Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/3bc865-386b-4bea-aba0-66c98c01dfd7/1/tj8U3_NUhamVlBKGMDe4XfqfE9g.mft
File: tj8U3_NUhamVlBKGMDe4XfqfE9g.mft (raw, json)
Hash identifier: VtfGJLtAWigaJoEz6XWQca1s2UcmvRJ0m1pnvUTEPtA=
Subject key identifier: EE:D8:16:9F:47:93:74:B7:DA:62:DE:7E:A1:84:3B:CC:91:CB:DE:6F
Authority key identifier: B6:3F:14:DF:F3:54:85:A9:95:94:12:86:30:37:B8:5D:FA:9F:13:D8
Certificate issuer: /CN=b63f14dff35485a9959412863037b85dfa9f13d8
Certificate serial: 0197B9D8AD7AAB1422559D6AC24A20CF8CE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tj8U3_NUhamVlBKGMDe4XfqfE9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/3bc865-386b-4bea-aba0-66c98c01dfd7/1/tj8U3_NUhamVlBKGMDe4XfqfE9g.mft
Manifest number: 04EC
Signing time: Sun 29 Jun 2025 04:01:14 +0000
Manifest this update: Sun 29 Jun 2025 04:01:14 +0000
Manifest next update: Mon 30 Jun 2025 04:01:14 +0000
Files and hashes: 1: tj8U3_NUhamVlBKGMDe4XfqfE9g.crl (hash: 5RWKW7CeOIjI4RB18e3QRPYp4hYX6y4Tt/REX5s6F+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/3bc865-386b-4bea-aba0-66c98c01dfd7/1/tj8U3_NUhamVlBKGMDe4XfqfE9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/3bc865-386b-4bea-aba0-66c98c01dfd7/1/tj8U3_NUhamVlBKGMDe4XfqfE9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/tj8U3_NUhamVlBKGMDe4XfqfE9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:d8:ad:7a:ab:14:22:55:9d:6a:c2:4a:20:cf:8c:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b63f14dff35485a9959412863037b85dfa9f13d8
Validity
Not Before: Jun 29 04:01:14 2025 GMT
Not After : Jun 30 04:01:14 2025 GMT
Subject: CN=eed8169f479374b7da62de7ea1843bcc91cbde6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a3:56:a3:7b:b5:56:be:ca:49:d8:0a:ab:94:
dc:db:ba:4c:44:c8:aa:71:c3:f1:8e:c0:8a:7a:4a:
3f:8b:02:78:6f:47:8f:ee:2f:fb:8c:aa:fa:f6:6b:
dc:46:4e:ce:bb:03:5a:6b:6a:3a:9c:cf:7e:ad:06:
f6:ba:85:b4:6c:ee:ec:c5:33:04:b2:65:42:d4:04:
f5:e1:21:d0:33:ab:fc:00:bb:6f:cc:55:44:b4:ef:
00:be:ec:cd:2b:4e:75:c2:c6:22:30:c3:e9:96:6e:
c7:23:b7:4f:de:95:b8:10:73:7f:6c:4b:62:32:9f:
9a:fe:94:ac:d2:86:da:a2:c7:80:1f:e6:82:97:f0:
5d:40:b3:7d:50:9f:9f:26:df:f4:dc:a4:b4:a1:5c:
ed:ea:0a:fd:24:f1:7f:b6:b1:50:c7:a7:79:79:68:
c4:3d:b7:b3:ba:51:5f:77:83:eb:b7:3d:24:26:dd:
31:5b:99:8b:fb:6a:28:b4:eb:89:ea:d2:cf:bb:2a:
b2:c1:a4:88:11:41:6d:52:a0:eb:c7:d9:5f:98:d6:
4a:08:39:50:60:ec:86:b8:4e:9a:46:fc:6a:82:ad:
48:9c:9a:f7:62:79:c7:cc:9b:7f:31:74:67:b9:60:
c5:af:61:35:9b:18:b0:6e:3c:7d:8f:be:21:d2:f0:
a0:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:D8:16:9F:47:93:74:B7:DA:62:DE:7E:A1:84:3B:CC:91:CB:DE:6F
X509v3 Authority Key Identifier:
keyid:B6:3F:14:DF:F3:54:85:A9:95:94:12:86:30:37:B8:5D:FA:9F:13:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tj8U3_NUhamVlBKGMDe4XfqfE9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3bc865-386b-4bea-aba0-66c98c01dfd7/1/tj8U3_NUhamVlBKGMDe4XfqfE9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3bc865-386b-4bea-aba0-66c98c01dfd7/1/tj8U3_NUhamVlBKGMDe4XfqfE9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:fd:1b:c5:cd:46:58:c9:e5:0b:15:56:c5:7a:d9:cb:6d:fa:
ff:93:a2:ce:48:ca:dd:66:3b:9f:57:67:0d:a8:74:1d:d0:dd:
bd:f6:80:2c:fe:e3:2f:2c:7b:4f:a8:7d:20:2a:19:f4:d6:cd:
41:82:44:a4:f0:0c:eb:32:54:f9:d6:a3:30:c5:99:e0:ba:35:
84:ac:cb:40:18:9c:39:5f:a8:57:06:98:f4:92:3a:a6:e0:14:
f8:6c:41:e2:ac:c2:2d:1e:9e:dd:08:e8:0b:d8:80:e3:f8:15:
49:71:dc:5a:39:e2:6f:d8:9f:6e:be:85:51:da:6d:9b:58:06:
c9:5c:a6:89:a4:07:35:c2:36:5c:1f:4a:5b:8f:b4:6c:2e:b1:
ab:97:eb:64:45:ae:01:8f:b5:17:f9:b7:f4:cd:df:6c:8a:e7:
f7:03:06:fe:e0:06:79:3c:d8:19:6b:5e:37:67:30:ba:4a:43:
df:f9:9b:b6:fb:1e:73:6f:3a:7d:6f:e4:99:76:c7:d7:e7:92:
49:18:ec:d0:3b:8d:d7:ee:c9:96:6c:7a:e6:4b:b9:fd:2b:d6:
52:0f:7b:9f:d4:42:4f:71:8f:f5:7c:56:89:ca:b4:b3:48:d7:
0b:7b:51:77:34:c2:b3:ca:f7:2a:fd:a8:42:0c:fb:60:e4:f8:
56:78:53:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 09:32:25 2025 by rpki-client