Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/d46a81-3735-42c6-9bbb-1d1799b59c99/1/tLB5uhPORqvsf1vD893Ni7hnWQU.mft
File: tLB5uhPORqvsf1vD893Ni7hnWQU.mft (raw, json)
Hash identifier: 2viYGljcxIAdsWmhC32XqbfswZZWH2gxMEtDrEZIqy0=
Subject key identifier: 95:C0:D2:33:C0:FC:DD:3C:72:E9:D2:F3:2C:4D:1A:C1:96:AC:2D:ED
Authority key identifier: B4:B0:79:BA:13:CE:46:AB:EC:7F:5B:C3:F3:DD:CD:8B:B8:67:59:05
Certificate issuer: /CN=b4b079ba13ce46abec7f5bc3f3ddcd8bb8675905
Certificate serial: 0197488C4DDCB27F7B17283C75FF37637FD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tLB5uhPORqvsf1vD893Ni7hnWQU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/d46a81-3735-42c6-9bbb-1d1799b59c99/1/tLB5uhPORqvsf1vD893Ni7hnWQU.mft
Manifest number: 1579
Signing time: Sat 07 Jun 2025 04:00:43 +0000
Manifest this update: Sat 07 Jun 2025 04:00:43 +0000
Manifest next update: Sun 08 Jun 2025 04:00:43 +0000
Files and hashes: 1: tLB5uhPORqvsf1vD893Ni7hnWQU.crl (hash: snMKvPUEJXYcZ+/d3wyjfjB9NP7f1dU5g5nBZfyrU00=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/d46a81-3735-42c6-9bbb-1d1799b59c99/1/tLB5uhPORqvsf1vD893Ni7hnWQU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/d46a81-3735-42c6-9bbb-1d1799b59c99/1/tLB5uhPORqvsf1vD893Ni7hnWQU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tLB5uhPORqvsf1vD893Ni7hnWQU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:4d:dc:b2:7f:7b:17:28:3c:75:ff:37:63:7f:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4b079ba13ce46abec7f5bc3f3ddcd8bb8675905
Validity
Not Before: Jun 7 04:00:43 2025 GMT
Not After : Jun 8 04:00:43 2025 GMT
Subject: CN=95c0d233c0fcdd3c72e9d2f32c4d1ac196ac2ded
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:8f:57:c8:c1:8e:8a:f0:72:3b:d2:fb:a3:57:
68:8b:2e:35:fc:f5:6e:fd:de:d0:32:d1:41:ea:94:
1e:22:fa:1b:3f:8e:23:32:74:f6:a4:9a:80:ba:48:
64:f7:64:2b:c5:ef:c9:1f:3a:96:1e:9c:d8:bf:37:
55:f9:3b:33:0a:70:14:c1:44:58:b4:37:e0:ed:8e:
05:94:ce:52:32:6b:7d:b0:f8:86:e3:de:d9:5f:8a:
0b:2e:e3:af:53:00:9c:22:e7:44:f2:92:77:ce:8e:
6b:53:e5:b4:9b:66:b4:d5:1a:9d:e6:b7:0a:39:80:
e7:52:e9:9a:14:07:f3:48:d5:8e:ce:5c:65:25:58:
fe:93:1c:4c:66:cf:37:e8:b2:9e:ee:fe:99:9c:4a:
79:20:e6:41:62:88:48:4e:35:39:81:1a:4d:9f:b0:
36:07:7d:16:fb:9f:35:0d:38:38:94:30:fb:26:29:
7d:aa:c3:00:11:0b:cd:b1:49:62:01:0d:13:63:13:
b7:4c:54:6d:7e:5e:23:b6:0c:22:fe:ed:8a:91:5a:
89:6b:73:82:e4:60:c4:10:e0:69:ed:10:2a:f9:e6:
0a:53:c8:6f:b5:5e:7f:21:0a:cb:86:bc:89:c4:45:
aa:d1:05:f4:92:90:0c:ca:b9:74:2e:a0:9f:10:2e:
93:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:C0:D2:33:C0:FC:DD:3C:72:E9:D2:F3:2C:4D:1A:C1:96:AC:2D:ED
X509v3 Authority Key Identifier:
keyid:B4:B0:79:BA:13:CE:46:AB:EC:7F:5B:C3:F3:DD:CD:8B:B8:67:59:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tLB5uhPORqvsf1vD893Ni7hnWQU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d46a81-3735-42c6-9bbb-1d1799b59c99/1/tLB5uhPORqvsf1vD893Ni7hnWQU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d46a81-3735-42c6-9bbb-1d1799b59c99/1/tLB5uhPORqvsf1vD893Ni7hnWQU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:fd:d5:6c:3e:42:99:1c:60:21:13:8f:2b:72:f9:93:a1:e0:
4c:1b:73:27:ba:02:38:fa:06:d9:6a:77:b2:a7:1d:62:62:a8:
10:08:66:18:19:97:b3:e3:36:f5:f9:e0:45:99:db:f2:50:28:
8a:2f:c0:a0:bd:f7:f8:c2:ae:45:89:91:2d:a5:41:fb:ed:29:
65:44:a1:98:e0:eb:a2:c0:dc:98:55:e6:0b:6c:94:34:50:9a:
86:4b:2d:1a:73:cd:33:27:7e:58:28:2d:51:68:bc:58:e0:3d:
35:95:e3:df:07:4a:d3:e2:0d:a8:e1:a5:1d:91:90:a3:92:a4:
b4:18:fa:da:2e:93:9d:7b:87:b0:f6:25:a1:b2:6b:b2:52:88:
bd:ac:54:e0:a8:95:85:71:62:17:81:e0:f8:13:16:2d:f9:0f:
ea:d1:cc:90:6c:7f:fd:e4:c7:5e:c3:54:d5:68:3d:10:d3:1d:
ff:a3:b4:99:5d:7b:83:bc:1d:b9:ee:11:ad:51:18:cd:e7:dd:
d1:49:e3:4a:21:e5:1c:35:ff:5a:52:f4:c6:c9:4d:90:85:86:
aa:73:61:6d:a7:21:bd:d4:a1:9d:78:5c:6c:0d:03:bf:50:b2:
00:24:e7:94:43:b4:7f:8b:99:dd:35:99:6a:fd:5d:a0:e5:c3:
80:e6:a6:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:07:08 2025 by rpki-client