Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/532065-6151-4ce0-ac6b-5d34c8575bea/1/Tuxo91FNsiFzZQCIKUsBQ7N3_CM.mft
File: Tuxo91FNsiFzZQCIKUsBQ7N3_CM.mft (raw, json)
Hash identifier: bjkoVFyJqdXk9i4CFDMsrenlfD4Ivxty6dN1lWAjtDA=
Subject key identifier: C9:FA:72:D5:FF:1B:99:B2:37:A0:EC:81:1A:45:4E:E1:BB:B9:14:89
Authority key identifier: 4E:EC:68:F7:51:4D:B2:21:73:65:00:88:29:4B:01:43:B3:77:FC:23
Certificate issuer: /CN=4eec68f7514db22173650088294b0143b377fc23
Certificate serial: 0197B70E93CC0460EE8E2A4E22850ED0B234
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tuxo91FNsiFzZQCIKUsBQ7N3_CM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/532065-6151-4ce0-ac6b-5d34c8575bea/1/Tuxo91FNsiFzZQCIKUsBQ7N3_CM.mft
Manifest number: 0637
Signing time: Sat 28 Jun 2025 15:01:15 +0000
Manifest this update: Sat 28 Jun 2025 15:01:15 +0000
Manifest next update: Sun 29 Jun 2025 15:01:15 +0000
Files and hashes: 1: Tuxo91FNsiFzZQCIKUsBQ7N3_CM.crl (hash: lvkpnFxzByC1nloZ39T3fEHRNE2+ATx6H1syR09scaE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/532065-6151-4ce0-ac6b-5d34c8575bea/1/Tuxo91FNsiFzZQCIKUsBQ7N3_CM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/532065-6151-4ce0-ac6b-5d34c8575bea/1/Tuxo91FNsiFzZQCIKUsBQ7N3_CM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tuxo91FNsiFzZQCIKUsBQ7N3_CM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:93:cc:04:60:ee:8e:2a:4e:22:85:0e:d0:b2:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4eec68f7514db22173650088294b0143b377fc23
Validity
Not Before: Jun 28 15:01:15 2025 GMT
Not After : Jun 29 15:01:15 2025 GMT
Subject: CN=c9fa72d5ff1b99b237a0ec811a454ee1bbb91489
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b1:a6:46:35:c4:33:ec:86:60:76:98:f4:86:
42:04:e9:62:20:ac:88:ea:a4:fa:9d:bc:bf:71:7c:
73:79:96:de:88:6b:31:b4:bd:c6:94:89:50:58:82:
6d:3b:67:38:e7:9b:e8:20:aa:fa:bb:68:c2:e1:7f:
55:1a:00:1b:82:65:93:00:4c:70:ec:19:ca:ce:5c:
35:b1:2b:6e:a9:8c:89:89:94:0b:4d:53:9e:a3:f1:
d3:b9:70:bc:af:ec:57:c2:01:c9:7e:89:a3:76:fe:
99:9e:96:6f:6e:2a:8e:92:eb:07:ee:68:35:e3:fa:
16:bb:eb:84:fd:25:82:37:0b:1e:31:dc:fd:3e:b9:
5b:64:dc:e4:83:5d:3a:0a:72:da:68:c9:1f:e5:92:
17:6c:35:b0:26:71:f2:a9:9e:c8:e9:1e:13:7f:93:
a1:c4:46:2d:7d:56:34:06:88:8b:22:eb:2f:ab:80:
80:ac:cd:a5:46:1a:ba:4f:0d:e8:9b:2d:83:9d:44:
b0:ad:e9:cc:54:4f:c2:07:37:65:d3:11:2e:2b:1c:
e0:78:b9:0e:c7:4a:44:36:93:dc:b3:b4:ca:47:31:
6f:ea:c5:55:13:e3:a2:90:b0:0c:29:d6:9e:dd:5b:
6d:0e:ee:98:76:7b:fc:67:cc:14:e9:d4:12:05:46:
45:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:FA:72:D5:FF:1B:99:B2:37:A0:EC:81:1A:45:4E:E1:BB:B9:14:89
X509v3 Authority Key Identifier:
keyid:4E:EC:68:F7:51:4D:B2:21:73:65:00:88:29:4B:01:43:B3:77:FC:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tuxo91FNsiFzZQCIKUsBQ7N3_CM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/532065-6151-4ce0-ac6b-5d34c8575bea/1/Tuxo91FNsiFzZQCIKUsBQ7N3_CM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/532065-6151-4ce0-ac6b-5d34c8575bea/1/Tuxo91FNsiFzZQCIKUsBQ7N3_CM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:50:d8:1f:bb:5e:de:e2:30:0e:41:5c:c1:18:7a:9d:74:6b:
1c:f9:3d:e2:b7:0a:11:52:27:47:6d:71:33:e1:22:78:d8:ee:
55:68:d7:7c:22:01:f2:05:0f:c4:9a:30:23:5e:9e:b3:d1:85:
cc:8e:c6:0d:6e:1d:08:1f:ec:6e:46:d6:f2:4d:8c:ed:38:4a:
8e:82:e4:fe:8e:fe:56:0d:f4:0b:22:48:07:98:72:64:02:3d:
ac:8b:c1:04:27:2b:41:04:8b:43:bb:ed:ac:4f:08:6b:16:5c:
1e:0c:8e:20:38:79:e2:19:df:1b:53:0d:93:11:1f:61:6c:c0:
87:62:a8:e9:f8:60:97:fa:3d:ff:67:7c:1f:8e:ff:20:4d:d0:
46:aa:2f:97:4d:87:b3:29:e2:bf:06:67:74:f9:31:60:c3:e1:
b5:b3:0b:55:17:9a:67:09:b8:9c:ed:9d:89:82:16:a0:ea:f7:
79:eb:ab:3b:38:27:74:82:e5:f0:96:04:f1:e6:18:85:ce:11:
dd:d9:a1:fb:e2:50:62:ee:05:db:2b:53:d8:79:90:f7:90:77:
9f:d2:3a:5d:7e:82:a3:32:43:19:65:b9:c8:65:1e:30:48:2f:
5b:42:aa:0a:9e:42:f8:36:d2:4e:01:35:75:8e:9a:1f:02:12:
c7:1b:9f:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:38:52 2025 by rpki-client