Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/51e8b5-7e2c-4008-bf83-b12eb1ceaa14/1/TNN3vorxFHipq-Jx-L3i3j0zNAg.mft
File: TNN3vorxFHipq-Jx-L3i3j0zNAg.mft (raw, json)
Hash identifier: 2uc1uCMXFjrcOa1c1E1tFa+mBVkbMSq3y3EqnJm7aFI=
Subject key identifier: 0D:E0:FB:58:53:8E:03:A9:3A:BE:95:46:B6:3A:EE:FB:99:97:77:2A
Authority key identifier: 4C:D3:77:BE:8A:F1:14:78:A9:AB:E2:71:F8:BD:E2:DE:3D:33:34:08
Certificate issuer: /CN=4cd377be8af11478a9abe271f8bde2de3d333408
Certificate serial: 0197B70ED3B6E2A3C8FF3B94EF52720D9896
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TNN3vorxFHipq-Jx-L3i3j0zNAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/51e8b5-7e2c-4008-bf83-b12eb1ceaa14/1/TNN3vorxFHipq-Jx-L3i3j0zNAg.mft
Manifest number: 0805
Signing time: Sat 28 Jun 2025 15:01:31 +0000
Manifest this update: Sat 28 Jun 2025 15:01:31 +0000
Manifest next update: Sun 29 Jun 2025 15:01:31 +0000
Files and hashes: 1: TNN3vorxFHipq-Jx-L3i3j0zNAg.crl (hash: 7x/Qgf6naxIz824SP2L9AixpMtKzyTx1GdKkUbTKStc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/51e8b5-7e2c-4008-bf83-b12eb1ceaa14/1/TNN3vorxFHipq-Jx-L3i3j0zNAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/51e8b5-7e2c-4008-bf83-b12eb1ceaa14/1/TNN3vorxFHipq-Jx-L3i3j0zNAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/TNN3vorxFHipq-Jx-L3i3j0zNAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:d3:b6:e2:a3:c8:ff:3b:94:ef:52:72:0d:98:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cd377be8af11478a9abe271f8bde2de3d333408
Validity
Not Before: Jun 28 15:01:31 2025 GMT
Not After : Jun 29 15:01:31 2025 GMT
Subject: CN=0de0fb58538e03a93abe9546b63aeefb9997772a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:6f:b8:a4:56:a9:c5:e9:0b:e2:5d:b6:cd:5e:
5a:a3:d0:bb:ec:0c:ac:93:97:e6:c6:74:21:fe:60:
94:78:06:64:c6:b6:77:3b:bc:1a:f8:45:e2:40:95:
92:9f:6d:b9:45:d5:40:24:d1:9c:8d:6c:cf:de:02:
1c:3e:60:f9:21:9c:30:9a:ec:6f:33:dc:e8:c3:bf:
59:13:af:1f:b3:70:de:02:96:25:dc:81:45:d2:9f:
8c:45:5d:f6:2b:18:2c:e8:93:40:62:20:07:c5:39:
cf:8e:6d:9f:58:a8:e7:49:90:7a:7d:37:44:61:eb:
23:c5:f5:a3:70:9a:6c:ea:ca:c6:7e:1c:66:0a:10:
ee:76:9e:93:eb:8e:b5:e9:21:39:eb:84:d1:fb:61:
9a:45:6d:e6:e5:28:ec:b9:99:8f:32:de:6b:e8:a5:
8d:6f:69:24:52:9b:15:0c:ed:4e:23:80:1f:e1:00:
5d:49:e5:c1:ab:f4:93:51:cd:5a:13:3f:5e:2e:fb:
9d:cf:24:15:a3:b1:8c:63:bd:2a:90:3f:0a:4d:10:
03:40:af:8a:fd:97:4a:08:de:4b:b1:27:34:7d:5d:
e7:e7:10:ad:d1:6f:34:b2:93:e4:7e:cf:79:df:a9:
0e:8f:41:76:60:79:6f:0b:d5:43:1c:03:3b:0f:ae:
af:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:E0:FB:58:53:8E:03:A9:3A:BE:95:46:B6:3A:EE:FB:99:97:77:2A
X509v3 Authority Key Identifier:
keyid:4C:D3:77:BE:8A:F1:14:78:A9:AB:E2:71:F8:BD:E2:DE:3D:33:34:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TNN3vorxFHipq-Jx-L3i3j0zNAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/51e8b5-7e2c-4008-bf83-b12eb1ceaa14/1/TNN3vorxFHipq-Jx-L3i3j0zNAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/51e8b5-7e2c-4008-bf83-b12eb1ceaa14/1/TNN3vorxFHipq-Jx-L3i3j0zNAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:04:6f:1e:8f:ee:6c:78:ee:41:69:b3:ff:7e:64:94:01:b9:
98:11:f4:29:a0:10:68:f8:f5:20:b7:75:0d:2f:1f:76:0c:6c:
9c:f9:fe:ee:e9:83:4e:f6:24:f1:1a:a9:f3:f6:1f:5a:8f:2f:
fb:5e:43:4b:cb:f8:36:7d:5e:4a:62:9d:93:7a:dc:3c:e3:d6:
f6:bc:b0:ef:c6:f8:51:fb:32:c5:db:c5:3a:c2:39:4d:6d:b8:
c6:f6:55:11:0b:f6:f3:39:d1:6d:9b:72:43:31:6f:f8:97:6c:
33:98:db:2c:70:44:08:96:1e:aa:62:e9:3f:d3:a3:47:f7:79:
fa:6d:6c:d7:bf:ec:e3:a9:c5:6e:3b:e0:12:74:c9:8e:1a:fc:
1f:71:b2:4e:82:2c:5b:75:40:fc:81:1d:de:76:73:25:cb:29:
ef:43:c6:3c:81:90:2f:a2:fb:a6:cb:82:bc:e7:1d:bb:c6:71:
b5:c1:39:1a:57:8f:04:55:b3:cf:86:4e:0c:0c:6a:78:44:f5:
5b:8c:af:5d:83:a9:2f:0b:7d:e0:ec:7d:64:e6:8d:1f:5e:b6:
8a:e2:f1:95:8f:57:50:d6:7c:d4:72:a0:8c:07:d0:7a:30:bc:
a4:5b:7d:da:cc:bf:f0:5e:ab:fd:9d:54:a7:63:13:e6:62:44:
f8:6e:8e:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:48:05 2025 by rpki-client