Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/e85903-7574-4ab3-b441-5267d716e4ce/1/TI3qBN5uN7GQNV4DzSYAxHIS4Y4.mft
File: TI3qBN5uN7GQNV4DzSYAxHIS4Y4.mft (raw, json)
Hash identifier: RjeB4A8d8oD82I4qfukAMnsl6D4aNSpzCeLjfGE6xcs=
Subject key identifier: 79:6A:05:B3:51:79:BC:8C:6D:8F:AC:AA:4F:E5:C2:75:38:E5:F0:AA
Authority key identifier: 4C:8D:EA:04:DE:6E:37:B1:90:35:5E:03:CD:26:00:C4:72:12:E1:8E
Certificate issuer: /CN=4c8dea04de6e37b190355e03cd2600c47212e18e
Certificate serial: 0197B7456F8F547C9BC8C28C2EFAB173EBF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TI3qBN5uN7GQNV4DzSYAxHIS4Y4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/e85903-7574-4ab3-b441-5267d716e4ce/1/TI3qBN5uN7GQNV4DzSYAxHIS4Y4.mft
Manifest number: 06A6
Signing time: Sat 28 Jun 2025 16:01:10 +0000
Manifest this update: Sat 28 Jun 2025 16:01:10 +0000
Manifest next update: Sun 29 Jun 2025 16:01:10 +0000
Files and hashes: 1: TI3qBN5uN7GQNV4DzSYAxHIS4Y4.crl (hash: VM4mcGCNwZ2ro4bB41gu1QrnANSCKlYfnxBak3V2iRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/e85903-7574-4ab3-b441-5267d716e4ce/1/TI3qBN5uN7GQNV4DzSYAxHIS4Y4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/e85903-7574-4ab3-b441-5267d716e4ce/1/TI3qBN5uN7GQNV4DzSYAxHIS4Y4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TI3qBN5uN7GQNV4DzSYAxHIS4Y4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 16:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:6f:8f:54:7c:9b:c8:c2:8c:2e:fa:b1:73:eb:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c8dea04de6e37b190355e03cd2600c47212e18e
Validity
Not Before: Jun 28 16:01:10 2025 GMT
Not After : Jun 29 16:01:10 2025 GMT
Subject: CN=796a05b35179bc8c6d8facaa4fe5c27538e5f0aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:6f:2e:c8:55:db:f7:74:23:98:8c:f0:bd:98:
3b:98:1a:54:63:42:e9:c8:49:cd:66:88:3e:ff:54:
21:5a:7f:f5:a1:2a:b3:aa:1b:f0:64:c6:9f:c3:98:
83:63:3f:ca:c8:bb:51:dc:4b:c0:39:1e:72:fd:94:
41:89:cc:82:6e:9c:34:ab:e7:c0:2e:6e:60:ab:2b:
a4:f8:4d:77:15:21:bb:09:a7:1a:1a:6b:05:3b:74:
9f:0d:3b:78:c2:a8:cc:c4:43:ae:ac:c2:61:f1:91:
34:0b:0c:ca:5d:99:ba:7d:42:9d:60:7a:6e:4c:f2:
3b:54:28:f9:15:1c:ce:05:54:86:62:69:b1:e3:0b:
c6:d8:80:bf:36:4c:61:0d:4a:9b:c0:dd:4a:d2:d0:
40:34:cf:0f:bc:6c:28:bd:f6:1e:ea:b2:14:c7:ba:
f5:90:f9:96:cd:06:ec:ed:e6:9d:a9:07:ad:d9:9e:
7f:a3:f7:09:c2:3e:27:e4:ea:89:29:ee:8f:eb:54:
a0:71:a4:5c:8b:b9:c7:5a:4d:30:85:e1:c1:11:dd:
d2:d6:47:ee:40:cd:3b:e0:46:ba:59:15:1b:2b:da:
ff:40:f5:1c:48:c3:c5:e2:1d:7a:43:b9:92:6e:d3:
de:1d:a3:d5:a3:27:4b:c8:23:1c:a8:39:29:3c:68:
a9:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:6A:05:B3:51:79:BC:8C:6D:8F:AC:AA:4F:E5:C2:75:38:E5:F0:AA
X509v3 Authority Key Identifier:
keyid:4C:8D:EA:04:DE:6E:37:B1:90:35:5E:03:CD:26:00:C4:72:12:E1:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TI3qBN5uN7GQNV4DzSYAxHIS4Y4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/e85903-7574-4ab3-b441-5267d716e4ce/1/TI3qBN5uN7GQNV4DzSYAxHIS4Y4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/e85903-7574-4ab3-b441-5267d716e4ce/1/TI3qBN5uN7GQNV4DzSYAxHIS4Y4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:c0:0b:25:d0:9e:bd:0b:6d:cc:b9:5c:b1:2a:a7:7f:20:21:
81:81:0c:3e:e9:2d:05:5e:48:bc:1f:db:01:9e:00:0f:ae:c5:
20:95:0c:18:b0:38:63:0f:34:b2:ef:e8:a9:d1:ff:70:e4:fc:
2e:50:4c:c0:a3:e0:3e:ec:a8:63:b9:71:1d:9c:f7:83:a2:6f:
48:f6:ab:77:ed:71:49:1e:0c:7c:b1:5f:f5:e4:52:76:0a:95:
d9:8f:ee:38:d1:c7:89:e2:ad:6b:be:33:67:9a:e7:e1:32:63:
bf:23:aa:69:cf:df:c9:a1:4a:1b:af:4a:3e:20:0a:ed:4a:3a:
31:52:8a:bc:f6:bc:3c:6e:53:e5:87:30:aa:5f:6e:ba:b7:5b:
8b:7c:65:c3:3a:f5:c1:93:d4:d3:3f:8f:8b:e5:e2:a1:59:0a:
76:cb:d3:02:40:65:e1:92:e1:a3:94:3d:d8:15:59:fb:1d:ca:
1d:71:19:97:5e:54:65:ce:d6:91:83:56:19:9c:cd:67:85:72:
24:20:07:8e:33:b1:48:1b:82:d7:68:ec:8a:5f:e4:09:93:d7:
37:2c:e4:d2:5f:eb:9a:62:46:7f:55:21:63:39:44:64:b2:f0:
74:41:c7:07:0d:d6:df:e7:da:a9:f2:c8:f4:c1:ef:be:22:06:
26:37:95:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 02:10:54 2025 by rpki-client