Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/76768c-cd75-46a9-8d65-6cbb77baa02d/1/tkDbwv_PXWNFicBEAV1xdcuv8-0.mft
File: tkDbwv_PXWNFicBEAV1xdcuv8-0.mft (raw, json)
Hash identifier: evXmZFUmCJxlIvn/RoCw+/btqRlYfbET+5xpUDIX42o=
Subject key identifier: 3C:D2:26:ED:A6:F0:EC:34:21:46:CF:57:2E:AA:4B:BB:9A:E6:6E:93
Authority key identifier: B6:40:DB:C2:FF:CF:5D:63:45:89:C0:44:01:5D:71:75:CB:AF:F3:ED
Certificate issuer: /CN=b640dbc2ffcf5d634589c044015d7175cbaff3ed
Certificate serial: 0197B7452DE101AD0DD2B14E10A1F966100F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tkDbwv_PXWNFicBEAV1xdcuv8-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/76768c-cd75-46a9-8d65-6cbb77baa02d/1/tkDbwv_PXWNFicBEAV1xdcuv8-0.mft
Manifest number: 1054
Signing time: Sat 28 Jun 2025 16:00:53 +0000
Manifest this update: Sat 28 Jun 2025 16:00:53 +0000
Manifest next update: Sun 29 Jun 2025 16:00:53 +0000
Files and hashes: 1: tkDbwv_PXWNFicBEAV1xdcuv8-0.crl (hash: +ppdq2jnwGjIYUQs09WAk5ceuFt0SW+gQmGwoGm616U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/76768c-cd75-46a9-8d65-6cbb77baa02d/1/tkDbwv_PXWNFicBEAV1xdcuv8-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/76768c-cd75-46a9-8d65-6cbb77baa02d/1/tkDbwv_PXWNFicBEAV1xdcuv8-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/tkDbwv_PXWNFicBEAV1xdcuv8-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:2d:e1:01:ad:0d:d2:b1:4e:10:a1:f9:66:10:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b640dbc2ffcf5d634589c044015d7175cbaff3ed
Validity
Not Before: Jun 28 16:00:53 2025 GMT
Not After : Jun 29 16:00:53 2025 GMT
Subject: CN=3cd226eda6f0ec342146cf572eaa4bbb9ae66e93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:9f:bf:bd:e4:93:d8:b5:5f:45:d0:01:33:a6:
f6:af:98:b4:44:59:b6:27:dd:73:93:89:43:2c:32:
ee:c8:56:02:f1:30:59:08:eb:df:5e:a1:6e:3f:8c:
a6:5c:3c:21:8a:d6:ae:72:90:0a:b3:b9:b9:65:33:
4a:3d:52:23:d6:f8:32:12:68:2a:29:26:d5:bb:22:
fd:0a:65:ef:f9:de:cd:b3:01:62:16:be:b5:34:0b:
23:04:dc:d3:4a:e7:ff:d8:ee:b9:8f:e9:d3:65:d6:
83:07:4d:6c:cd:10:29:ef:49:e1:58:83:bb:0c:29:
f7:08:e9:3c:ef:c3:fd:ce:26:7a:ba:15:d5:fc:45:
04:80:17:3a:97:02:60:d7:d4:05:00:41:e7:b2:5e:
3f:a2:3f:59:06:fb:49:94:92:2f:7c:ff:cf:03:f2:
cf:26:52:d2:60:fd:5a:eb:27:b6:27:1f:7e:59:0a:
0a:06:69:31:72:75:21:14:3b:d4:e3:e0:73:e4:a3:
25:cc:88:41:2f:81:2f:ad:cb:f2:7f:43:42:18:d2:
1e:a9:f9:86:8d:f4:a5:df:b2:9e:11:6a:c4:f5:66:
e1:33:b5:3e:d5:9d:b9:49:69:b2:d6:80:86:55:9b:
27:25:ee:91:94:f8:eb:86:b8:44:c5:f4:e9:79:81:
d2:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:D2:26:ED:A6:F0:EC:34:21:46:CF:57:2E:AA:4B:BB:9A:E6:6E:93
X509v3 Authority Key Identifier:
keyid:B6:40:DB:C2:FF:CF:5D:63:45:89:C0:44:01:5D:71:75:CB:AF:F3:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tkDbwv_PXWNFicBEAV1xdcuv8-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/76768c-cd75-46a9-8d65-6cbb77baa02d/1/tkDbwv_PXWNFicBEAV1xdcuv8-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/76768c-cd75-46a9-8d65-6cbb77baa02d/1/tkDbwv_PXWNFicBEAV1xdcuv8-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:2c:3b:1c:0a:8d:3c:40:cb:55:40:72:a5:ff:8c:68:32:05:
bd:b2:2c:c6:d4:60:36:01:76:e2:bd:7d:18:50:25:9a:e7:fc:
7d:f3:bf:2b:48:02:cb:75:bc:33:fd:82:a8:c3:aa:52:35:38:
fd:05:c7:32:6d:cc:e2:00:50:3c:40:d1:e1:b2:8e:0c:f2:5f:
b6:10:26:b7:4c:ba:67:90:66:28:3e:88:ea:ce:08:dc:79:e7:
b8:4f:51:84:88:5f:95:c8:45:80:3b:63:c0:5b:5e:46:7a:78:
87:68:96:42:55:03:94:f0:95:d8:e6:d8:0e:4d:c9:e0:8c:01:
8b:39:1a:55:0b:78:e6:29:d8:b1:f7:e8:55:e0:f3:4c:27:66:
bf:b9:2b:9b:85:18:ac:aa:6c:06:25:45:44:d7:9b:24:84:7e:
ac:26:67:96:5a:5e:8b:76:9d:4f:06:2e:e8:c8:5d:f8:64:41:
d7:41:89:f4:ba:6c:2d:f8:b9:2b:4d:b8:0a:d3:90:07:07:4c:
00:71:6d:13:7b:1e:a4:51:b8:0d:dd:ad:34:ad:bc:4d:14:19:
dc:87:92:6d:c8:47:cc:8b:3e:fe:73:e3:ab:27:02:30:6a:69:
10:1c:b2:36:01:94:c9:7c:af:09:06:65:81:f9:96:11:d2:87:
36:b3:60:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:38:03 2025 by rpki-client