Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/f89fbd-5142-4bcc-bab1-994ef87db3a3/1/tIO8CnGlLQzzmJUiNnV1lZ69zvU.mft
File: tIO8CnGlLQzzmJUiNnV1lZ69zvU.mft (raw, json)
Hash identifier: rHE58OOF+TBEYkboHedqFLH7GgAj5HWMSkKFQRoqmmA=
Subject key identifier: F6:A4:C4:D4:B4:F1:06:B9:AE:D8:AE:AF:A9:02:D6:DE:6E:F5:35:3D
Authority key identifier: B4:83:BC:0A:71:A5:2D:0C:F3:98:95:22:36:75:75:95:9E:BD:CE:F5
Certificate issuer: /CN=b483bc0a71a52d0cf3989522367575959ebdcef5
Certificate serial: 0197CA5EB155A489073BEB09182FE5D4C290
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tIO8CnGlLQzzmJUiNnV1lZ69zvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/f89fbd-5142-4bcc-bab1-994ef87db3a3/1/tIO8CnGlLQzzmJUiNnV1lZ69zvU.mft
Manifest number: 154D
Signing time: Wed 02 Jul 2025 09:01:32 +0000
Manifest this update: Wed 02 Jul 2025 09:01:32 +0000
Manifest next update: Thu 03 Jul 2025 09:01:32 +0000
Files and hashes: 1: tIO8CnGlLQzzmJUiNnV1lZ69zvU.crl (hash: d1KhBgxwGHLQEz1oP/M/uQV1GZ5/IJr2T2vOvOcztOw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/f89fbd-5142-4bcc-bab1-994ef87db3a3/1/tIO8CnGlLQzzmJUiNnV1lZ69zvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/f89fbd-5142-4bcc-bab1-994ef87db3a3/1/tIO8CnGlLQzzmJUiNnV1lZ69zvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tIO8CnGlLQzzmJUiNnV1lZ69zvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 09:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ca:5e:b1:55:a4:89:07:3b:eb:09:18:2f:e5:d4:c2:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b483bc0a71a52d0cf3989522367575959ebdcef5
Validity
Not Before: Jul 2 09:01:32 2025 GMT
Not After : Jul 3 09:01:32 2025 GMT
Subject: CN=f6a4c4d4b4f106b9aed8aeafa902d6de6ef5353d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:be:32:58:5e:12:9e:53:44:82:85:d9:dd:71:
e3:4f:30:1d:16:4f:53:c1:ee:53:f5:95:0f:ab:57:
85:f6:79:99:b6:ab:dd:c6:5a:04:4a:81:e3:5b:28:
8b:ab:e4:33:65:9d:2a:94:0e:90:64:fa:47:f1:c3:
a0:37:5d:19:75:c5:21:ce:f3:80:9c:aa:0e:9d:93:
4b:cb:e3:a9:2e:38:ee:9c:a9:46:b9:20:fe:d4:b7:
eb:a8:46:1a:ad:ef:32:56:85:8a:ee:d6:4e:9d:54:
96:2c:95:15:b6:55:c4:52:ce:ca:58:c3:31:e4:f3:
5e:81:29:ba:af:56:72:fe:22:53:31:45:87:b5:65:
42:21:36:6b:34:e9:1c:26:04:21:88:3e:4d:71:96:
97:92:77:e6:c8:21:aa:82:18:d8:70:03:ef:93:42:
3c:4f:4d:b7:a2:c9:fa:b6:d0:1a:2c:0b:fa:d4:8f:
8b:81:45:b4:ef:b6:a6:bb:1d:1a:a6:32:29:99:f1:
ad:3b:9f:81:bd:43:fc:f3:d6:1a:d9:62:7f:f5:fd:
1d:b2:94:a6:f2:0c:49:af:68:b1:c6:1a:31:f9:8d:
e9:cc:7d:2b:94:e8:81:b3:af:6a:60:81:e5:a5:1d:
d5:f2:46:ad:3a:a1:f5:a0:ee:91:ea:29:1f:7c:b0:
04:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:A4:C4:D4:B4:F1:06:B9:AE:D8:AE:AF:A9:02:D6:DE:6E:F5:35:3D
X509v3 Authority Key Identifier:
keyid:B4:83:BC:0A:71:A5:2D:0C:F3:98:95:22:36:75:75:95:9E:BD:CE:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tIO8CnGlLQzzmJUiNnV1lZ69zvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f89fbd-5142-4bcc-bab1-994ef87db3a3/1/tIO8CnGlLQzzmJUiNnV1lZ69zvU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f89fbd-5142-4bcc-bab1-994ef87db3a3/1/tIO8CnGlLQzzmJUiNnV1lZ69zvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:21:21:8f:42:c1:bd:73:63:67:9c:d1:bd:5f:d4:17:ad:40:
ce:b9:61:46:64:d5:8d:b2:9a:38:5e:dc:3e:ab:9e:77:89:cb:
70:60:04:b8:fd:32:ae:21:4b:70:0e:84:ae:48:a8:f4:50:57:
46:54:e0:a8:53:bb:a9:84:c1:cf:f1:e3:e9:be:1f:09:45:fd:
da:8d:4a:5b:ce:df:1b:3c:74:b5:27:7b:bc:b9:2e:a0:7f:47:
2c:0d:d0:32:54:74:c5:d0:fd:c5:5e:b3:47:24:00:f4:40:77:
f2:97:85:36:d5:ad:22:05:62:04:0b:f8:91:ca:96:a6:5d:dd:
5f:06:92:0c:b6:f4:2f:b0:64:f5:7c:b1:f0:00:36:a1:9f:85:
54:bf:2d:b8:c9:1b:98:38:88:45:83:82:ad:c6:cd:82:b8:f5:
06:66:34:48:c3:8e:40:06:e3:ad:fb:4a:e8:fa:48:b7:a7:56:
c2:95:8d:e7:6d:74:50:82:f5:71:52:c1:ae:43:71:2e:90:6d:
5b:31:58:1f:29:37:62:de:34:81:af:ff:ff:c7:0b:0e:b9:35:
8b:84:6a:22:4b:6f:0e:37:e0:24:2e:4c:8a:11:6e:8a:88:5f:
dd:ff:7f:6d:82:3b:cb:c3:e2:e0:2f:1c:92:b0:46:d4:99:4a:
50:cc:f3:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 12:20:58 2025 by rpki-client