:81:13:89:89:6d:
ad:af:86:a8:9c:31:c5:a5:2f:4c:b0:a0:a0:9c:9f:
6c:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:DE:60:51:B3:BB:54:FD:71:F6:4D:DB:24:F6:E6:29:FF:8B:FB:0A
X509v3 Authority Key Identifier:
keyid:B4:A6:C2:07:42:82:22:F6:3F:C9:CB:A8:39:D0:DB:D9:A6:95:0B:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tKbCB0KCIvY_ycuoOdDb2aaVCzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/651421-3300-4886-bbe5-84abcfbcdf5e/1/tKbCB0KCIvY_ycuoOdDb2aaVCzE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/651421-3300-4886-bbe5-84abcfbcdf5e/1/tKbCB0KCIvY_ycuoOdDb2aaVCzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:15:56:53:e3:05:73:75:62:ff:8f:15:3b:4c:85:b6:f5:c8:
d3:cc:b9:01:6e:64:ff:88:6c:57:7c:92:0d:0d:2d:fc:44:a1:
93:49:57:9c:f9:8e:a2:fb:e2:1d:92:9a:99:c7:fd:24:dc:d2:
ef:27:5c:84:e5:22:b0:8b:bd:66:77:3a:f3:72:f8:2f:c2:11:
b1:ee:ea:9b:f2:96:7a:4d:70:a5:f4:cc:a6:a9:be:a5:00:7c:
7e:2e:31:98:74:8a:73:bf:c5:05:a9:03:25:22:0a:ba:26:26:
b5:e8:7d:6b:10:e3:f2:9e:d4:af:c3:b9:75:b2:ae:b0:93:42:
de:02:93:ff:0e:b6:0c:55:04:5e:4e:f5:7b:33:20:99:fa:18:
ad:44:07:a5:65:0d:18:e0:54:81:3e:ab:02:2c:0a:d4:b3:e2:
3e:17:4b:8b:91:1f:69:f6:ae:77:4e:5c:d6:0d:4a:59:87:4f:
40:07:d6:76:37:95:74:41:10:60:81:41:d3:a3:60:c4:23:51:
54:67:a2:76:39:79:7d:4b:8b:de:e2:9b:c9:1e:0b:17:3e:79:
2b:59:eb:51:9d:24:5e:ea:e8:d7:eb:7c:e7:69:b2:65:12:ec:
2f:43:19:dd:53:9d:af:a7:df:50:ee:ee:4a:17:cb:57:11:a7:
2e:1c:7d:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 01:44:28 2025 by rpki-client