Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/37d3ee-640f-471f-a9b7-ac5a297f9ba4/1/Tb6Htwra566IC0Zwv6B46QmE1mA.mft
File: Tb6Htwra566IC0Zwv6B46QmE1mA.mft (raw, json)
Hash identifier: 0t264zblQ4yzXyxIKPjlOZ+SykRGJO/JrzPMivhNiv0=
Subject key identifier: D6:AF:06:D0:23:52:8A:4A:B0:26:EC:39:C0:DF:4D:9F:87:2A:4A:AE
Authority key identifier: 4D:BE:87:B7:0A:DA:E7:AE:88:0B:46:70:BF:A0:78:E9:09:84:D6:60
Certificate issuer: /CN=4dbe87b70adae7ae880b4670bfa078e90984d660
Certificate serial: 01974B1F7691874E8BCB99397116096FB9C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tb6Htwra566IC0Zwv6B46QmE1mA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/37d3ee-640f-471f-a9b7-ac5a297f9ba4/1/Tb6Htwra566IC0Zwv6B46QmE1mA.mft
Manifest number: 0FA4
Signing time: Sat 07 Jun 2025 16:00:42 +0000
Manifest this update: Sat 07 Jun 2025 16:00:42 +0000
Manifest next update: Sun 08 Jun 2025 16:00:42 +0000
Files and hashes: 1: Tb6Htwra566IC0Zwv6B46QmE1mA.crl (hash: r/zrsuOm2MitlE4o7p9mamxyBeQdpWP9/SZ9GhDsfII=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/37d3ee-640f-471f-a9b7-ac5a297f9ba4/1/Tb6Htwra566IC0Zwv6B46QmE1mA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/37d3ee-640f-471f-a9b7-ac5a297f9ba4/1/Tb6Htwra566IC0Zwv6B46QmE1mA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tb6Htwra566IC0Zwv6B46QmE1mA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:1f:76:91:87:4e:8b:cb:99:39:71:16:09:6f:b9:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dbe87b70adae7ae880b4670bfa078e90984d660
Validity
Not Before: Jun 7 16:00:42 2025 GMT
Not After : Jun 8 16:00:42 2025 GMT
Subject: CN=d6af06d023528a4ab026ec39c0df4d9f872a4aae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:46:6f:41:16:c3:97:e3:5c:bd:d6:76:7d:b2:
08:80:c2:e6:63:97:3e:70:7e:2f:2b:85:f4:f7:65:
40:85:92:b3:ac:72:21:2a:2e:13:e5:bf:e8:5a:91:
d6:bf:d0:ef:2e:40:67:26:3b:bc:c6:f5:f2:9f:e6:
26:b2:bd:ef:4d:86:83:94:5b:1f:5c:ef:18:dd:bc:
5f:91:45:34:22:62:7b:1e:08:57:e2:4b:f2:32:4f:
59:ce:73:7d:77:b7:1c:b6:e3:bf:f8:af:63:69:b4:
f4:36:10:73:46:e6:a8:81:cd:72:a0:2a:67:40:ab:
a2:39:94:64:a6:2a:69:69:de:b2:92:53:8b:39:a6:
80:8b:f6:bd:5b:fc:2e:7d:e0:bf:38:18:96:5c:5b:
a4:40:14:2f:e7:64:7e:0b:70:8d:ff:69:e5:08:7a:
9a:e4:eb:32:59:a7:b1:c8:36:07:07:bc:3d:05:c1:
b2:e6:46:98:4c:90:c5:50:67:c2:42:b5:57:f1:c5:
6e:d7:5d:9a:5a:f3:cc:97:1b:e0:a1:ac:b0:8c:ce:
fe:2a:0c:a7:c4:68:d2:6c:b1:d8:b3:19:c9:ad:69:
10:e0:46:03:28:ad:eb:55:10:c1:e7:a7:21:1d:f9:
10:b4:b4:d0:3d:c5:d1:31:f3:c9:51:3b:58:09:6b:
cb:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:AF:06:D0:23:52:8A:4A:B0:26:EC:39:C0:DF:4D:9F:87:2A:4A:AE
X509v3 Authority Key Identifier:
keyid:4D:BE:87:B7:0A:DA:E7:AE:88:0B:46:70:BF:A0:78:E9:09:84:D6:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tb6Htwra566IC0Zwv6B46QmE1mA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/37d3ee-640f-471f-a9b7-ac5a297f9ba4/1/Tb6Htwra566IC0Zwv6B46QmE1mA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/37d3ee-640f-471f-a9b7-ac5a297f9ba4/1/Tb6Htwra566IC0Zwv6B46QmE1mA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:d6:85:93:e8:4b:9b:94:5e:9a:ad:bc:93:69:76:05:d5:8a:
4c:be:97:35:00:ce:75:a3:22:37:eb:ae:32:8f:f9:fb:a9:86:
fb:1f:b7:f1:86:df:39:8d:08:6b:21:54:31:38:4f:18:c5:52:
a6:62:fa:32:5c:2c:3a:ea:18:75:56:e0:af:76:ac:c4:e0:2d:
6c:95:48:61:9b:2f:16:52:ee:da:ec:61:7f:fa:9a:04:4d:ee:
d9:f1:72:0c:c3:72:df:80:c9:87:bf:d6:ff:5d:aa:0a:14:2c:
41:7a:7a:74:a3:cd:0f:c9:53:0e:f1:60:50:2e:9e:87:88:7e:
bb:e7:29:e5:27:a3:15:bd:fe:f1:af:7d:d0:b9:e4:72:c6:cf:
77:ae:2a:ca:73:dd:bf:72:56:f9:0c:da:1e:70:7c:2c:9d:6e:
d5:39:6b:38:d0:1a:2c:b3:43:b5:2b:eb:79:84:9b:90:de:fd:
b2:96:6b:5a:e6:df:ba:7d:0f:0f:ed:1d:d3:fd:cc:c7:5d:99:
47:e2:29:c7:28:15:00:d6:3f:7e:f5:15:ca:c3:ea:96:41:a2:
8c:89:1f:ec:88:b8:a7:67:5e:55:7b:0a:c2:39:42:ef:87:ce:
b6:b8:bc:f9:1b:84:ec:03:b2:aa:5f:a2:9f:40:ac:6e:b2:a8:
79:71:e4:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:05:47 2025 by rpki-client