Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/8aa081-3969-432c-98d0-821936b31518/1/tZTrtnSP3BISfD-Sfn-5sa-JJiw.mft
File: tZTrtnSP3BISfD-Sfn-5sa-JJiw.mft (raw, json)
Hash identifier: GJv7JqO6N0VbWJDuY5pttslGJZJWbd+8eMXOFSce/+g=
Subject key identifier: 0C:69:10:AA:69:7F:F4:C4:56:1A:97:76:5B:9E:CA:1A:5A:58:6C:02
Authority key identifier: B5:94:EB:B6:74:8F:DC:12:12:7C:3F:92:7E:7F:B9:B1:AF:89:26:2C
Certificate issuer: /CN=b594ebb6748fdc12127c3f927e7fb9b1af89262c
Certificate serial: 0197C6154C159021B48472BA0FED927B8FAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tZTrtnSP3BISfD-Sfn-5sa-JJiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/8aa081-3969-432c-98d0-821936b31518/1/tZTrtnSP3BISfD-Sfn-5sa-JJiw.mft
Manifest number: 15BA
Signing time: Tue 01 Jul 2025 13:02:53 +0000
Manifest this update: Tue 01 Jul 2025 13:02:53 +0000
Manifest next update: Wed 02 Jul 2025 13:02:53 +0000
Files and hashes: 1: tZTrtnSP3BISfD-Sfn-5sa-JJiw.crl (hash: xYDV2msWfSTKtIAkBEVHtiWpmyVGClWLTo7hqilu0Tk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/8aa081-3969-432c-98d0-821936b31518/1/tZTrtnSP3BISfD-Sfn-5sa-JJiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/8aa081-3969-432c-98d0-821936b31518/1/tZTrtnSP3BISfD-Sfn-5sa-JJiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tZTrtnSP3BISfD-Sfn-5sa-JJiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c6:15:4c:15:90:21:b4:84:72:ba:0f:ed:92:7b:8f:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b594ebb6748fdc12127c3f927e7fb9b1af89262c
Validity
Not Before: Jul 1 13:02:53 2025 GMT
Not After : Jul 2 13:02:53 2025 GMT
Subject: CN=0c6910aa697ff4c4561a97765b9eca1a5a586c02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:77:17:2d:15:91:ee:ef:99:72:a4:b2:ac:80:
d3:c9:0f:a2:37:f1:ef:09:89:7e:ee:2f:c4:d3:53:
4a:8b:68:48:b9:ed:3b:87:fa:f4:42:6e:ed:13:17:
b1:fb:10:c4:5f:f1:2d:30:a1:f5:06:64:a0:c7:e9:
99:55:d9:35:a8:23:dc:86:e5:d4:19:be:1e:a2:ce:
6b:e2:49:be:29:d3:52:49:35:35:16:59:50:fa:83:
e5:36:0d:c5:56:0a:fe:6e:4a:48:24:ef:36:26:d3:
d5:6f:86:8f:30:d5:08:25:ec:c3:d7:ae:68:c4:5f:
bd:2a:16:24:3a:da:fa:60:6c:db:9f:f1:f0:bb:e7:
0c:2e:cc:fe:73:53:6a:df:b3:78:38:b7:e9:0c:79:
6c:6d:16:0f:60:78:b6:68:bb:62:be:ad:ee:9a:81:
1d:8f:b4:5a:75:12:a8:86:07:70:94:cd:51:c1:5f:
71:78:fa:06:c1:0d:92:48:21:db:8e:8c:f0:27:e8:
2f:c4:91:5d:43:63:06:37:8c:94:28:a3:57:30:01:
ef:ad:54:40:25:f9:d4:5e:bc:90:4d:cf:a4:dc:73:
af:3b:54:68:b8:dd:6c:47:9e:9e:74:2c:41:64:0f:
b3:97:3d:d7:ac:55:4d:35:a4:6b:b6:cf:23:75:00:
69:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:69:10:AA:69:7F:F4:C4:56:1A:97:76:5B:9E:CA:1A:5A:58:6C:02
X509v3 Authority Key Identifier:
keyid:B5:94:EB:B6:74:8F:DC:12:12:7C:3F:92:7E:7F:B9:B1:AF:89:26:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tZTrtnSP3BISfD-Sfn-5sa-JJiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/8aa081-3969-432c-98d0-821936b31518/1/tZTrtnSP3BISfD-Sfn-5sa-JJiw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/8aa081-3969-432c-98d0-821936b31518/1/tZTrtnSP3BISfD-Sfn-5sa-JJiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:4e:23:a9:54:57:ea:b9:15:a3:f0:65:8b:6f:28:42:49:d5:
8c:25:b4:8e:51:d6:6a:75:3b:1a:bd:95:70:8d:d6:ad:5b:e0:
cc:05:8a:c9:a8:ea:2f:2f:d5:31:f1:93:15:98:e9:aa:b5:65:
c7:11:49:12:04:83:9a:76:71:6a:25:e1:95:d7:c8:99:33:e0:
47:24:15:88:80:df:14:52:b6:10:8a:af:57:ea:11:8f:62:a7:
65:6d:b7:48:85:e2:8c:70:e9:a8:eb:0b:d0:98:70:56:de:8d:
51:be:04:98:b5:98:3f:66:00:60:b0:d1:ea:9c:f1:7a:64:3c:
1f:b2:44:e9:aa:79:1f:f0:bb:ab:53:e2:53:7f:76:10:a1:6c:
47:d5:b9:ec:f6:b0:da:b0:3e:50:42:1e:66:63:80:36:f4:e0:
46:ce:74:e7:41:3a:b3:57:48:74:a6:0b:7b:cd:37:fa:70:ce:
1d:37:d6:41:54:94:d8:4c:16:69:4f:d3:f7:5d:6d:74:7a:81:
05:21:23:4e:1b:bb:b3:f1:97:c9:44:49:d3:02:d1:d4:b4:a6:
de:d1:c9:4d:f8:2a:d6:7b:a2:dd:00:b7:a5:8e:03:97:94:be:
65:2a:0b:4a:59:16:27:e9:4e:8f:e0:6f:20:af:6c:c2:fe:17:
44:ae:e0:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 16:09:13 2025 by rpki-client