Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/02f9bb-6e6a-478a-bac8-5911fe63af79/1/TeT5Z3HZH4fCG-nwDRIDJ_W78uo.mft
File: TeT5Z3HZH4fCG-nwDRIDJ_W78uo.mft (raw, json)
Hash identifier: I3XA8eTmev/XUdpsP9IAWQos8TSJ+7Kb4Li8GEhnMWA=
Subject key identifier: 3C:3C:9E:4B:4F:12:DF:65:20:47:10:27:71:6B:63:88:4B:5A:3C:1C
Authority key identifier: 4D:E4:F9:67:71:D9:1F:87:C2:1B:E9:F0:0D:12:03:27:F5:BB:F2:EA
Certificate issuer: /CN=4de4f96771d91f87c21be9f00d120327f5bbf2ea
Certificate serial: 0197B70EBB33E0431263F4B6DD8AC7AA5F27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TeT5Z3HZH4fCG-nwDRIDJ_W78uo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/02f9bb-6e6a-478a-bac8-5911fe63af79/1/TeT5Z3HZH4fCG-nwDRIDJ_W78uo.mft
Manifest number: 14B2
Signing time: Sat 28 Jun 2025 15:01:25 +0000
Manifest this update: Sat 28 Jun 2025 15:01:25 +0000
Manifest next update: Sun 29 Jun 2025 15:01:25 +0000
Files and hashes: 1: TeT5Z3HZH4fCG-nwDRIDJ_W78uo.crl (hash: kpqd8szPO1EKiwoEOfi9N6V91jOW3v6uCZmnsiNdFSw=)
2: gLQdUENVXGMq4s0E2-s0exbZJTQ.roa (hash: qPXxxb8wbYIQ57DIruVSOJKF4C7lGWbN67ERbUHU99A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/02f9bb-6e6a-478a-bac8-5911fe63af79/1/TeT5Z3HZH4fCG-nwDRIDJ_W78uo.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/02f9bb-6e6a-478a-bac8-5911fe63af79/1/TeT5Z3HZH4fCG-nwDRIDJ_W78uo.mft
rsync://rpki.ripe.net/repository/DEFAULT/TeT5Z3HZH4fCG-nwDRIDJ_W78uo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:bb:33:e0:43:12:63:f4:b6:dd:8a:c7:aa:5f:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4de4f96771d91f87c21be9f00d120327f5bbf2ea
Validity
Not Before: Jun 28 15:01:25 2025 GMT
Not After : Jun 29 15:01:25 2025 GMT
Subject: CN=3c3c9e4b4f12df6520471027716b63884b5a3c1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:a9:31:52:37:2b:aa:09:ba:9e:2f:5e:ac:91:
24:0e:43:43:3e:96:71:22:18:82:6f:f2:c6:a5:12:
b7:cb:f9:97:1c:a2:7d:f1:bd:11:6d:85:5e:bd:bc:
84:48:60:7d:97:2b:e5:bf:9a:e4:57:cb:c7:df:cf:
ea:63:47:e7:47:65:53:c6:14:e3:1c:6f:94:55:3e:
29:1b:a9:af:fc:09:43:a8:0a:ff:52:b3:7c:4b:1e:
39:f2:11:c4:52:7d:f7:06:d3:40:b7:11:b1:d1:d3:
fb:8a:8d:ce:78:7a:b1:04:5a:a1:90:a4:db:fe:c5:
c7:cd:81:d5:c8:c9:6a:d5:2f:b2:d7:c4:98:9b:bf:
85:1e:15:8f:7c:40:08:fb:25:4b:ab:c5:99:00:93:
7b:b8:88:48:96:0d:bd:f3:57:dc:c5:46:d4:9d:1d:
67:ff:48:f6:68:ed:05:96:64:12:85:6d:c4:39:e8:
41:03:79:ed:87:0b:dd:61:b5:72:5f:30:b4:c2:1f:
d0:3a:24:82:cc:6d:ee:d0:d1:82:40:23:15:bb:d8:
6f:76:13:7b:2c:f1:f3:56:cf:a2:67:7b:2b:c1:0b:
f4:f1:aa:f7:1e:f0:e8:00:c6:ac:25:cb:56:ec:6c:
76:7a:bd:49:45:30:00:37:b4:44:c2:02:70:69:51:
51:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:3C:9E:4B:4F:12:DF:65:20:47:10:27:71:6B:63:88:4B:5A:3C:1C
X509v3 Authority Key Identifier:
keyid:4D:E4:F9:67:71:D9:1F:87:C2:1B:E9:F0:0D:12:03:27:F5:BB:F2:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TeT5Z3HZH4fCG-nwDRIDJ_W78uo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/02f9bb-6e6a-478a-bac8-5911fe63af79/1/TeT5Z3HZH4fCG-nwDRIDJ_W78uo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/02f9bb-6e6a-478a-bac8-5911fe63af79/1/TeT5Z3HZH4fCG-nwDRIDJ_W78uo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:a8:87:99:7d:31:23:fd:54:d1:bd:6e:3d:75:05:b4:d5:c2:
9f:65:58:cc:2a:3c:53:e9:d4:9f:06:83:3c:da:32:29:90:f7:
89:e4:22:38:08:f5:17:bf:08:37:db:9f:7c:e7:55:90:df:c0:
d0:6a:e9:5e:2a:18:cd:35:9f:38:d1:48:64:64:4d:0d:7e:b3:
fd:2d:de:ec:65:05:c1:6e:03:2e:4f:f9:ee:0c:59:71:f1:20:
2f:ed:90:86:02:d6:da:df:c6:c0:fd:a7:ea:fc:9f:05:0f:7d:
81:d9:30:9e:ce:60:71:c3:e5:8d:39:31:91:e1:1c:ec:a5:ed:
b9:c8:91:d4:00:f6:8b:1a:d0:2f:c4:46:57:8b:21:f4:5e:4e:
66:40:46:4b:ba:3a:80:c4:34:43:50:52:6c:f4:d6:50:7a:87:
fb:c7:2c:2d:73:9e:23:40:b5:b3:85:2d:1b:00:5e:5a:0f:19:
eb:40:e8:fb:a3:9f:9c:84:33:1a:b8:b4:79:24:2e:5e:a6:65:
b2:bc:0f:b1:6d:ea:ba:ae:22:de:bf:35:1b:01:df:46:6b:bf:
66:7b:e7:05:66:27:4a:0d:c9:5f:d8:00:71:75:df:e7:f0:8f:
c5:1b:3c:39:7d:6a:b3:51:3c:73:2d:62:63:b8:2d:16:81:e3:
0f:3b:9c:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:57:32 2025 by rpki-client