Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/bf8b0e-beda-4a56-baf0-82ad11626eed/1/TEz85gybDy1Hs2KGTY_rsiW7UkQ.mft
File: TEz85gybDy1Hs2KGTY_rsiW7UkQ.mft (raw, json)
Hash identifier: shogMu6tjdMYburWHExTM5UK11Jnxo8D5s4bZu6Dklk=
Subject key identifier: D8:0F:0B:CB:65:A4:E6:30:B6:FA:69:E8:16:64:2C:25:F5:7F:E6:C1
Authority key identifier: 4C:4C:FC:E6:0C:9B:0F:2D:47:B3:62:86:4D:8F:EB:B2:25:BB:52:44
Certificate issuer: /CN=4c4cfce60c9b0f2d47b362864d8febb225bb5244
Certificate serial: 01976F9A4385A715286340D9758029886A5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TEz85gybDy1Hs2KGTY_rsiW7UkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/bf8b0e-beda-4a56-baf0-82ad11626eed/1/TEz85gybDy1Hs2KGTY_rsiW7UkQ.mft
Manifest number: 158D
Signing time: Sat 14 Jun 2025 18:01:10 +0000
Manifest this update: Sat 14 Jun 2025 18:01:10 +0000
Manifest next update: Sun 15 Jun 2025 18:01:10 +0000
Files and hashes: 1: TEz85gybDy1Hs2KGTY_rsiW7UkQ.crl (hash: G0isp5qCH102CupCWFRTe0wYnxyCJKlTU69mEcsLrY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/bf8b0e-beda-4a56-baf0-82ad11626eed/1/TEz85gybDy1Hs2KGTY_rsiW7UkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/bf8b0e-beda-4a56-baf0-82ad11626eed/1/TEz85gybDy1Hs2KGTY_rsiW7UkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/TEz85gybDy1Hs2KGTY_rsiW7UkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:9a:43:85:a7:15:28:63:40:d9:75:80:29:88:6a:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c4cfce60c9b0f2d47b362864d8febb225bb5244
Validity
Not Before: Jun 14 18:01:10 2025 GMT
Not After : Jun 15 18:01:10 2025 GMT
Subject: CN=d80f0bcb65a4e630b6fa69e816642c25f57fe6c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:70:a0:04:89:7c:11:79:d8:2b:50:15:8a:2f:
76:cd:cb:2d:fc:03:d0:4a:18:d1:52:b0:57:7b:39:
b7:32:b1:63:f3:42:56:8e:d1:95:ae:63:cf:be:4f:
7e:f0:9e:a1:ba:8e:ff:91:12:27:90:dd:8e:d2:dc:
6c:d3:f0:26:17:7d:c1:82:ee:ff:71:6c:dd:78:25:
55:ff:a7:48:bc:5e:e5:f2:f5:40:a9:b9:21:f2:cc:
2a:6b:52:a1:43:e2:3a:ec:85:2b:57:65:9f:7c:03:
5a:85:cc:65:55:73:2a:c8:1f:b9:bb:69:a1:fb:d9:
73:ec:4e:5c:99:a3:1a:05:ec:fb:24:6e:f7:55:1e:
2a:58:9b:f2:41:b7:80:89:d7:4d:46:f0:e4:e3:e8:
f3:16:cf:d6:ad:d8:a1:a4:b9:56:41:67:b6:fe:5b:
2b:f6:41:f7:75:6a:9d:02:e4:67:a0:3d:e6:3e:d5:
76:bf:d1:59:f5:ac:7b:b4:72:43:57:d7:98:73:be:
b1:92:52:23:1a:45:1c:8c:5e:59:ad:c8:b2:09:81:
b1:60:26:00:77:63:39:a3:8e:57:8c:9c:68:71:0f:
58:a5:46:e8:19:26:13:ba:6f:7d:49:bf:df:d4:40:
e7:f8:fa:0e:84:54:6c:d9:08:1b:70:98:47:8f:ae:
cd:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:0F:0B:CB:65:A4:E6:30:B6:FA:69:E8:16:64:2C:25:F5:7F:E6:C1
X509v3 Authority Key Identifier:
keyid:4C:4C:FC:E6:0C:9B:0F:2D:47:B3:62:86:4D:8F:EB:B2:25:BB:52:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TEz85gybDy1Hs2KGTY_rsiW7UkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/bf8b0e-beda-4a56-baf0-82ad11626eed/1/TEz85gybDy1Hs2KGTY_rsiW7UkQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/bf8b0e-beda-4a56-baf0-82ad11626eed/1/TEz85gybDy1Hs2KGTY_rsiW7UkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:2c:7d:5b:4f:db:2b:31:b7:f4:0a:4c:40:e7:4d:2a:d7:cc:
3d:80:65:b4:b9:9c:07:b2:ee:1e:77:da:86:e7:44:a1:0c:63:
09:08:fb:08:61:2f:79:90:63:99:0e:22:f7:24:49:9d:94:fd:
40:bf:85:a5:08:d1:1f:66:0c:06:fa:5f:30:44:b1:0c:ab:b2:
d9:66:81:e3:a6:b1:22:1c:c7:ce:31:e8:fd:be:2b:2d:a4:28:
39:c3:e4:63:ab:c0:ef:28:fd:3c:99:0b:f8:54:38:36:16:59:
35:3a:5d:85:a0:09:10:11:69:0d:19:6d:1c:c9:12:9a:75:4b:
5f:fb:83:7b:da:ab:35:e4:e4:9f:68:f8:63:27:9a:1b:4d:24:
2b:71:f4:7a:2b:c5:34:71:cd:bf:28:f8:ae:8c:01:da:1c:a2:
8d:d4:b1:aa:ac:6a:d8:e4:2c:8e:bc:0b:d5:0d:e9:af:fa:b7:
45:b5:80:d3:2a:cb:89:fa:e5:8e:a4:17:5f:31:65:aa:ee:29:
6d:ea:a7:a0:6d:13:62:03:9b:d4:e1:c1:93:09:c6:f2:c8:05:
ce:b0:99:2d:96:88:47:c8:96:14:0e:66:fd:04:58:63:6e:95:
3c:22:ac:8d:51:96:de:6b:23:34:b9:1d:a5:46:02:35:71:d7:
f5:54:b6:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 21:18:08 2025 by rpki-client