Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/277503-82e3-4c17-9699-712e2761daf5/1/Th1cISsoF0fIw-xuhm4Vs5TFu98.mft
File: Th1cISsoF0fIw-xuhm4Vs5TFu98.mft (raw, json)
Hash identifier: GeSgpBlY7S/kOHgVozN8AlvImF59AQ2iFktSbtcCmBc=
Subject key identifier: 24:34:97:A5:FA:42:58:84:7A:EF:10:19:0B:8E:6C:47:36:95:CF:C2
Authority key identifier: 4E:1D:5C:21:2B:28:17:47:C8:C3:EC:6E:86:6E:15:B3:94:C5:BB:DF
Certificate issuer: /CN=4e1d5c212b281747c8c3ec6e866e15b394c5bbdf
Certificate serial: 0197B933B3E1FC96EF9E43340C8E72894883
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Th1cISsoF0fIw-xuhm4Vs5TFu98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/277503-82e3-4c17-9699-712e2761daf5/1/Th1cISsoF0fIw-xuhm4Vs5TFu98.mft
Manifest number: 0CEE
Signing time: Sun 29 Jun 2025 01:01:02 +0000
Manifest this update: Sun 29 Jun 2025 01:01:02 +0000
Manifest next update: Mon 30 Jun 2025 01:01:02 +0000
Files and hashes: 1: Th1cISsoF0fIw-xuhm4Vs5TFu98.crl (hash: M1mA4xnhZgD0ZkFdwWQkKbIaXxY1OmF83QFR55lNm9c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/277503-82e3-4c17-9699-712e2761daf5/1/Th1cISsoF0fIw-xuhm4Vs5TFu98.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/277503-82e3-4c17-9699-712e2761daf5/1/Th1cISsoF0fIw-xuhm4Vs5TFu98.mft
rsync://rpki.ripe.net/repository/DEFAULT/Th1cISsoF0fIw-xuhm4Vs5TFu98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:33:b3:e1:fc:96:ef:9e:43:34:0c:8e:72:89:48:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e1d5c212b281747c8c3ec6e866e15b394c5bbdf
Validity
Not Before: Jun 29 01:01:02 2025 GMT
Not After : Jun 30 01:01:02 2025 GMT
Subject: CN=243497a5fa4258847aef10190b8e6c473695cfc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:08:f8:e7:b9:82:c2:d9:8c:7d:c6:f4:d1:3f:
4f:5f:4d:8e:a3:ab:a5:91:0c:5d:6f:0a:3c:58:d2:
f7:8a:b2:f8:09:f9:f6:23:69:f1:7e:32:ce:30:a7:
a7:84:e8:8c:ed:79:e9:55:76:c4:77:1a:1f:41:f2:
c8:4d:6a:a4:42:d7:0b:ec:a7:90:46:e8:ea:5e:4a:
4d:67:02:e6:ce:59:94:48:cd:c3:d7:5e:5a:d8:7c:
90:f2:a5:40:e8:86:8a:b3:d5:25:cc:56:55:4e:8d:
b1:b0:d4:a8:d4:b7:e7:5d:f2:c2:e4:9a:4f:79:43:
34:b3:7a:cb:11:d1:ae:43:ca:eb:9b:f2:f4:bc:b2:
40:e5:bd:7c:69:21:cc:bb:c0:76:5a:88:c5:3b:16:
6b:13:28:49:06:c7:fe:59:bb:24:ac:58:79:00:0e:
b5:c0:15:2f:c8:4f:65:48:25:2e:d4:1e:2f:ff:a4:
ff:c8:80:da:8d:10:ae:04:90:d5:a4:f3:4d:39:3c:
8f:c5:fb:73:6a:be:57:db:37:73:a9:15:e8:6b:8e:
88:4f:75:ee:79:df:d7:85:5d:33:51:cf:63:4b:82:
a2:62:5e:c3:30:e0:01:54:c4:0c:56:d9:05:bb:74:
2c:6e:0f:71:3f:0c:e1:dd:3b:34:30:d8:18:2c:6b:
a0:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:34:97:A5:FA:42:58:84:7A:EF:10:19:0B:8E:6C:47:36:95:CF:C2
X509v3 Authority Key Identifier:
keyid:4E:1D:5C:21:2B:28:17:47:C8:C3:EC:6E:86:6E:15:B3:94:C5:BB:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Th1cISsoF0fIw-xuhm4Vs5TFu98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/277503-82e3-4c17-9699-712e2761daf5/1/Th1cISsoF0fIw-xuhm4Vs5TFu98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/277503-82e3-4c17-9699-712e2761daf5/1/Th1cISsoF0fIw-xuhm4Vs5TFu98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:e5:ba:85:c5:80:30:af:92:ad:2e:cf:fe:0a:60:03:1f:9f:
3c:76:64:80:c5:64:ff:7c:67:78:44:3b:40:92:6f:e6:4b:4c:
46:e1:6e:e3:14:56:7d:a2:02:fe:58:50:29:bc:2c:19:29:31:
62:27:ef:45:27:94:da:27:99:1d:77:7d:f8:22:85:cc:50:31:
5a:6f:f5:3a:cd:0b:7e:7a:8e:e3:11:85:98:5b:2b:20:61:98:
b4:b2:b5:6e:bb:18:1e:6b:5f:f9:ac:74:89:76:71:54:33:94:
83:25:d6:0d:80:4b:15:3e:e5:89:ad:7c:da:0f:af:dd:ef:e1:
4d:ef:a1:0c:1d:35:16:3d:66:b7:0d:ec:31:9d:cf:0e:6f:dc:
d1:14:73:f0:ca:c5:30:69:8e:51:c6:04:5c:28:77:d4:88:0f:
88:b3:2a:c0:a1:2e:07:f4:75:1d:2c:26:7b:43:32:e2:c1:ee:
bd:a6:f1:4d:f2:87:47:47:2d:21:32:1a:6f:bd:9f:68:65:13:
2a:d8:ea:00:19:3a:c7:3c:19:db:a0:b2:8b:97:6c:4f:6f:8d:
62:62:f0:13:c9:45:3b:02:79:30:1d:ca:a5:3f:b5:40:62:61:
90:6f:af:41:bf:4b:f7:2f:a9:1f:38:b1:63:ba:46:87:13:c6:
4f:1a:99:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:22:00 2025 by rpki-client