
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/55fbc5-b2dc-4639-9a3a-64117db2c4e1/1/1-tzmN--ygZRxWsKnISniBXG5g68.mft
File: 1-tzmN--ygZRxWsKnISniBXG5g68.mft (raw, json)
Hash identifier: VzBBI7qabZgYcKw16XJo2KG14CuaElualrBWjfZz61g=
Subject key identifier: 2E:8B:46:B4:EA:A0:4F:95:DC:0F:A4:A8:2D:84:77:EC:B2:09:D0:1E
Authority key identifier: FA:DC:E6:37:EF:B2:81:94:71:5A:C2:A7:21:29:E2:05:71:B9:83:AF
Certificate issuer: /CN=fadce637efb28194715ac2a72129e20571b983af
Certificate serial: 01976471CC70F2E82D0BD8E653874DCEE09A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-tzmN--ygZRxWsKnISniBXG5g68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/55fbc5-b2dc-4639-9a3a-64117db2c4e1/1/1-tzmN--ygZRxWsKnISniBXG5g68.mft
Manifest number: 1589
Signing time: Thu 12 Jun 2025 14:01:08 +0000
Manifest this update: Thu 12 Jun 2025 14:01:08 +0000
Manifest next update: Fri 13 Jun 2025 14:01:08 +0000
Files and hashes: 1: 1-tzmN--ygZRxWsKnISniBXG5g68.crl (hash: /i0M977/Y0JHg2v1Bysoa8b6JlG2TlrmVd55BamHpes=)
2: 5E1ZOs6jBFxTFh2Cf5ZnFlkIOxc.roa (hash: pA+HTgzqmsnmbM9IncUhyb9kGpbMUOBHi5UiEoEtsy4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/55fbc5-b2dc-4639-9a3a-64117db2c4e1/1/1-tzmN--ygZRxWsKnISniBXG5g68.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/55fbc5-b2dc-4639-9a3a-64117db2c4e1/1/1-tzmN--ygZRxWsKnISniBXG5g68.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-tzmN--ygZRxWsKnISniBXG5g68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:64:71:cc:70:f2:e8:2d:0b:d8:e6:53:87:4d:ce:e0:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fadce637efb28194715ac2a72129e20571b983af
Validity
Not Before: Jun 12 14:01:08 2025 GMT
Not After : Jun 13 14:01:08 2025 GMT
Subject: CN=2e8b46b4eaa04f95dc0fa4a82d8477ecb209d01e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:49:57:37:44:52:cf:17:fd:43:a8:3c:63:77:
9c:1a:73:b9:59:5f:eb:47:65:e7:7c:b4:f4:c3:37:
92:0c:29:b8:50:e8:c1:eb:cb:4a:c5:36:9e:e4:9a:
1d:e5:5d:51:27:be:e6:72:95:de:a3:2c:dc:36:f6:
d8:11:f2:54:f6:6b:58:4d:8c:0b:af:db:b8:60:8b:
f1:b1:2a:71:5c:27:11:28:2e:ba:54:fe:09:3a:da:
06:a6:8f:d9:b8:f0:b5:9c:e9:9a:0d:be:41:3b:66:
6c:c1:87:92:0d:2b:26:c2:50:e3:c5:f3:44:88:b6:
04:99:2a:33:ff:dc:90:3e:33:ba:ab:82:c4:70:b6:
30:1d:5a:18:26:4a:9d:9b:64:cd:dd:58:2e:20:f3:
fe:e6:67:95:c8:fd:22:ce:d6:89:a2:d3:8e:48:25:
08:33:c5:4c:1d:bf:73:04:80:48:36:ed:1b:72:98:
d3:2c:85:84:cb:86:e3:6b:df:31:81:25:4b:f7:13:
59:b1:ad:6f:04:aa:87:ec:f6:4b:7f:b8:19:54:23:
af:01:a3:ff:02:69:df:6e:7f:96:9c:25:cf:55:36:
27:03:27:fc:54:73:bd:77:e1:30:cb:fb:48:fe:25:
28:f2:20:b9:1d:ea:89:be:b5:fd:52:43:39:cf:d6:
d9:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:8B:46:B4:EA:A0:4F:95:DC:0F:A4:A8:2D:84:77:EC:B2:09:D0:1E
X509v3 Authority Key Identifier:
keyid:FA:DC:E6:37:EF:B2:81:94:71:5A:C2:A7:21:29:E2:05:71:B9:83:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tzmN--ygZRxWsKnISniBXG5g68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/55fbc5-b2dc-4639-9a3a-64117db2c4e1/1/1-tzmN--ygZRxWsKnISniBXG5g68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/55fbc5-b2dc-4639-9a3a-64117db2c4e1/1/1-tzmN--ygZRxWsKnISniBXG5g68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:02:1c:2b:80:68:8e:8f:a4:62:46:e0:f3:e2:e3:d4:66:93:
47:7e:60:b9:0f:1a:90:54:41:b1:a7:ec:cb:ac:f7:de:82:66:
45:e8:e7:46:d5:a2:7c:c7:42:f9:08:fd:23:9b:b0:56:d5:de:
84:28:81:19:c7:15:07:55:07:4d:3f:61:ee:68:20:f8:1e:aa:
b0:91:47:52:0f:17:4b:f4:b5:17:0c:fe:c8:78:e8:b0:83:10:
91:dd:56:12:4f:26:c7:71:ca:8c:5f:86:c8:96:82:e5:85:0b:
3d:c1:c9:c8:b7:ae:69:16:08:0c:11:cc:8e:83:99:ec:2e:4a:
31:b8:d2:8c:ed:fd:56:20:67:ca:b2:3a:a9:f2:d8:77:67:65:
9b:44:c7:1f:71:d1:cb:d3:03:73:c8:68:ca:33:da:2e:ad:ff:
82:e3:01:f1:fd:3d:e7:25:42:b8:f3:f5:46:55:bd:9b:f9:34:
ee:34:0b:c1:bc:09:90:24:67:59:c8:25:3b:ae:d1:da:ad:6b:
11:f2:74:20:06:28:3b:4a:8c:74:71:e1:89:01:e1:d7:38:7f:
15:b9:86:20:ba:24:7a:30:b2:e6:8d:8a:c6:32:b4:53:97:6d:
e9:c0:6e:1a:27:d7:80:c3:f5:49:91:76:e5:fe:53:2f:24:be:
d1:50:1a:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 17:59:06 2025 by rpki-client