Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/4e5049-856d-4c07-8556-e18184e80258/1/tRm7YH6Ot267nMsgIsxkbDzOC2A.mft
File: tRm7YH6Ot267nMsgIsxkbDzOC2A.mft (raw, json)
Hash identifier: W88DH1tIvvqzCM9PMq9MFx+HGJOtDflvH3rT2e56uxk=
Subject key identifier: 46:26:EF:48:22:66:C1:44:36:DF:A9:C1:06:D7:66:45:55:BB:5E:C4
Authority key identifier: B5:19:BB:60:7E:8E:B7:6E:BB:9C:CB:20:22:CC:64:6C:3C:CE:0B:60
Certificate issuer: /CN=b519bb607e8eb76ebb9ccb2022cc646c3cce0b60
Certificate serial: 01974A7B3D81345176528C8010B167B5C0F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tRm7YH6Ot267nMsgIsxkbDzOC2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/4e5049-856d-4c07-8556-e18184e80258/1/tRm7YH6Ot267nMsgIsxkbDzOC2A.mft
Manifest number: 1579
Signing time: Sat 07 Jun 2025 13:01:19 +0000
Manifest this update: Sat 07 Jun 2025 13:01:19 +0000
Manifest next update: Sun 08 Jun 2025 13:01:19 +0000
Files and hashes: 1: tRm7YH6Ot267nMsgIsxkbDzOC2A.crl (hash: 88BcRJrwwobruJEr/kanZyb3745vceViio+jE+G6G6s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/4e5049-856d-4c07-8556-e18184e80258/1/tRm7YH6Ot267nMsgIsxkbDzOC2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/4e5049-856d-4c07-8556-e18184e80258/1/tRm7YH6Ot267nMsgIsxkbDzOC2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/tRm7YH6Ot267nMsgIsxkbDzOC2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7b:3d:81:34:51:76:52:8c:80:10:b1:67:b5:c0:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b519bb607e8eb76ebb9ccb2022cc646c3cce0b60
Validity
Not Before: Jun 7 13:01:19 2025 GMT
Not After : Jun 8 13:01:19 2025 GMT
Subject: CN=4626ef482266c14436dfa9c106d7664555bb5ec4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d6:89:d6:61:6d:b8:88:bc:66:2b:ef:9c:d4:
e7:e1:d3:1c:f5:1d:c4:20:01:d5:df:ec:49:86:ab:
ab:50:9e:c7:23:4c:03:39:75:ff:5c:1b:86:32:86:
91:f4:4b:c4:98:c3:fe:aa:83:40:dd:7c:42:25:1d:
fe:19:50:a0:54:ba:24:19:42:b5:57:8a:d6:7b:27:
c7:50:11:c6:37:c3:0d:c2:cc:c0:da:b3:23:6d:53:
b9:a1:a7:b5:07:c0:2c:a0:fb:c3:3f:36:be:dc:f4:
7d:88:1d:f1:da:47:85:35:fa:ce:40:fe:65:76:d3:
8d:cb:b5:ba:2b:18:9f:63:f8:2f:7c:0d:be:ac:a5:
f2:c9:d3:aa:d6:68:2a:1e:94:8c:7d:03:e5:06:cb:
bf:0f:42:6f:4e:17:48:7e:66:5f:9e:c9:02:b0:51:
e9:44:24:91:41:19:d8:09:43:fd:17:ea:04:fe:9c:
eb:b4:ac:dc:75:4c:d8:b4:05:64:fc:f8:75:70:06:
56:fe:4d:bc:39:08:05:06:7b:e7:7b:8f:b2:de:59:
bf:8d:85:53:9a:10:a1:83:05:75:5b:2c:e9:c9:3c:
0e:cc:b5:fc:9b:d2:0a:a7:4e:5d:f7:21:61:ef:07:
83:9e:2e:b0:7b:5b:c4:68:a9:f7:48:84:2b:ba:5b:
bf:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:26:EF:48:22:66:C1:44:36:DF:A9:C1:06:D7:66:45:55:BB:5E:C4
X509v3 Authority Key Identifier:
keyid:B5:19:BB:60:7E:8E:B7:6E:BB:9C:CB:20:22:CC:64:6C:3C:CE:0B:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tRm7YH6Ot267nMsgIsxkbDzOC2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4e5049-856d-4c07-8556-e18184e80258/1/tRm7YH6Ot267nMsgIsxkbDzOC2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4e5049-856d-4c07-8556-e18184e80258/1/tRm7YH6Ot267nMsgIsxkbDzOC2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:4c:4b:8b:03:fe:65:b3:ad:d1:ee:c0:df:ca:6f:bd:f5:35:
ab:1c:29:0a:7d:cf:5e:49:55:b4:b7:72:ee:ae:1f:d6:84:b5:
1c:7f:bb:5d:11:0d:37:aa:4b:52:e7:66:46:d7:2f:82:74:41:
24:9f:f1:64:ad:c3:35:d1:98:58:68:ac:38:da:e7:58:aa:0c:
ce:1c:9a:86:5d:f9:7d:56:f6:51:aa:e6:55:bd:df:36:c4:7d:
1e:fa:8d:ed:17:5f:8f:79:36:14:d3:58:09:05:26:b9:dc:a3:
a0:20:4f:9f:d4:57:a9:d7:d0:c3:3d:a2:47:f9:c1:4d:3e:e9:
59:be:91:1f:3b:cc:e7:e5:e3:35:c1:9d:93:51:fe:7b:6a:49:
d5:c1:85:2c:51:a9:57:fc:49:2b:4c:0b:ef:f1:2c:99:79:3a:
44:53:88:61:38:42:3c:93:33:0d:b3:cf:a8:f1:e1:19:38:a8:
44:7f:9c:86:a9:5d:25:e5:df:71:7c:53:92:1e:6d:c5:97:a3:
bc:bf:67:24:11:e9:4c:8b:cd:11:c5:3f:3f:16:46:21:47:25:
99:e4:55:6c:e8:27:c6:fd:ce:5f:45:11:a3:af:d8:b5:7d:d9:
68:5d:79:18:a5:b6:c1:c0:69:a0:d8:4a:c3:e2:89:41:e5:19:
b1:0d:8b:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:29:29 2025 by rpki-client