Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/b2b311-2e32-4b0d-b86c-67135d316e8c/1/t4mjDNb2wYIF_ZrKFK20K_Dckuw.mft
File: t4mjDNb2wYIF_ZrKFK20K_Dckuw.mft (raw, json)
Hash identifier: B6ILUWtdkeiar+mFAzQC8VLdOJQV34aTU9sYRumwTW0=
Subject key identifier: 79:8C:BF:65:F0:E1:37:BD:8E:D5:DC:80:22:3A:EB:0D:14:0D:2B:EA
Authority key identifier: B7:89:A3:0C:D6:F6:C1:82:05:FD:9A:CA:14:AD:B4:2B:F0:DC:92:EC
Certificate issuer: /CN=b789a30cd6f6c18205fd9aca14adb42bf0dc92ec
Certificate serial: 0197BA7EBCC8B7CC37841ED0B92CB5BB0AAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t4mjDNb2wYIF_ZrKFK20K_Dckuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/b2b311-2e32-4b0d-b86c-67135d316e8c/1/t4mjDNb2wYIF_ZrKFK20K_Dckuw.mft
Manifest number: 095C
Signing time: Sun 29 Jun 2025 07:02:37 +0000
Manifest this update: Sun 29 Jun 2025 07:02:37 +0000
Manifest next update: Mon 30 Jun 2025 07:02:37 +0000
Files and hashes: 1: t4mjDNb2wYIF_ZrKFK20K_Dckuw.crl (hash: aoEiPeoBgsc+dmcYR5IyPH66Xigr88BSjwX8pJAI00A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/b2b311-2e32-4b0d-b86c-67135d316e8c/1/t4mjDNb2wYIF_ZrKFK20K_Dckuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/b2b311-2e32-4b0d-b86c-67135d316e8c/1/t4mjDNb2wYIF_ZrKFK20K_Dckuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/t4mjDNb2wYIF_ZrKFK20K_Dckuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:7e:bc:c8:b7:cc:37:84:1e:d0:b9:2c:b5:bb:0a:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b789a30cd6f6c18205fd9aca14adb42bf0dc92ec
Validity
Not Before: Jun 29 07:02:37 2025 GMT
Not After : Jun 30 07:02:37 2025 GMT
Subject: CN=798cbf65f0e137bd8ed5dc80223aeb0d140d2bea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b3:37:7c:a6:e6:2e:8d:35:ee:13:0a:cf:99:
55:f3:93:f4:a7:31:50:2f:fe:89:2b:6b:a3:6b:d2:
5c:36:5c:0a:49:3c:85:8d:58:bf:12:6a:56:f0:66:
f2:5d:2d:12:4c:fa:72:4d:df:a6:0d:92:10:35:8d:
d4:ca:00:ff:5e:0e:d6:08:59:49:dc:cf:30:99:3e:
bf:d4:17:5f:38:03:9d:77:dd:81:82:ba:f3:67:61:
a8:31:82:7e:30:31:7a:b2:a1:27:01:48:a0:45:13:
68:1a:e1:31:d5:53:af:3a:5e:20:d3:0e:0e:d1:7d:
cc:80:7c:7c:66:b1:6a:77:8d:28:88:6e:50:a2:3a:
26:b0:da:68:22:f0:7f:20:d3:80:85:57:9f:54:8f:
91:9d:25:26:b5:2e:f6:ca:8f:df:55:fc:fb:6e:21:
db:43:fa:af:c6:2e:68:a0:f5:d1:4c:62:30:db:f5:
e7:fe:74:5a:a0:43:92:9d:7d:58:23:89:b9:4e:2c:
6f:22:31:50:3e:3a:56:4d:b4:9f:93:82:1c:59:a5:
ce:68:13:f6:88:93:a9:75:3b:45:bd:21:21:56:f0:
19:cc:e2:53:d4:e5:48:05:b5:ed:cc:c7:b6:18:3f:
6b:98:78:25:34:c1:df:e3:f6:63:af:44:2a:2f:49:
65:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:8C:BF:65:F0:E1:37:BD:8E:D5:DC:80:22:3A:EB:0D:14:0D:2B:EA
X509v3 Authority Key Identifier:
keyid:B7:89:A3:0C:D6:F6:C1:82:05:FD:9A:CA:14:AD:B4:2B:F0:DC:92:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4mjDNb2wYIF_ZrKFK20K_Dckuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b2b311-2e32-4b0d-b86c-67135d316e8c/1/t4mjDNb2wYIF_ZrKFK20K_Dckuw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b2b311-2e32-4b0d-b86c-67135d316e8c/1/t4mjDNb2wYIF_ZrKFK20K_Dckuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:c0:78:3e:38:23:32:22:72:ed:6b:22:7a:26:4c:c6:7c:e0:
06:82:15:bf:77:98:b4:4e:b4:e1:bf:8a:41:4d:19:bf:08:0a:
1f:00:ea:04:2c:3e:06:40:42:c4:42:17:4f:7d:61:f7:cf:d1:
52:56:ac:f2:12:44:03:39:c6:d4:fd:52:6e:d9:47:cc:16:65:
bc:8d:72:ca:21:18:1c:22:be:18:a7:55:87:60:29:10:ce:d3:
44:ca:cc:3f:55:88:e5:58:02:e8:7f:96:e5:6b:4f:e5:23:6d:
22:96:31:6f:9c:91:43:81:11:44:1d:af:b0:df:4c:8a:91:e3:
fd:af:4e:11:8e:fe:2f:85:2b:fc:b3:e6:7b:c3:8e:cf:ec:e8:
87:54:a5:f1:03:95:e1:4c:7b:44:c1:00:36:4d:92:9d:14:6e:
9c:87:d7:ba:e4:e7:44:3d:e5:f3:46:ce:9c:da:51:fb:0d:d8:
17:3a:21:67:67:11:93:ff:a6:83:1d:e1:e2:5a:1b:f7:74:53:
53:f1:4f:96:de:91:bd:67:6c:24:d8:93:c4:a9:d6:12:9e:cf:
8e:d8:c0:f2:23:2a:cd:0c:fb:29:1c:e4:18:62:f1:02:1b:eb:
47:0d:bb:b6:92:3c:6b:43:2f:a7:e0:ce:b7:eb:68:ef:fc:ed:
4c:05:62:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 09:10:57 2025 by rpki-client