Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/69322d-ad71-4877-a470-9ad9099de1d3/1/Tu8gTX6G_4FiSmGBKG521DOHa8c.mft
File: Tu8gTX6G_4FiSmGBKG521DOHa8c.mft (raw, json)
Hash identifier: VB96R3l3pl2DomWiDA8duwqPuIyYtYx+1O/DA+WPQR4=
Subject key identifier: 48:A4:D5:0C:3B:13:3A:03:93:60:57:C7:24:65:92:C3:CF:F2:89:5E
Authority key identifier: 4E:EF:20:4D:7E:86:FF:81:62:4A:61:81:28:6E:76:D4:33:87:6B:C7
Certificate issuer: /CN=4eef204d7e86ff81624a6181286e76d433876bc7
Certificate serial: 0197B88FF7BAE82AC5881EE4F39716C035EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tu8gTX6G_4FiSmGBKG521DOHa8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/69322d-ad71-4877-a470-9ad9099de1d3/1/Tu8gTX6G_4FiSmGBKG521DOHa8c.mft
Manifest number: 14B6
Signing time: Sat 28 Jun 2025 22:02:12 +0000
Manifest this update: Sat 28 Jun 2025 22:02:12 +0000
Manifest next update: Sun 29 Jun 2025 22:02:12 +0000
Files and hashes: 1: Tu8gTX6G_4FiSmGBKG521DOHa8c.crl (hash: 063C4VTWyEiyOKb2Bu3XAlro4P4qPgDbFIrcwzyjNiQ=)
2: shBm13sVD-3FD9e1R6_cr96dhfU.roa (hash: n/xarPDtIVC1p+Buc2MZvYZnuxYBvdgfF2U0DRag658=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/69322d-ad71-4877-a470-9ad9099de1d3/1/Tu8gTX6G_4FiSmGBKG521DOHa8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/69322d-ad71-4877-a470-9ad9099de1d3/1/Tu8gTX6G_4FiSmGBKG521DOHa8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tu8gTX6G_4FiSmGBKG521DOHa8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 22:02:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:f7:ba:e8:2a:c5:88:1e:e4:f3:97:16:c0:35:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4eef204d7e86ff81624a6181286e76d433876bc7
Validity
Not Before: Jun 28 22:02:12 2025 GMT
Not After : Jun 29 22:02:12 2025 GMT
Subject: CN=48a4d50c3b133a03936057c7246592c3cff2895e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f4:24:10:9d:b4:82:72:95:e0:25:73:8f:b6:
70:a7:9d:3b:75:45:16:4d:2d:64:40:5c:0f:73:ce:
9d:47:d6:5d:a3:af:92:b6:42:fc:f4:92:ae:65:c4:
06:2b:4f:1b:08:c6:f4:f1:55:98:e6:db:db:3e:19:
89:58:1e:bd:97:0b:61:d0:15:c7:60:6c:80:e7:b3:
9e:2c:7d:c0:fb:ac:ab:ea:9a:57:31:b4:06:34:85:
28:08:cd:39:3a:14:f2:82:72:eb:b1:71:d0:0c:a7:
bc:5a:cf:2c:3e:d9:af:5f:f8:90:51:f4:44:a6:54:
45:5c:b6:fa:b9:98:fc:58:4c:fb:d8:cb:07:73:45:
c0:dd:c5:2f:84:e3:c7:74:f0:32:f8:dd:44:35:61:
32:2a:d7:7a:f4:c8:34:28:17:82:98:fb:b5:c4:ee:
44:4c:5d:62:99:7f:61:09:c1:06:a6:11:4f:d2:71:
b7:85:7c:6a:da:f3:3f:cf:b0:8f:27:25:41:dd:a4:
63:95:6c:d1:2e:6e:b9:84:fc:21:9f:87:13:9b:5b:
e4:78:e2:7e:14:79:15:2c:7c:45:02:a1:08:5f:0d:
12:1b:17:8f:1b:12:70:3b:23:f4:5d:ec:e3:33:83:
ec:ca:0a:59:2a:c2:1b:d6:5d:25:f8:2d:8b:33:d1:
b8:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:A4:D5:0C:3B:13:3A:03:93:60:57:C7:24:65:92:C3:CF:F2:89:5E
X509v3 Authority Key Identifier:
keyid:4E:EF:20:4D:7E:86:FF:81:62:4A:61:81:28:6E:76:D4:33:87:6B:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tu8gTX6G_4FiSmGBKG521DOHa8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/69322d-ad71-4877-a470-9ad9099de1d3/1/Tu8gTX6G_4FiSmGBKG521DOHa8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/69322d-ad71-4877-a470-9ad9099de1d3/1/Tu8gTX6G_4FiSmGBKG521DOHa8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:8b:15:81:1e:25:6e:3d:74:60:37:c5:b4:2c:92:39:73:f6:
9d:96:79:1c:3a:de:f5:45:52:cf:82:d2:d8:5d:e0:2c:90:b1:
26:d9:5d:4a:17:23:4d:78:a2:48:b3:1e:cb:6f:aa:02:3a:23:
3e:5a:88:5d:ee:e3:5d:8f:dc:34:f0:cd:71:88:44:f7:ec:61:
61:8d:7d:83:89:5d:01:43:dd:f8:11:af:72:61:0f:ac:04:f7:
96:2e:67:68:b8:63:56:1d:5e:c8:f5:6b:a3:53:7a:26:2d:c8:
54:5c:d1:ff:6c:e9:ba:4b:d3:7b:1a:a6:07:e8:ee:98:9d:f7:
27:07:4a:eb:26:51:ff:93:ab:a9:b8:f1:34:42:b4:79:d2:3d:
12:b9:08:a4:9a:65:08:8d:6f:26:fc:bd:30:27:25:ae:ab:59:
de:98:ad:90:e1:69:95:12:fa:3f:d7:b4:5f:03:58:03:a9:de:
7f:1c:90:e1:f2:fa:a4:6f:9a:8a:66:4a:25:5a:ba:ea:43:36:
e6:9b:f1:f1:60:81:47:4d:b0:67:23:1a:c9:8c:2a:f7:dd:2e:
b1:49:be:28:07:d8:90:bf:38:7e:a8:15:2c:18:06:47:8a:77:
4a:16:03:4f:41:a4:4e:fe:50:56:9c:b6:65:16:2b:e1:a4:81:
d4:b4:3e:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 07:01:34 2025 by rpki-client