Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/e2e443-1462-4c4e-bc33-b29eff091bc6/1/TE38e6TewmWW3IrCMFqR7Y6SnGk.mft
File: TE38e6TewmWW3IrCMFqR7Y6SnGk.mft (raw, json)
Hash identifier: L5E1IN02CEF8r57gjWV4LEgXLsz2+nUttCtsksEmi5U=
Subject key identifier: 1E:C8:C8:04:CC:69:6A:21:17:FD:65:DB:9B:E3:DB:D8:76:36:D1:E7
Authority key identifier: 4C:4D:FC:7B:A4:DE:C2:65:96:DC:8A:C2:30:5A:91:ED:8E:92:9C:69
Certificate issuer: /CN=4c4dfc7ba4dec26596dc8ac2305a91ed8e929c69
Certificate serial: 0197B6A15251A2633B677F2E90197C687230
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TE38e6TewmWW3IrCMFqR7Y6SnGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/e2e443-1462-4c4e-bc33-b29eff091bc6/1/TE38e6TewmWW3IrCMFqR7Y6SnGk.mft
Manifest number: 0FE7
Signing time: Sat 28 Jun 2025 13:01:55 +0000
Manifest this update: Sat 28 Jun 2025 13:01:55 +0000
Manifest next update: Sun 29 Jun 2025 13:01:55 +0000
Files and hashes: 1: TE38e6TewmWW3IrCMFqR7Y6SnGk.crl (hash: 1fDrvkHfvyJYRu7XMiymxKGV4+tqFKFV8tl+YTVTzg8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/e2e443-1462-4c4e-bc33-b29eff091bc6/1/TE38e6TewmWW3IrCMFqR7Y6SnGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/e2e443-1462-4c4e-bc33-b29eff091bc6/1/TE38e6TewmWW3IrCMFqR7Y6SnGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TE38e6TewmWW3IrCMFqR7Y6SnGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:52:51:a2:63:3b:67:7f:2e:90:19:7c:68:72:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c4dfc7ba4dec26596dc8ac2305a91ed8e929c69
Validity
Not Before: Jun 28 13:01:55 2025 GMT
Not After : Jun 29 13:01:55 2025 GMT
Subject: CN=1ec8c804cc696a2117fd65db9be3dbd87636d1e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:20:54:fb:32:33:0d:96:78:bf:e8:16:6c:47:
bf:59:23:21:4e:a0:9c:21:11:04:0e:d3:4f:1a:24:
15:e0:9b:00:db:5a:ff:e4:e1:dc:fe:8a:17:0e:8a:
3e:22:b0:48:c5:7d:a6:76:32:ff:df:20:54:e6:09:
73:7c:27:18:72:a8:ab:8f:37:28:48:87:2e:96:20:
5d:c4:6a:6f:63:19:e9:d9:f1:fc:e6:77:0d:35:51:
0d:1b:11:bb:b8:54:b0:a6:e1:b5:86:fe:2e:68:66:
bd:04:a6:6a:cb:db:d0:6c:6a:65:ec:ed:6d:a3:32:
b8:b3:53:38:aa:f4:27:5c:2e:47:c0:59:8b:1d:49:
c1:31:86:97:06:05:ce:a1:c9:e6:96:29:41:23:a3:
c3:02:ca:8f:44:ac:ce:ed:35:c8:10:36:4e:43:ba:
d2:bc:9c:05:61:d6:ab:0e:fe:45:3b:56:40:af:80:
4d:f6:61:bc:a3:90:4a:b5:de:49:d8:b9:60:09:10:
32:89:8d:5a:b8:05:b8:2c:df:8f:01:e6:18:1c:75:
92:50:0f:fe:b0:69:93:ae:c2:91:bc:4f:9c:77:d3:
30:5f:a8:ab:61:6b:f3:09:20:3f:62:98:32:a8:a4:
af:8c:31:b7:8f:c5:42:f4:b4:dd:f4:3a:ba:0d:75:
28:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:C8:C8:04:CC:69:6A:21:17:FD:65:DB:9B:E3:DB:D8:76:36:D1:E7
X509v3 Authority Key Identifier:
keyid:4C:4D:FC:7B:A4:DE:C2:65:96:DC:8A:C2:30:5A:91:ED:8E:92:9C:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TE38e6TewmWW3IrCMFqR7Y6SnGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/e2e443-1462-4c4e-bc33-b29eff091bc6/1/TE38e6TewmWW3IrCMFqR7Y6SnGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/e2e443-1462-4c4e-bc33-b29eff091bc6/1/TE38e6TewmWW3IrCMFqR7Y6SnGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:0e:47:0d:9d:80:0b:db:87:d9:7c:19:00:a1:a9:42:08:d0:
9c:67:46:1c:92:94:a9:74:90:4c:a9:e8:2c:80:72:29:29:fc:
36:2e:0c:09:76:d6:1c:8c:9f:e2:14:3c:aa:76:5d:48:58:47:
b5:8a:88:ef:b5:ed:b0:c6:f0:56:ca:da:bb:c3:58:3b:cc:ae:
72:71:87:70:29:19:d7:e3:fd:10:dc:e0:13:7b:40:71:a9:16:
06:9a:0b:77:e3:99:9c:93:34:0c:38:70:3e:72:fc:e8:69:90:
98:ae:a1:da:4b:9c:10:b1:74:e3:77:42:12:01:09:0d:8a:6e:
e5:0a:93:b7:2d:03:5d:23:ac:da:11:23:74:bc:cc:f4:8b:00:
6f:c5:e3:17:7b:2a:a3:92:46:31:f4:79:b7:d6:d0:b3:02:8c:
d6:c0:d8:3a:a2:3b:5b:4c:64:5a:5d:2b:63:45:a2:c7:f7:32:
93:80:67:2e:66:38:4f:8e:e0:96:00:a1:fc:6e:3d:40:de:13:
1e:e1:7b:b7:0a:3c:bf:bf:88:cd:44:ed:be:0f:d7:93:22:69:
51:97:76:47:83:2a:40:a1:86:87:e7:bd:85:e9:1c:1b:9f:9d:
72:34:4b:5e:65:51:eb:4f:48:b7:8f:c0:a3:e5:a3:a6:71:0d:
74:74:b5:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:55:42 2025 by rpki-client