Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/790099-2f90-43bc-bf0d-6d5496cb1a42/1/TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.mft
File: TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.mft (raw, json)
Hash identifier: ylYe7y2LS6kv4NlQNUw7E3gvEGSabP3MXtopZNblIVQ=
Subject key identifier: 18:F1:BD:98:C0:BF:EC:3D:D3:14:6C:B4:24:51:39:91:F4:BD:F0:7F
Authority key identifier: 4D:8C:0C:A9:C2:1F:A1:9D:C0:59:32:BE:FD:90:60:B1:60:ED:C5:C1
Certificate issuer: /CN=4d8c0ca9c21fa19dc05932befd9060b160edc5c1
Certificate serial: 0197B74519B1FA038FEA5A6C41215C3E8E2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/790099-2f90-43bc-bf0d-6d5496cb1a42/1/TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.mft
Manifest number: 15B2
Signing time: Sat 28 Jun 2025 16:00:48 +0000
Manifest this update: Sat 28 Jun 2025 16:00:48 +0000
Manifest next update: Sun 29 Jun 2025 16:00:48 +0000
Files and hashes: 1: TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.crl (hash: DTjT2yqzzhIp/e3MrxxQnnGfQt0yTwQJqYBYsmCZZCM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/790099-2f90-43bc-bf0d-6d5496cb1a42/1/TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/790099-2f90-43bc-bf0d-6d5496cb1a42/1/TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.mft
rsync://rpki.ripe.net/repository/DEFAULT/TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:19:b1:fa:03:8f:ea:5a:6c:41:21:5c:3e:8e:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d8c0ca9c21fa19dc05932befd9060b160edc5c1
Validity
Not Before: Jun 28 16:00:48 2025 GMT
Not After : Jun 29 16:00:48 2025 GMT
Subject: CN=18f1bd98c0bfec3dd3146cb424513991f4bdf07f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:78:ac:ea:84:75:ec:40:30:3c:a2:13:10:40:
20:11:f1:06:54:0f:9c:f8:07:48:b4:af:5b:8f:3f:
ca:68:f3:f4:97:23:a1:9b:a2:db:29:d6:19:c4:75:
98:ed:f7:2e:79:a2:3b:c0:e0:9c:db:72:ae:81:07:
6c:90:99:c8:c8:7d:7d:ac:87:be:69:ee:43:eb:92:
51:4b:63:e7:58:2b:61:55:6d:d5:e1:55:14:94:f5:
c6:fb:77:5a:87:f1:2d:7c:6e:14:c6:fe:9a:bb:b3:
b0:1b:72:e9:66:8d:50:5b:55:7a:30:fe:33:40:5c:
50:fb:c2:ff:c1:b6:7c:6f:bb:87:f9:39:2e:6a:3a:
43:96:be:26:e5:9f:7c:f5:3a:49:65:c6:23:28:94:
77:e3:91:f7:48:ac:17:04:14:cc:b4:d0:49:bd:f2:
e6:4c:22:b9:a0:a1:ed:a5:3b:f9:c6:01:1b:40:85:
1f:8d:d5:f3:19:a0:f7:6f:5e:18:1a:d9:51:b2:ea:
1d:d5:95:78:18:a2:cd:5b:6d:03:1b:ef:2a:03:37:
0f:c2:cb:d0:e0:d2:0a:ad:3e:0a:eb:4c:f7:8f:14:
62:25:d5:79:d5:97:59:36:9c:f3:92:28:6a:3f:d0:
0c:e2:06:09:35:79:3b:86:fd:45:70:7a:d1:88:01:
8e:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:F1:BD:98:C0:BF:EC:3D:D3:14:6C:B4:24:51:39:91:F4:BD:F0:7F
X509v3 Authority Key Identifier:
keyid:4D:8C:0C:A9:C2:1F:A1:9D:C0:59:32:BE:FD:90:60:B1:60:ED:C5:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/790099-2f90-43bc-bf0d-6d5496cb1a42/1/TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/790099-2f90-43bc-bf0d-6d5496cb1a42/1/TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:1b:6e:30:ad:31:d4:8a:62:c4:6f:44:bf:86:c6:c6:f3:d0:
62:59:ea:6f:17:27:ab:2f:73:59:67:b9:1e:ee:84:e7:5e:32:
59:52:b1:f5:19:5c:9e:74:e7:c1:db:b1:0e:17:14:ae:6d:a8:
08:8d:f6:63:2e:28:d1:cf:fd:61:6d:ad:33:98:5b:d1:5c:d1:
6e:8c:01:ec:ba:3a:c4:7a:cc:c9:62:a4:af:a9:67:72:ff:b8:
75:0c:0b:12:d1:30:63:7f:0f:d3:16:cf:72:1f:4b:74:e4:d0:
01:76:e1:87:77:3c:d0:be:e6:39:b9:de:1c:5b:09:af:df:65:
e0:7c:ea:39:86:80:40:3d:8b:fc:15:45:b0:de:fe:c6:5f:9c:
4f:71:36:11:07:2b:25:ea:94:5d:e5:fd:9a:87:ee:c9:15:a8:
85:7e:f0:3c:b7:a5:f0:93:27:37:c7:f4:66:47:fd:6f:e1:0f:
ce:89:49:1a:34:18:80:18:3a:82:97:f0:4f:b5:e4:0a:eb:0a:
a8:23:e2:bc:45:30:ca:78:f2:9f:71:30:c9:04:e7:e9:ff:00:
a7:a1:18:8e:d8:20:e1:2c:51:52:ef:1f:81:76:35:99:bf:b8:
7e:26:86:eb:77:f1:6b:8f:c6:f3:ed:da:c9:9b:b0:d8:95:ee:
43:41:ae:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:24:58 2025 by rpki-client