
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/6e000e-e755-47e6-99a8-354871a85c7a/1/tt41SvltyILzXBLU9fpnUHY6tyA.mft
File: tt41SvltyILzXBLU9fpnUHY6tyA.mft (raw, json)
Hash identifier: uaBCz73i60Pa7ZmeSKJFqj8Dyfrxsby/S+X5UMssdzQ=
Subject key identifier: B1:D6:48:1E:A0:E2:DE:6C:9E:B0:E6:55:BA:AC:42:03:BA:D1:67:7D
Authority key identifier: B6:DE:35:4A:F9:6D:C8:82:F3:5C:12:D4:F5:FA:67:50:76:3A:B7:20
Certificate issuer: /CN=b6de354af96dc882f35c12d4f5fa6750763ab720
Certificate serial: 0197C4264DB36642845259A3DAD440D3B739
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tt41SvltyILzXBLU9fpnUHY6tyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/6e000e-e755-47e6-99a8-354871a85c7a/1/tt41SvltyILzXBLU9fpnUHY6tyA.mft
Manifest number: 0CE2
Signing time: Tue 01 Jul 2025 04:02:13 +0000
Manifest this update: Tue 01 Jul 2025 04:02:13 +0000
Manifest next update: Wed 02 Jul 2025 04:02:13 +0000
Files and hashes: 1: tt41SvltyILzXBLU9fpnUHY6tyA.crl (hash: n4W5MEu3NIh/c0UVYux42OfZ0Q8csKi9Gx40880yYJs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/6e000e-e755-47e6-99a8-354871a85c7a/1/tt41SvltyILzXBLU9fpnUHY6tyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/6e000e-e755-47e6-99a8-354871a85c7a/1/tt41SvltyILzXBLU9fpnUHY6tyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tt41SvltyILzXBLU9fpnUHY6tyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c4:26:4d:b3:66:42:84:52:59:a3:da:d4:40:d3:b7:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6de354af96dc882f35c12d4f5fa6750763ab720
Validity
Not Before: Jul 1 04:02:13 2025 GMT
Not After : Jul 2 04:02:13 2025 GMT
Subject: CN=b1d6481ea0e2de6c9eb0e655baac4203bad1677d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d9:5f:de:4a:c6:fa:13:0a:e6:79:a4:4a:1e:
45:58:71:17:ea:98:24:0d:4b:6f:31:17:3a:be:ef:
73:34:fb:36:4a:c6:58:7c:90:1c:ec:aa:42:9b:1d:
30:04:c7:76:b7:92:5a:cf:67:0f:80:16:ff:fe:e1:
06:54:6d:a8:9c:33:6c:dd:f2:b0:b9:d1:7a:93:6c:
2a:04:06:6b:5b:79:4d:7e:83:6b:af:db:33:9f:45:
aa:d4:ac:54:13:d3:01:6f:55:9b:7b:3a:ef:e5:79:
39:28:8b:54:31:7d:0d:fb:f7:37:08:3e:f9:d4:ff:
db:6a:e2:6e:a5:94:2b:07:14:2f:df:52:14:df:a4:
3c:06:58:a0:e5:8f:b9:74:cd:84:16:bd:56:95:d6:
2a:19:1b:7b:d0:54:0d:7b:31:11:bd:06:dd:4d:f4:
e0:8d:82:22:ee:4f:a0:94:84:72:9c:b7:aa:bf:de:
80:21:5b:a4:4b:2c:ab:76:2b:a1:c8:be:20:3c:eb:
55:57:ec:a6:ac:e1:da:74:da:b8:be:73:fa:61:1a:
e2:02:76:01:2f:97:7b:d6:c2:23:72:3b:69:71:d3:
65:e5:ff:9d:b1:fe:f4:a0:f8:65:0d:93:6b:0d:9e:
a3:7f:f0:3e:98:7d:54:58:c2:69:31:c6:54:b7:87:
80:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:D6:48:1E:A0:E2:DE:6C:9E:B0:E6:55:BA:AC:42:03:BA:D1:67:7D
X509v3 Authority Key Identifier:
keyid:B6:DE:35:4A:F9:6D:C8:82:F3:5C:12:D4:F5:FA:67:50:76:3A:B7:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tt41SvltyILzXBLU9fpnUHY6tyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6e000e-e755-47e6-99a8-354871a85c7a/1/tt41SvltyILzXBLU9fpnUHY6tyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6e000e-e755-47e6-99a8-354871a85c7a/1/tt41SvltyILzXBLU9fpnUHY6tyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:36:42:eb:b5:43:c9:24:fd:75:e5:4a:24:71:3f:60:e2:da:
f9:3d:41:e9:45:cf:67:bd:18:d5:a7:55:38:2a:ce:ab:88:5b:
99:53:5c:e4:c4:60:0b:70:13:6a:ce:fe:f9:34:8f:fc:83:4d:
01:09:0f:4f:91:56:77:aa:e3:a2:a2:fc:97:2e:de:92:3b:88:
aa:66:6c:0f:ef:6b:0c:17:ab:ab:85:e2:dc:36:2e:b8:9c:76:
c3:da:d5:c0:e9:90:37:4d:d2:74:72:61:9b:7f:f5:16:62:ef:
d4:b1:ba:1b:72:bc:00:0d:89:5f:99:1b:75:00:73:ac:29:35:
d9:1c:ff:66:65:17:51:79:5c:5f:7f:23:a7:20:ab:15:ee:55:
6e:e4:aa:8a:24:5a:d6:60:fb:04:ff:17:92:f9:8c:b4:b9:45:
46:23:30:05:5e:e0:8e:9d:dc:f4:c9:30:f4:7b:81:57:19:1b:
bf:3e:1c:13:d0:b6:80:9b:e9:13:80:31:1c:b3:d2:59:7a:e9:
9d:80:e5:0a:97:85:64:27:04:ab:20:98:04:65:f7:38:d9:b8:
7d:6c:a7:55:9f:41:49:ee:ac:a2:18:f3:27:5d:46:c8:8c:eb:
0a:d2:24:de:5c:35:05:85:6d:d0:4c:1b:e3:18:45:7f:0e:0d:
9f:ae:6a:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 07:04:42 2025 by rpki-client