Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/5c57dd-486e-4c69-a116-f90a8dce1bfc/1/tOOoY2nvedwTz7Q3YV1JI4i_jOM.mft
File: tOOoY2nvedwTz7Q3YV1JI4i_jOM.mft (raw, json)
Hash identifier: iuEX7YW2xNN0Sk5PX2MmTA02miqLD7zglFBkWn91W7I=
Subject key identifier: 72:2A:68:95:0A:E0:8E:2D:86:16:4F:33:F7:BD:C9:16:38:8A:94:01
Authority key identifier: B4:E3:A8:63:69:EF:79:DC:13:CF:B4:37:61:5D:49:23:88:BF:8C:E3
Certificate issuer: /CN=b4e3a86369ef79dc13cfb437615d492388bf8ce3
Certificate serial: 0197BA7D52180D937A5387E75895538CF3C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tOOoY2nvedwTz7Q3YV1JI4i_jOM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/5c57dd-486e-4c69-a116-f90a8dce1bfc/1/tOOoY2nvedwTz7Q3YV1JI4i_jOM.mft
Manifest number: 0E51
Signing time: Sun 29 Jun 2025 07:01:04 +0000
Manifest this update: Sun 29 Jun 2025 07:01:04 +0000
Manifest next update: Mon 30 Jun 2025 07:01:04 +0000
Files and hashes: 1: tOOoY2nvedwTz7Q3YV1JI4i_jOM.crl (hash: 8oJgNH8YBglJd8ORI5wm5WDQ4+6hNB/KNZsYAF3J88U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/5c57dd-486e-4c69-a116-f90a8dce1bfc/1/tOOoY2nvedwTz7Q3YV1JI4i_jOM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/5c57dd-486e-4c69-a116-f90a8dce1bfc/1/tOOoY2nvedwTz7Q3YV1JI4i_jOM.mft
rsync://rpki.ripe.net/repository/DEFAULT/tOOoY2nvedwTz7Q3YV1JI4i_jOM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:7d:52:18:0d:93:7a:53:87:e7:58:95:53:8c:f3:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4e3a86369ef79dc13cfb437615d492388bf8ce3
Validity
Not Before: Jun 29 07:01:04 2025 GMT
Not After : Jun 30 07:01:04 2025 GMT
Subject: CN=722a68950ae08e2d86164f33f7bdc916388a9401
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:99:1f:d5:5d:41:0d:b1:5a:85:3d:31:a1:d7:
5a:31:c2:c0:40:a3:95:2c:59:ff:8a:1f:c3:ac:db:
e2:db:41:24:5d:7a:8b:c2:c7:55:80:51:02:af:a1:
f4:9d:34:2f:a7:a3:52:0e:17:30:65:e2:3e:0c:ad:
d9:25:5b:a7:11:1f:10:e6:95:63:cb:4c:b7:ce:e0:
87:d3:02:2a:ec:ac:0f:8c:d5:f1:a9:da:98:ac:b2:
ab:22:f1:08:f8:f0:3e:e0:e8:5a:72:e1:15:11:b2:
ae:e9:eb:1d:a1:06:5d:c0:15:4c:9b:bd:9d:58:50:
7e:98:b4:00:7c:dc:38:9e:32:3a:ff:20:09:41:26:
c8:83:c2:7e:08:34:47:3a:6a:38:23:74:50:c4:56:
3f:06:5b:d7:e0:ef:10:71:39:5d:44:55:a4:19:ce:
51:94:1e:ee:8a:c2:2a:8a:8f:8d:bb:31:7f:74:1a:
69:9b:1c:2d:34:80:54:e9:34:e6:0b:76:73:b6:da:
06:b7:e7:36:13:54:fd:b2:d2:4a:e5:af:da:56:5e:
35:68:00:78:a3:a1:23:08:5b:43:37:b3:f4:eb:eb:
4f:24:48:60:17:03:fd:66:8a:fd:ae:79:a2:80:c9:
c9:e6:f4:4a:2a:43:95:80:28:03:9e:f5:26:00:45:
80:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:2A:68:95:0A:E0:8E:2D:86:16:4F:33:F7:BD:C9:16:38:8A:94:01
X509v3 Authority Key Identifier:
keyid:B4:E3:A8:63:69:EF:79:DC:13:CF:B4:37:61:5D:49:23:88:BF:8C:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tOOoY2nvedwTz7Q3YV1JI4i_jOM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/5c57dd-486e-4c69-a116-f90a8dce1bfc/1/tOOoY2nvedwTz7Q3YV1JI4i_jOM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/5c57dd-486e-4c69-a116-f90a8dce1bfc/1/tOOoY2nvedwTz7Q3YV1JI4i_jOM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:7f:52:0b:39:c8:97:9e:d6:73:b2:e7:98:a4:57:cb:91:92:
19:fe:e8:1a:28:b3:68:b6:cf:20:d0:f9:86:0b:9d:a5:bd:ba:
da:a3:0e:69:f2:f2:00:b2:54:3b:cc:89:ef:9b:6e:d3:79:99:
53:b9:f1:c5:e9:43:a5:88:8a:56:5c:7e:76:87:20:d7:c9:63:
94:2a:cc:9f:22:58:bf:9d:aa:94:67:41:3a:5e:49:b7:7f:ca:
db:9b:71:c8:2f:b6:32:f6:5c:66:97:48:b8:c3:75:ef:16:1a:
0d:aa:ac:24:b1:88:b0:56:27:03:7e:96:10:18:30:3d:92:19:
65:ff:e8:da:db:3b:70:26:76:35:31:59:21:d4:81:2c:7a:9b:
18:08:b3:98:e3:f1:79:17:ad:e2:70:98:82:de:25:e9:f3:61:
2b:8f:d2:35:58:f0:91:47:55:17:c8:f8:0c:1c:9c:2b:40:92:
71:63:8b:d8:28:d0:10:f0:ad:c8:58:e6:63:b4:96:7a:fb:f3:
bb:71:50:9f:37:a9:b3:bf:02:bd:5d:65:b4:c9:30:ab:89:a1:
45:dd:e0:28:6b:e2:c1:9a:c3:65:b3:38:40:c8:4a:7b:fb:3c:
e8:5d:34:9f:14:f3:a3:b1:b9:da:81:6f:e1:9d:0f:a2:b8:81:
fc:91:2a:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 10:25:01 2025 by rpki-client