Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.mft
File: CEl1fj41qqtdV8UYYkOkNxc-TTY.mft (raw, json)
Hash identifier: t8W+IqWbEtM//qlCmRBEnYXm09Hgrc5ZzPGUTt4kWVk=
Subject key identifier: 25:44:0D:BA:53:4C:03:DB:B4:D4:04:6E:6B:BD:6A:8B:9F:00:EE:46
Authority key identifier: 08:49:75:7E:3E:35:AA:AB:5D:57:C5:18:62:43:A4:37:17:3E:4D:36
Certificate issuer: /CN=0849757e3e35aaab5d57c5186243a437173e4d36
Certificate serial: 01974A7B355FF4790A8C49FBF4D0769D7DDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CEl1fj41qqtdV8UYYkOkNxc-TTY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.mft
Manifest number: 12B6
Signing time: Sat 07 Jun 2025 13:01:17 +0000
Manifest this update: Sat 07 Jun 2025 13:01:17 +0000
Manifest next update: Sun 08 Jun 2025 13:01:17 +0000
Files and hashes: 1: CEl1fj41qqtdV8UYYkOkNxc-TTY.crl (hash: kmFA65vNXer8swKv+pKmzXhfdMgWt26OQp/kAxxED3A=)
2: ughB2qwCJjXq23HnnasoQDdXgE8.roa (hash: LImj3hNpOasXYHWcbm9URdJgBeEySrqqax18nJO4GMo=)
3: v0jeM-EK5U0lFswlXgsyLuIVWWw.roa (hash: M3nsb4FrAgnB7zU3prkNFU+S+Vg3EPSnI0a1Dxv4l5Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CEl1fj41qqtdV8UYYkOkNxc-TTY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7b:35:5f:f4:79:0a:8c:49:fb:f4:d0:76:9d:7d:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0849757e3e35aaab5d57c5186243a437173e4d36
Validity
Not Before: Jun 7 13:01:17 2025 GMT
Not After : Jun 8 13:01:17 2025 GMT
Subject: CN=25440dba534c03dbb4d4046e6bbd6a8b9f00ee46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:0c:f4:bf:2e:33:76:8b:0f:bf:bb:58:97:36:
80:c5:23:42:bc:f8:aa:39:3a:99:df:6e:46:08:08:
75:0f:0a:bb:b7:2b:81:5d:66:ca:92:6e:67:b1:be:
14:c1:f4:bb:6c:71:30:cb:b8:15:9a:9e:ce:9d:a5:
8a:f7:81:5b:b3:09:08:a1:bb:5c:7c:4f:4c:14:80:
7d:ee:fd:49:fe:d0:b9:fb:5b:db:01:04:1d:e6:d7:
9f:af:95:69:82:70:7f:96:91:41:e0:18:18:94:19:
27:80:e6:d7:a8:97:30:ca:b3:18:cc:5f:0e:e9:63:
74:35:7a:19:df:ce:73:5a:13:18:02:2b:79:4c:2f:
ba:f7:ae:1e:fe:a2:d8:8b:41:cf:e5:7b:11:c1:be:
b2:e0:ca:74:b2:2e:c6:ba:da:00:3c:01:5a:c5:af:
71:5d:72:c7:65:b7:ba:57:62:6e:1d:0e:aa:c9:be:
65:73:68:b2:2a:62:36:51:af:db:b5:67:84:a1:48:
61:4b:f1:99:58:75:48:32:a3:87:94:eb:28:b8:0b:
c4:81:2b:5f:50:a4:03:de:24:e5:b2:47:b0:23:20:
93:10:8d:cc:a9:34:c5:ce:63:83:b3:be:8a:ca:6a:
f1:90:a3:9a:23:97:3d:47:66:45:99:21:26:0a:37:
06:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:44:0D:BA:53:4C:03:DB:B4:D4:04:6E:6B:BD:6A:8B:9F:00:EE:46
X509v3 Authority Key Identifier:
keyid:08:49:75:7E:3E:35:AA:AB:5D:57:C5:18:62:43:A4:37:17:3E:4D:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CEl1fj41qqtdV8UYYkOkNxc-TTY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:78:7e:98:28:73:4a:a7:90:16:46:66:bc:ff:b5:82:d1:5f:
48:e1:ad:45:47:11:9e:21:55:79:e2:31:47:6c:e9:b7:7c:6f:
13:56:1d:8b:0f:84:24:c5:41:26:41:9a:c6:ce:a9:d3:1e:dd:
f2:21:5d:48:30:12:80:57:a9:0e:59:98:43:d5:15:da:1c:b0:
40:88:ad:15:93:5b:f1:7f:8f:b9:aa:c8:48:fb:b8:df:e4:9e:
fa:e6:b8:48:dc:20:c2:d5:cd:e5:df:e5:be:5e:f6:a0:46:2c:
b6:d9:df:3d:1d:ea:42:31:44:28:dc:67:32:65:ce:04:e7:d2:
73:ab:58:a4:e0:52:4b:c0:55:6d:9c:f3:84:84:1e:e3:4c:54:
eb:ab:50:9d:13:18:24:70:51:71:29:13:29:19:86:0c:f2:e5:
a0:74:b9:1c:8b:7f:37:0c:31:64:71:14:c0:d6:7c:20:9c:de:
b9:cb:7b:eb:61:a9:16:d4:1f:42:3f:b8:26:44:30:da:20:07:
3c:1c:f6:1b:ef:82:0d:89:8a:3a:3e:36:ab:59:14:b4:56:df:
2e:29:e0:10:4c:97:1c:a7:3f:99:ec:6c:c4:a6:9a:a4:31:f4:
73:2a:e5:fd:7a:44:93:85:92:73:65:32:40:34:37:4c:ac:a2:
b2:ad:2c:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:46:56 2025 by rpki-client