Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/fb93ea-6163-47ec-8bdc-63d90e664822/1/T_TbtnXuCOi72XQHoafv2RkZ5zg.mft
File: T_TbtnXuCOi72XQHoafv2RkZ5zg.mft (raw, json)
Hash identifier: b6GV73U0Peb+1YRpJ3Zk+0xjnCVr1ZEvsa5nW1dSAAg=
Subject key identifier: 1D:11:0E:F0:39:F7:BA:11:41:19:EE:07:A0:12:8F:9D:9A:64:36:76
Authority key identifier: 4F:F4:DB:B6:75:EE:08:E8:BB:D9:74:07:A1:A7:EF:D9:19:19:E7:38
Certificate issuer: /CN=4ff4dbb675ee08e8bbd97407a1a7efd91919e738
Certificate serial: 0197B6A16BBAD9DCB6D9AD5EAB9EC8DD9FE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T_TbtnXuCOi72XQHoafv2RkZ5zg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/fb93ea-6163-47ec-8bdc-63d90e664822/1/T_TbtnXuCOi72XQHoafv2RkZ5zg.mft
Manifest number: 0ECB
Signing time: Sat 28 Jun 2025 13:02:01 +0000
Manifest this update: Sat 28 Jun 2025 13:02:01 +0000
Manifest next update: Sun 29 Jun 2025 13:02:01 +0000
Files and hashes: 1: T_TbtnXuCOi72XQHoafv2RkZ5zg.crl (hash: XfID4CM+TtqlkiF9wbNub77fH2UWHqQ4l/E+RWMimJ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/fb93ea-6163-47ec-8bdc-63d90e664822/1/T_TbtnXuCOi72XQHoafv2RkZ5zg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/fb93ea-6163-47ec-8bdc-63d90e664822/1/T_TbtnXuCOi72XQHoafv2RkZ5zg.mft
rsync://rpki.ripe.net/repository/DEFAULT/T_TbtnXuCOi72XQHoafv2RkZ5zg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:6b:ba:d9:dc:b6:d9:ad:5e:ab:9e:c8:dd:9f:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ff4dbb675ee08e8bbd97407a1a7efd91919e738
Validity
Not Before: Jun 28 13:02:01 2025 GMT
Not After : Jun 29 13:02:01 2025 GMT
Subject: CN=1d110ef039f7ba114119ee07a0128f9d9a643676
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0e:7a:34:e0:43:23:44:82:3a:51:18:90:c7:
b7:b4:d2:0a:6b:64:6c:88:0b:ff:bc:a4:b3:e6:06:
2a:86:cf:37:dc:27:2e:5a:32:c9:e5:9f:03:1e:5f:
ad:15:d6:c2:fe:1b:43:bb:00:67:f2:cf:3e:63:04:
6b:b9:af:f9:fe:d9:11:83:27:d6:b4:d9:d7:68:56:
6f:0c:07:96:5e:71:26:17:a9:bc:4d:17:22:17:07:
74:e9:dc:5d:09:79:ae:9e:cf:c9:65:9e:dd:39:7f:
b0:3e:82:99:49:0b:32:00:47:ac:d2:01:f2:41:7f:
0e:59:f6:98:30:44:de:df:f5:23:44:08:8d:b0:3c:
0a:d6:9d:00:e9:e7:cb:b0:9d:34:40:43:b5:78:44:
7d:d4:6c:74:17:38:47:6a:3e:35:d2:b6:7c:06:4e:
d4:7f:6e:e8:3d:e7:41:64:26:6e:8a:a4:c3:38:e5:
8e:1f:02:dd:60:e9:69:c7:8c:5e:2e:2e:23:bf:a0:
61:d1:aa:82:09:7f:f5:da:55:3a:3e:cf:ed:5c:de:
42:23:94:9d:b6:ae:ba:d3:24:36:54:37:40:2c:68:
bf:78:c2:9f:42:78:d9:73:b9:37:1e:d3:d6:fe:27:
7b:eb:06:ce:4f:f5:16:63:35:35:cc:9b:13:0c:52:
0f:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:11:0E:F0:39:F7:BA:11:41:19:EE:07:A0:12:8F:9D:9A:64:36:76
X509v3 Authority Key Identifier:
keyid:4F:F4:DB:B6:75:EE:08:E8:BB:D9:74:07:A1:A7:EF:D9:19:19:E7:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T_TbtnXuCOi72XQHoafv2RkZ5zg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/fb93ea-6163-47ec-8bdc-63d90e664822/1/T_TbtnXuCOi72XQHoafv2RkZ5zg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/fb93ea-6163-47ec-8bdc-63d90e664822/1/T_TbtnXuCOi72XQHoafv2RkZ5zg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:29:0b:a4:4e:d8:de:20:bd:09:fc:0f:de:2c:b6:0d:2c:b4:
5a:d2:df:e8:39:83:6e:fa:b0:2d:10:ce:67:3b:02:9f:21:d2:
ad:33:16:ed:b9:8b:40:4d:34:78:42:a0:65:ec:2f:31:b5:c1:
77:fb:da:3a:a3:68:8c:0c:32:2b:b7:4a:29:03:1e:75:93:49:
22:c1:de:d4:2e:ce:38:d7:75:02:74:86:f9:35:4d:99:0b:a0:
92:39:da:d2:77:c3:c1:97:1b:04:62:cd:09:67:e9:80:77:5f:
dd:db:6f:3a:fd:40:c7:c6:21:2e:31:a6:cf:af:ba:a1:a2:f8:
45:d2:e9:a7:96:41:ab:9a:c7:23:aa:46:cf:30:5e:81:68:01:
92:c9:c9:7a:a9:94:db:7a:5a:06:c0:94:6f:f4:4f:09:2f:f3:
4f:80:d8:6f:30:df:40:da:16:47:4a:35:ce:cf:fa:b1:82:07:
30:16:b0:dd:86:0a:b4:72:52:84:22:3f:05:0e:be:0a:3a:e6:
b5:52:89:d9:97:65:3b:fc:44:0d:4e:d6:b9:72:2f:f0:78:d4:
96:06:fb:4b:65:2d:87:09:00:9b:32:81:ba:0d:9a:7c:6f:be:
9d:9d:7d:fb:00:e5:af:6d:46:5f:76:f6:11:21:73:71:00:35:
b5:03:db:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:00:46 2025 by rpki-client