Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/a58197-eb09-4415-a61d-abd61aa82426/1/TkifZhWfd7tY0rvH5Pwd_Z3csDQ.mft
File: TkifZhWfd7tY0rvH5Pwd_Z3csDQ.mft (raw, json)
Hash identifier: P5eXkfXUfIzlV1EV7Af0qxuxJUmdqLT+9b4mqcoqNYE=
Subject key identifier: 6F:87:88:74:EE:F8:96:E8:1E:A1:3D:72:48:C9:51:54:00:13:04:35
Authority key identifier: 4E:48:9F:66:15:9F:77:BB:58:D2:BB:C7:E4:FC:1D:FD:9D:DC:B0:34
Certificate issuer: /CN=4e489f66159f77bb58d2bbc7e4fc1dfd9ddcb034
Certificate serial: 0197B70EA9BA34C6E9590F9A0D7D59D3D4B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TkifZhWfd7tY0rvH5Pwd_Z3csDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/a58197-eb09-4415-a61d-abd61aa82426/1/TkifZhWfd7tY0rvH5Pwd_Z3csDQ.mft
Manifest number: 15B1
Signing time: Sat 28 Jun 2025 15:01:20 +0000
Manifest this update: Sat 28 Jun 2025 15:01:20 +0000
Manifest next update: Sun 29 Jun 2025 15:01:20 +0000
Files and hashes: 1: TkifZhWfd7tY0rvH5Pwd_Z3csDQ.crl (hash: Yj2BEncGLs67Y5Ss3iFA7Qrd4LRbfT3Q+EmvvbIHgpA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/a58197-eb09-4415-a61d-abd61aa82426/1/TkifZhWfd7tY0rvH5Pwd_Z3csDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/a58197-eb09-4415-a61d-abd61aa82426/1/TkifZhWfd7tY0rvH5Pwd_Z3csDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/TkifZhWfd7tY0rvH5Pwd_Z3csDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:a9:ba:34:c6:e9:59:0f:9a:0d:7d:59:d3:d4:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e489f66159f77bb58d2bbc7e4fc1dfd9ddcb034
Validity
Not Before: Jun 28 15:01:20 2025 GMT
Not After : Jun 29 15:01:20 2025 GMT
Subject: CN=6f878874eef896e81ea13d7248c9515400130435
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:9b:11:86:a9:7a:f4:aa:23:2c:b0:45:03:19:
f1:33:04:8c:b4:0c:a8:36:2d:5e:e6:07:fa:de:d1:
48:be:11:66:49:a9:06:af:bc:7a:08:da:aa:2f:14:
10:64:9c:0c:8f:da:dd:58:aa:13:41:25:24:85:29:
b3:ce:fe:fe:fa:cf:db:6c:c5:fc:10:66:83:82:08:
4a:be:2f:ab:f3:04:71:71:fb:17:4a:36:26:7e:dc:
77:8a:f4:2d:db:fb:2b:26:ee:f5:c6:19:d8:fd:38:
35:30:ca:ae:4e:86:12:df:ab:c3:0a:59:32:e7:20:
4b:aa:44:17:e8:0e:e5:19:d6:a0:f6:84:9f:ac:db:
aa:ef:a0:f7:f4:46:15:cd:28:dc:a0:6e:79:ad:6b:
34:44:69:9c:dc:bb:bc:7c:2b:32:85:59:05:49:5a:
4e:a4:76:25:c7:1a:99:76:6b:82:5f:ee:03:f8:c4:
a6:40:3b:a8:e9:f8:d0:9b:0b:2b:70:42:be:08:10:
ed:a6:59:ba:66:a5:c3:4f:2e:31:21:a0:d0:10:d0:
bd:6e:0a:e9:1f:85:dc:31:ca:1a:2d:3a:1d:51:14:
1b:3f:ed:1a:c6:66:0e:4d:25:85:95:2e:5d:13:af:
b7:ca:c9:44:13:dc:c9:f3:44:a8:a6:62:0d:31:4c:
c6:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:87:88:74:EE:F8:96:E8:1E:A1:3D:72:48:C9:51:54:00:13:04:35
X509v3 Authority Key Identifier:
keyid:4E:48:9F:66:15:9F:77:BB:58:D2:BB:C7:E4:FC:1D:FD:9D:DC:B0:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TkifZhWfd7tY0rvH5Pwd_Z3csDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a58197-eb09-4415-a61d-abd61aa82426/1/TkifZhWfd7tY0rvH5Pwd_Z3csDQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a58197-eb09-4415-a61d-abd61aa82426/1/TkifZhWfd7tY0rvH5Pwd_Z3csDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:cc:92:35:ea:28:22:e3:8b:c3:31:59:4d:16:75:8f:ee:4e:
be:43:6e:dd:a9:c3:7e:31:06:49:0c:7f:b9:5b:00:27:a5:35:
b6:79:ad:43:ca:21:d6:89:28:9f:d6:1b:e1:47:a2:4e:52:91:
77:63:e9:f4:7e:c5:bd:d4:2a:b7:4e:c1:df:ed:82:0a:ff:6f:
f3:24:cd:5f:ca:c2:c4:50:b3:c5:b9:56:b3:c3:4b:50:b6:1a:
9b:0b:36:42:a3:d6:8f:7a:07:88:cc:41:34:cc:9d:4d:41:f6:
9f:ee:3b:6e:a9:a8:ed:ee:b3:08:05:13:a3:f4:be:ff:c9:1e:
7d:83:2a:d0:35:f5:6a:c5:a5:db:a4:b3:d3:fb:37:c7:45:f1:
c6:28:10:9f:66:ec:34:bf:bc:ed:fc:fc:7d:51:8e:0c:33:76:
84:6d:ef:e0:cd:a4:b7:a7:0f:af:b7:54:ed:87:b0:5a:d9:1c:
0a:01:24:2a:f6:8d:0c:c0:e0:69:8d:bb:08:dd:a1:d0:e1:d6:
21:ff:b7:c4:5a:02:ab:1d:6f:89:c4:d9:69:81:ad:b0:49:7e:
79:86:e7:ca:f6:11:f3:d8:77:7f:b2:e1:ff:b6:6d:de:0a:98:
a5:9f:0a:bb:ef:5d:86:cb:5e:5f:6f:46:f4:09:cf:d5:d6:ba:
b1:9d:c1:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:08:36 2025 by rpki-client