Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/98183c-edc4-464d-bf45-8899d1058b64/1/_tSpb-HtAo1ZEtd6UAsJR4vRgyI.mft
File: _tSpb-HtAo1ZEtd6UAsJR4vRgyI.mft (raw, json)
Hash identifier: rQz7O7NdEzcORmQRUJmdv5A3pmDBCIND6ppFEDZS50U=
Subject key identifier: 66:99:F5:AF:99:91:39:17:8F:BA:BC:16:AB:CB:5E:60:C1:2A:E3:A5
Authority key identifier: FE:D4:A9:6F:E1:ED:02:8D:59:12:D7:7A:50:0B:09:47:8B:D1:83:22
Certificate issuer: /CN=fed4a96fe1ed028d5912d77a500b09478bd18322
Certificate serial: 0197B7EA557843044755D1402165607415D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_tSpb-HtAo1ZEtd6UAsJR4vRgyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/98183c-edc4-464d-bf45-8899d1058b64/1/_tSpb-HtAo1ZEtd6UAsJR4vRgyI.mft
Manifest number: 15B3
Signing time: Sat 28 Jun 2025 19:01:17 +0000
Manifest this update: Sat 28 Jun 2025 19:01:17 +0000
Manifest next update: Sun 29 Jun 2025 19:01:17 +0000
Files and hashes: 1: _tSpb-HtAo1ZEtd6UAsJR4vRgyI.crl (hash: LIvGEZ86csed0zv+d4L0xzcVID/1jlcv0VOhkF+k5BA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/98183c-edc4-464d-bf45-8899d1058b64/1/_tSpb-HtAo1ZEtd6UAsJR4vRgyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/98183c-edc4-464d-bf45-8899d1058b64/1/_tSpb-HtAo1ZEtd6UAsJR4vRgyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_tSpb-HtAo1ZEtd6UAsJR4vRgyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:55:78:43:04:47:55:d1:40:21:65:60:74:15:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fed4a96fe1ed028d5912d77a500b09478bd18322
Validity
Not Before: Jun 28 19:01:17 2025 GMT
Not After : Jun 29 19:01:17 2025 GMT
Subject: CN=6699f5af999139178fbabc16abcb5e60c12ae3a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:dd:00:30:3d:3e:30:d5:5c:80:80:92:d5:82:
59:9e:9d:ea:b7:f2:63:ba:0a:51:c9:24:72:ef:c2:
b2:7b:27:85:02:83:d2:0c:a0:f9:dd:5b:9b:38:3d:
84:74:fa:a7:41:bd:68:e1:af:58:bb:f5:d8:7b:65:
c2:94:21:e3:2e:3b:98:5e:8b:2a:75:67:62:56:8e:
f6:ce:2f:67:ae:42:e0:d8:cf:9c:16:60:6f:dd:3a:
89:2c:ee:22:6b:36:b3:df:57:29:91:68:e2:a1:64:
ff:bc:d4:62:55:4f:72:bf:1a:fd:8e:2b:aa:75:d9:
f7:00:11:c0:b4:0b:f2:9c:56:6c:a7:bc:9b:77:09:
12:ce:83:08:1c:f9:c8:45:bf:8e:da:0b:44:c2:2e:
b5:67:30:77:9a:2b:8b:d5:fe:11:fa:20:75:22:5c:
c6:4d:dc:45:65:b3:64:6f:f0:c2:20:85:66:bf:39:
cf:00:3a:50:80:12:5b:2c:a5:1f:a9:62:1e:77:dc:
ce:74:4e:66:c0:f6:4c:5a:8c:1d:db:e5:b2:b7:65:
d7:0f:d2:e3:5f:b0:84:6b:42:b6:7e:53:15:4f:2c:
5e:38:90:0c:7c:cf:e9:10:d8:fc:0c:a8:7d:b4:17:
36:78:fd:48:2e:15:46:0e:73:b6:cd:a2:9d:75:00:
32:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:99:F5:AF:99:91:39:17:8F:BA:BC:16:AB:CB:5E:60:C1:2A:E3:A5
X509v3 Authority Key Identifier:
keyid:FE:D4:A9:6F:E1:ED:02:8D:59:12:D7:7A:50:0B:09:47:8B:D1:83:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_tSpb-HtAo1ZEtd6UAsJR4vRgyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/98183c-edc4-464d-bf45-8899d1058b64/1/_tSpb-HtAo1ZEtd6UAsJR4vRgyI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/98183c-edc4-464d-bf45-8899d1058b64/1/_tSpb-HtAo1ZEtd6UAsJR4vRgyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:b5:ce:a4:93:fa:94:4a:74:10:75:ee:d2:3d:5f:fc:9d:65:
15:f5:a7:04:ab:2d:76:20:54:01:de:d9:88:b2:bd:62:27:26:
fe:65:51:85:32:5c:37:f9:b3:b7:8d:7e:e3:5d:52:bb:ac:a5:
cd:20:fc:1f:d2:97:91:3c:5e:d7:5d:8e:ec:03:07:f5:da:8d:
61:76:13:9a:41:3f:12:0b:f3:31:00:4b:68:b4:15:d1:76:4e:
bf:13:49:1a:88:58:87:f9:d4:43:57:48:a0:26:63:72:9f:6f:
35:50:41:4e:d0:04:5b:85:cd:a8:6c:12:6c:92:bd:a3:ee:2c:
7e:f7:36:15:ee:5a:90:1a:01:fb:50:55:05:2a:eb:66:26:7b:
1e:3c:de:79:26:ab:2e:bf:92:08:1f:00:05:60:95:1f:f6:89:
c1:7c:db:f1:3d:08:f0:48:f0:6f:2d:39:c4:9f:76:c8:f4:41:
ed:e4:43:e4:7e:1a:02:64:25:5e:1d:0e:db:86:05:b2:c4:3d:
be:8e:41:3e:66:29:f3:88:b5:93:8e:c4:ef:eb:82:f8:c6:3c:
76:b4:2a:e6:3c:7f:89:76:6b:03:f7:7a:56:6a:df:dd:50:02:
39:3f:c8:96:49:d8:fb:fb:16:ed:5a:56:74:cf:d7:2c:87:76:
b9:b9:64:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:52:34 2025 by rpki-client