Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/7104d4-7414-49d2-9b84-8b1a093c8c5c/1/TVP4paBndE6P43yXwcxLiH7axyA.mft
File: TVP4paBndE6P43yXwcxLiH7axyA.mft (raw, json)
Hash identifier: defh02eQeDgqonSjD3zprTnRIcUGHkDP6hBJu9Hjs98=
Subject key identifier: 07:88:F4:FD:F2:1A:2E:6C:7E:80:BF:70:B5:47:B9:4A:B3:9F:F1:CE
Authority key identifier: 4D:53:F8:A5:A0:67:74:4E:8F:E3:7C:97:C1:CC:4B:88:7E:DA:C7:20
Certificate issuer: /CN=4d53f8a5a067744e8fe37c97c1cc4b887edac720
Certificate serial: 0197BAEB76E927007CC607AA7579CA63FBBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TVP4paBndE6P43yXwcxLiH7axyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/7104d4-7414-49d2-9b84-8b1a093c8c5c/1/TVP4paBndE6P43yXwcxLiH7axyA.mft
Manifest number: 14F7
Signing time: Sun 29 Jun 2025 09:01:22 +0000
Manifest this update: Sun 29 Jun 2025 09:01:22 +0000
Manifest next update: Mon 30 Jun 2025 09:01:22 +0000
Files and hashes: 1: TVP4paBndE6P43yXwcxLiH7axyA.crl (hash: Jgv8cHoMxA5TpkLHCqxESymMP/yhp3HjDUBNfvTUt40=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/7104d4-7414-49d2-9b84-8b1a093c8c5c/1/TVP4paBndE6P43yXwcxLiH7axyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/7104d4-7414-49d2-9b84-8b1a093c8c5c/1/TVP4paBndE6P43yXwcxLiH7axyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/TVP4paBndE6P43yXwcxLiH7axyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:eb:76:e9:27:00:7c:c6:07:aa:75:79:ca:63:fb:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d53f8a5a067744e8fe37c97c1cc4b887edac720
Validity
Not Before: Jun 29 09:01:22 2025 GMT
Not After : Jun 30 09:01:22 2025 GMT
Subject: CN=0788f4fdf21a2e6c7e80bf70b547b94ab39ff1ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ac:45:c8:b8:6d:3c:4b:ff:8e:35:65:ca:83:
e9:e3:d8:f1:ee:b9:7f:e3:a2:1c:76:b3:5b:03:28:
59:c4:4f:33:93:0d:7e:46:d6:41:bb:34:c7:f4:14:
d6:f0:17:46:45:df:6e:df:57:ef:a1:ea:a4:56:54:
ca:57:c6:70:1e:ef:22:7e:c8:9e:96:1c:c3:ad:f1:
e1:48:2c:71:d4:33:0d:e5:f8:fd:fc:7a:1b:09:85:
80:38:70:89:30:cd:21:91:c9:3e:98:14:9c:e7:78:
39:a8:d5:b0:90:1c:09:43:94:8f:86:71:81:2b:cb:
a7:38:e0:04:c0:e4:d2:91:5c:08:f5:a5:89:ff:05:
92:65:8f:d0:56:84:ea:58:c6:39:22:07:ed:6d:d0:
9f:dd:1f:6c:10:3f:d8:2d:47:cc:b1:54:7b:26:8f:
77:ee:e9:17:6e:02:20:b3:52:23:fa:12:bf:e3:71:
46:43:4c:62:3a:dc:17:e5:92:fb:e1:3f:26:0f:b1:
cb:a9:4b:b9:b3:3f:ab:70:dd:ef:c9:09:30:ed:e8:
7d:65:1e:21:1f:17:22:fe:94:4b:8d:bf:6f:77:9a:
5c:d1:25:78:05:e6:55:a4:87:39:f1:0a:34:98:a9:
77:b0:68:18:74:13:d8:fd:ab:72:c6:5d:4b:39:61:
16:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:88:F4:FD:F2:1A:2E:6C:7E:80:BF:70:B5:47:B9:4A:B3:9F:F1:CE
X509v3 Authority Key Identifier:
keyid:4D:53:F8:A5:A0:67:74:4E:8F:E3:7C:97:C1:CC:4B:88:7E:DA:C7:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TVP4paBndE6P43yXwcxLiH7axyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/7104d4-7414-49d2-9b84-8b1a093c8c5c/1/TVP4paBndE6P43yXwcxLiH7axyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/7104d4-7414-49d2-9b84-8b1a093c8c5c/1/TVP4paBndE6P43yXwcxLiH7axyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:de:3f:57:d3:fa:5c:65:7e:7d:f9:62:3f:97:28:81:67:0a:
ff:56:0d:4a:9b:fa:69:c4:b0:41:fb:e7:87:da:a9:a9:d1:47:
b3:bd:9d:76:68:18:17:b1:b1:0f:89:78:2e:8a:3c:52:be:e2:
89:67:e8:26:12:62:d2:79:79:39:aa:85:6d:5c:99:51:5f:92:
c5:32:04:b2:97:8c:0d:0c:7f:d9:bb:25:ed:65:a5:98:c0:cf:
52:47:ba:cc:31:b5:34:3b:20:4c:47:b4:47:8d:73:87:63:32:
7e:dc:42:9d:f4:39:3a:ae:b9:83:c0:c2:83:8d:6e:34:94:af:
f0:55:89:ec:9e:3f:53:3a:9a:78:e5:36:65:f2:8d:d5:e6:e6:
eb:9f:2d:e5:08:20:c3:21:8a:4e:a0:65:ba:c4:7b:87:92:37:
de:d9:29:85:57:30:b0:0f:fb:52:32:de:15:0e:81:9c:43:bb:
aa:62:3f:c6:52:81:5a:87:8e:e5:b0:fd:8f:21:7f:2e:ee:35:
30:ba:ad:53:36:90:1b:7c:88:bd:2f:bb:5b:02:21:34:76:52:
8e:64:44:fe:15:c6:da:a2:83:95:f8:b5:96:b5:47:ab:a3:51:
21:d0:64:8f:e7:c5:51:63:dd:fd:4f:8b:5d:35:3d:b3:39:a2:
18:74:c9:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 14:28:55 2025 by rpki-client