Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/f56fa9-f9fe-40f5-a853-832ab844172b/1/TcAjDNQV2G6G_YiTE0KHzlSmh9c.mft
File: TcAjDNQV2G6G_YiTE0KHzlSmh9c.mft (raw, json)
Hash identifier: VBKycIgHwTnWtc4MLipPuDqKF811hYnBJ/icHz+Un5Q=
Subject key identifier: 91:5B:F0:CC:8B:D6:47:31:9D:AA:6E:33:13:53:DB:48:B4:4A:5A:73
Authority key identifier: 4D:C0:23:0C:D4:15:D8:6E:86:FD:88:93:13:42:87:CE:54:A6:87:D7
Certificate issuer: /CN=4dc0230cd415d86e86fd8893134287ce54a687d7
Certificate serial: 01974B1F26165ED6D55BE5FE1CA31DFCB662
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TcAjDNQV2G6G_YiTE0KHzlSmh9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/f56fa9-f9fe-40f5-a853-832ab844172b/1/TcAjDNQV2G6G_YiTE0KHzlSmh9c.mft
Manifest number: 43
Signing time: Sat 07 Jun 2025 16:00:21 +0000
Manifest this update: Sat 07 Jun 2025 16:00:21 +0000
Manifest next update: Sun 08 Jun 2025 16:00:21 +0000
Files and hashes: 1: TcAjDNQV2G6G_YiTE0KHzlSmh9c.crl (hash: LWnPvq/KOtjeEkKB47UL9FkeFUX5BBMZBwJGTqZL6yQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/f56fa9-f9fe-40f5-a853-832ab844172b/1/TcAjDNQV2G6G_YiTE0KHzlSmh9c.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/f56fa9-f9fe-40f5-a853-832ab844172b/1/TcAjDNQV2G6G_YiTE0KHzlSmh9c.mft
rsync://rpki.ripe.net/repository/DEFAULT/TcAjDNQV2G6G_YiTE0KHzlSmh9c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 16:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:1f:26:16:5e:d6:d5:5b:e5:fe:1c:a3:1d:fc:b6:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dc0230cd415d86e86fd8893134287ce54a687d7
Validity
Not Before: Jun 7 16:00:21 2025 GMT
Not After : Jun 8 16:00:21 2025 GMT
Subject: CN=915bf0cc8bd647319daa6e331353db48b44a5a73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:ec:25:59:7f:4a:76:80:21:56:aa:7e:57:42:
c5:d5:10:93:52:ec:5f:bf:52:36:f5:bd:cf:43:73:
ff:43:1c:38:f4:5b:62:cc:13:60:8e:c5:da:13:d8:
87:51:48:78:1b:a6:19:1c:05:3a:cc:b4:84:d2:44:
71:4f:36:81:57:e8:31:1a:2d:3b:3a:ee:fc:fb:e6:
9c:41:5e:15:37:89:e4:e7:8c:53:92:24:03:30:b5:
75:32:a7:b4:bf:53:b8:2d:47:01:d1:5d:f9:8f:d5:
09:33:83:8d:d3:76:6b:fc:5a:07:76:d5:5f:5b:9c:
90:2a:29:e4:59:2c:b6:e8:99:aa:ed:42:17:3d:3a:
43:b5:ca:63:cf:cb:17:9e:94:ea:38:68:0f:27:62:
6c:7d:11:fc:b8:bb:b1:9a:a4:da:db:95:3b:a6:2b:
f0:7f:80:d3:4c:a2:20:44:dd:cf:a5:59:a8:75:72:
88:e7:f9:84:82:5a:2b:4b:ca:99:00:86:4e:ac:eb:
a4:7c:6f:bc:c8:7f:17:c7:a5:c2:15:f5:fc:39:5a:
97:57:51:5e:dd:2d:a3:62:1e:ca:de:f6:60:d6:6b:
3c:e1:54:d4:de:58:37:92:80:02:4d:f8:cc:e1:ac:
58:be:09:82:51:3f:e2:72:e3:28:84:b4:05:7e:16:
03:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:5B:F0:CC:8B:D6:47:31:9D:AA:6E:33:13:53:DB:48:B4:4A:5A:73
X509v3 Authority Key Identifier:
keyid:4D:C0:23:0C:D4:15:D8:6E:86:FD:88:93:13:42:87:CE:54:A6:87:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TcAjDNQV2G6G_YiTE0KHzlSmh9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/f56fa9-f9fe-40f5-a853-832ab844172b/1/TcAjDNQV2G6G_YiTE0KHzlSmh9c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/f56fa9-f9fe-40f5-a853-832ab844172b/1/TcAjDNQV2G6G_YiTE0KHzlSmh9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:19:32:1b:b5:d2:a6:55:25:6b:6a:00:31:51:98:5a:2c:fc:
5f:96:a8:bc:b2:fd:b8:32:0e:54:6b:5b:d5:7a:9f:c9:54:4e:
0e:fb:c8:1f:54:99:32:93:6d:66:9d:63:19:32:48:e9:20:ad:
3d:17:f3:03:6a:d9:d0:ae:2d:c9:82:04:1f:ca:9a:56:19:ac:
0a:cd:c5:be:a7:9e:0e:8f:ca:ce:e0:22:47:7d:e8:78:c1:4a:
05:4a:ae:20:2a:45:d1:b3:f0:d2:6a:0f:c6:63:e5:42:b9:15:
60:5b:02:02:26:e3:6c:a7:44:c1:ca:ed:d1:14:a1:92:6d:6f:
dc:55:bc:d4:a3:05:b3:bd:ad:94:c4:c8:a7:84:13:73:54:ea:
05:f4:4d:3e:c1:88:0f:88:67:96:0f:aa:70:19:43:ae:08:35:
86:43:d5:a0:8b:99:14:c9:3c:67:7f:dd:8a:5c:28:fe:0a:10:
e9:32:ce:e0:bd:4e:a0:6c:6e:f7:06:f7:08:b9:1f:af:44:d9:
f4:a3:4e:64:d4:95:35:96:e9:20:6f:e4:65:05:67:97:85:25:
08:d2:76:05:cf:57:8e:a0:66:4c:59:08:0b:75:e3:ae:86:5c:
a7:cc:4b:64:69:01:76:d3:b3:02:25:ec:0b:d1:e5:43:95:69:
88:32:e4:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:04:46 2025 by rpki-client