Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/fdff01-762f-43a9-a4be-7bb1844014d6/1/tT8fJDLiJL3km_qxn2dTYpq1cH8.mft
File: tT8fJDLiJL3km_qxn2dTYpq1cH8.mft (raw, json)
Hash identifier: PkqYsLXdzj8NEY3g5GH+JyYaUL9yFb8i2N5REXMCJf4=
Subject key identifier: 01:6B:F1:48:78:6E:17:5F:B0:35:18:A8:93:0C:72:70:33:7D:65:0B
Authority key identifier: B5:3F:1F:24:32:E2:24:BD:E4:9B:FA:B1:9F:67:53:62:9A:B5:70:7F
Certificate issuer: /CN=b53f1f2432e224bde49bfab19f6753629ab5707f
Certificate serial: 0197B6A0B278D36768EA3CF11E1A9D998F1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tT8fJDLiJL3km_qxn2dTYpq1cH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/fdff01-762f-43a9-a4be-7bb1844014d6/1/tT8fJDLiJL3km_qxn2dTYpq1cH8.mft
Manifest number: 0C12
Signing time: Sat 28 Jun 2025 13:01:14 +0000
Manifest this update: Sat 28 Jun 2025 13:01:14 +0000
Manifest next update: Sun 29 Jun 2025 13:01:14 +0000
Files and hashes: 1: tT8fJDLiJL3km_qxn2dTYpq1cH8.crl (hash: u/9c35q5yCUbmHUPONPEHI9PVgZWe33ZXogyDTo4GzU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/fdff01-762f-43a9-a4be-7bb1844014d6/1/tT8fJDLiJL3km_qxn2dTYpq1cH8.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/fdff01-762f-43a9-a4be-7bb1844014d6/1/tT8fJDLiJL3km_qxn2dTYpq1cH8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tT8fJDLiJL3km_qxn2dTYpq1cH8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:b2:78:d3:67:68:ea:3c:f1:1e:1a:9d:99:8f:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b53f1f2432e224bde49bfab19f6753629ab5707f
Validity
Not Before: Jun 28 13:01:14 2025 GMT
Not After : Jun 29 13:01:14 2025 GMT
Subject: CN=016bf148786e175fb03518a8930c7270337d650b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:7d:88:40:a1:bc:d6:30:3f:7d:d6:9c:53:0d:
3c:9e:fa:dc:cf:42:dc:6b:a1:a0:19:5d:19:d3:a1:
7a:04:3a:97:2c:b0:47:d5:da:55:99:ed:24:d0:83:
77:91:5a:3d:82:1c:41:b1:97:df:d5:2e:34:b3:f5:
0e:83:9a:6d:98:bc:99:65:39:46:ce:66:9b:d2:23:
e7:42:74:95:e6:8d:ea:f3:34:1c:2e:26:c1:b2:b5:
1b:c1:a3:25:d0:a1:e1:c0:1c:6f:00:41:36:c2:d7:
fc:85:36:09:ca:6e:ba:35:43:83:11:58:6c:b4:f7:
17:bb:cd:dd:9f:9e:d4:4d:52:53:24:a5:c1:16:4d:
41:ab:36:03:7b:9c:9c:fa:f8:15:3c:ac:5d:8f:18:
1c:ce:dc:ff:fc:01:fa:0a:0e:97:e9:14:56:64:7e:
71:06:e4:f4:07:90:6c:f2:6f:fa:03:33:99:ee:53:
3e:d3:26:3d:10:f9:75:5a:e2:d4:63:15:d6:87:eb:
df:c3:14:7d:44:26:73:c5:fd:4e:6e:2b:9e:67:e8:
74:f9:a7:45:33:c8:bb:d5:e9:cb:44:23:f3:98:74:
36:a8:e1:d8:53:13:a2:1a:d9:22:da:f9:82:d1:85:
4a:5d:99:dc:cb:4f:3a:65:5d:ca:ef:68:4e:9d:ed:
a1:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:6B:F1:48:78:6E:17:5F:B0:35:18:A8:93:0C:72:70:33:7D:65:0B
X509v3 Authority Key Identifier:
keyid:B5:3F:1F:24:32:E2:24:BD:E4:9B:FA:B1:9F:67:53:62:9A:B5:70:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tT8fJDLiJL3km_qxn2dTYpq1cH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/fdff01-762f-43a9-a4be-7bb1844014d6/1/tT8fJDLiJL3km_qxn2dTYpq1cH8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/fdff01-762f-43a9-a4be-7bb1844014d6/1/tT8fJDLiJL3km_qxn2dTYpq1cH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:3f:43:4b:72:14:87:ee:21:f6:23:2d:58:b0:22:7d:94:9d:
66:b9:62:28:b0:7d:d3:f2:5b:e9:80:cf:97:28:96:4a:0e:2e:
a8:3f:7a:62:bf:fe:70:f8:3c:b2:b1:ba:fa:a3:89:5d:56:23:
cd:6f:bd:be:ef:28:b3:d0:51:dc:1b:f9:ec:99:6f:ba:4a:e0:
6f:01:e5:8b:c9:02:c8:35:f0:37:1e:07:76:a9:24:a7:b4:52:
d6:d3:7b:96:65:55:65:a0:c0:93:ae:76:81:35:ad:c7:99:27:
96:67:26:90:cb:60:38:bf:f2:9f:63:06:15:a1:df:4d:3e:c4:
48:8c:11:d5:f8:32:bf:39:f6:42:8e:81:b5:b8:1c:28:7d:ec:
09:bd:df:a6:be:d0:ef:d9:c6:73:46:25:2b:ea:e7:b5:fb:a1:
74:93:ee:73:9b:2b:bc:4c:e5:76:2c:54:7c:8d:bc:a4:9d:be:
d3:af:8f:7b:1e:7e:2f:c5:83:ea:55:00:2d:85:63:bb:c4:f0:
d9:56:b5:16:b1:82:cf:27:29:d2:f6:8e:15:2c:35:a7:46:a8:
65:93:fa:75:02:b1:17:87:46:9d:a2:d7:15:5f:f7:c0:b0:5f:
5b:61:a9:08:01:3a:6f:da:e6:5d:66:01:6d:5a:38:85:79:11:
d0:f7:49:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:25:56 2025 by rpki-client