
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/3bee01-1fb8-47e2-b766-fe0a2ac0869f/1/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.mft
File: tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.mft (raw, json)
Hash identifier: JBhNFyflpwtyOPY9Z0AyaIdG1BtNufviYH3xD1fkpcw=
Subject key identifier: CB:6D:FD:2A:EC:8B:B1:0A:C4:5F:42:A3:CF:47:60:EC:AE:61:81:F9
Authority key identifier: B5:6D:AA:6F:85:04:14:A1:3F:65:0D:F0:94:50:66:28:A4:6D:C1:2F
Certificate issuer: /CN=b56daa6f850414a13f650df094506628a46dc12f
Certificate serial: 01974BC41B0D7FC0B8DF49F6775665E439C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/3bee01-1fb8-47e2-b766-fe0a2ac0869f/1/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.mft
Manifest number: 1079
Signing time: Sat 07 Jun 2025 19:00:32 +0000
Manifest this update: Sat 07 Jun 2025 19:00:32 +0000
Manifest next update: Sun 08 Jun 2025 19:00:32 +0000
Files and hashes: 1: tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.crl (hash: QNkigB7wRDHjHmpEjPmVQytzPdcJm0/XsbbwRB/19AQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/3bee01-1fb8-47e2-b766-fe0a2ac0869f/1/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/3bee01-1fb8-47e2-b766-fe0a2ac0869f/1/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 19:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:c4:1b:0d:7f:c0:b8:df:49:f6:77:56:65:e4:39:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b56daa6f850414a13f650df094506628a46dc12f
Validity
Not Before: Jun 7 19:00:32 2025 GMT
Not After : Jun 8 19:00:32 2025 GMT
Subject: CN=cb6dfd2aec8bb10ac45f42a3cf4760ecae6181f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:cc:aa:b8:d2:be:f5:21:5e:95:97:b2:ed:85:
da:35:1c:c6:55:96:5f:a5:10:2b:04:8a:82:04:8a:
ee:3e:c1:7d:68:4c:8e:d3:dc:04:b1:01:68:15:a4:
0d:5a:9b:84:78:0c:be:27:32:76:78:88:41:09:fd:
11:57:65:d2:85:c0:43:52:4d:07:fb:2a:e0:d1:b6:
d1:eb:82:20:ef:ce:c8:0e:b7:97:be:82:ed:78:9d:
e4:43:42:57:b8:51:5b:9c:79:87:66:6a:3e:14:27:
d2:68:46:a1:46:92:c9:52:1d:1f:a7:88:dd:ee:62:
01:93:ee:1f:75:58:0b:f0:48:b9:04:65:e0:e8:04:
4e:dd:50:6b:fa:47:c8:fd:3c:44:94:03:c2:ed:6b:
0e:ab:c8:83:e0:1e:fd:d3:e1:76:65:04:ad:6e:7d:
58:d7:5d:8f:43:d4:d0:50:e7:90:b7:23:37:16:4c:
36:e0:c7:c7:8d:37:de:d1:91:b9:37:6f:e1:65:53:
16:27:28:8a:f1:45:81:73:65:0a:66:3c:22:80:eb:
e0:e5:9a:ee:18:28:92:04:12:61:96:a2:a1:81:04:
c9:c6:29:fe:63:73:dc:ec:58:ed:d2:ec:8a:e6:4a:
50:5b:68:7c:53:82:aa:ae:a2:4e:b0:a4:9a:08:f8:
d6:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:6D:FD:2A:EC:8B:B1:0A:C4:5F:42:A3:CF:47:60:EC:AE:61:81:F9
X509v3 Authority Key Identifier:
keyid:B5:6D:AA:6F:85:04:14:A1:3F:65:0D:F0:94:50:66:28:A4:6D:C1:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3bee01-1fb8-47e2-b766-fe0a2ac0869f/1/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3bee01-1fb8-47e2-b766-fe0a2ac0869f/1/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:39:19:cd:3f:68:55:9b:fb:7c:df:0d:2c:f9:57:e4:63:8f:
d9:b7:a8:12:b5:51:cf:1d:d7:b5:bb:ad:33:b4:e2:ff:7a:1b:
8d:c1:6c:62:e5:bf:da:81:09:e3:a2:ff:06:2b:30:0f:9c:01:
14:93:a2:87:ee:ee:0c:7c:2b:df:74:4d:1b:ed:65:8b:36:58:
a0:f9:e5:05:2a:92:c5:33:5f:05:fa:42:b9:3d:ea:c3:06:c6:
2f:fb:dd:bb:7f:d7:fc:8f:5e:d5:e1:9c:7c:be:c4:2d:4d:d5:
8d:f9:3f:5c:69:74:c3:d5:fb:4a:ea:6a:90:54:5a:59:b4:3d:
ff:24:02:6a:f3:63:40:50:01:15:83:ec:33:d5:e6:89:97:0b:
cb:9a:02:cf:e5:0a:2e:a2:c3:95:c8:b8:03:2f:1f:b8:a7:71:
57:48:4a:85:77:27:41:49:2e:81:c9:ac:e9:80:a6:44:7e:6d:
6a:08:07:9d:56:7c:42:48:8d:8a:d1:8b:11:b9:5e:a0:55:1f:
d6:19:cb:19:30:d4:84:75:b3:be:1b:e0:34:b4:50:e5:1a:7b:
d9:a6:40:e5:ac:99:18:ee:78:71:30:f9:1f:ea:82:d8:b1:ae:
08:90:25:11:12:bf:5d:70:a3:13:2e:75:fb:3c:a0:e5:11:d3:
95:d2:ea:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 05:05:58 2025 by rpki-client