Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/32619c-76a0-4a5d-b5d8-375c6b689e2f/1/TN57OL6vPGOHn_kwlz0WPx6I5-Y.mft
File: TN57OL6vPGOHn_kwlz0WPx6I5-Y.mft (raw, json)
Hash identifier: 7InhoiYhnvk44uAq8o9Tb/Wgo9DTgwhBXXLxXIWRJfY=
Subject key identifier: 30:31:11:25:7E:C7:18:25:8B:C8:62:1F:EC:B6:FB:A5:BE:53:F4:49
Authority key identifier: 4C:DE:7B:38:BE:AF:3C:63:87:9F:F9:30:97:3D:16:3F:1E:88:E7:E6
Certificate issuer: /CN=4cde7b38beaf3c63879ff930973d163f1e88e7e6
Certificate serial: 01989749E60E871C886E811FF6D573EAE611
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TN57OL6vPGOHn_kwlz0WPx6I5-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/32619c-76a0-4a5d-b5d8-375c6b689e2f/1/TN57OL6vPGOHn_kwlz0WPx6I5-Y.mft
Manifest number: 2D
Signing time: Mon 11 Aug 2025 04:00:59 +0000
Manifest this update: Mon 11 Aug 2025 04:00:59 +0000
Manifest next update: Tue 12 Aug 2025 04:00:59 +0000
Files and hashes: 1: TN57OL6vPGOHn_kwlz0WPx6I5-Y.crl (hash: Bjp3kZKuxu7sza+tX5mbzjbsgF627laULODnZU7FVNs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/32619c-76a0-4a5d-b5d8-375c6b689e2f/1/TN57OL6vPGOHn_kwlz0WPx6I5-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/32619c-76a0-4a5d-b5d8-375c6b689e2f/1/TN57OL6vPGOHn_kwlz0WPx6I5-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/TN57OL6vPGOHn_kwlz0WPx6I5-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:49:e6:0e:87:1c:88:6e:81:1f:f6:d5:73:ea:e6:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cde7b38beaf3c63879ff930973d163f1e88e7e6
Validity
Not Before: Aug 11 04:00:59 2025 GMT
Not After : Aug 12 04:00:59 2025 GMT
Subject: CN=303111257ec718258bc8621fecb6fba5be53f449
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:34:a3:ad:01:03:24:26:af:be:23:21:18:50:
19:97:aa:1c:b4:79:08:87:de:13:cf:64:c3:b4:a9:
cb:9e:90:c6:12:47:05:17:f8:62:b8:f2:67:64:00:
fe:22:c9:e6:51:3b:06:3b:a9:b2:46:40:bd:db:02:
b1:73:28:82:d8:e9:81:86:7e:3e:ad:e3:2f:43:56:
b7:08:f7:9c:5c:88:a2:79:c4:5b:7a:d8:b3:61:7a:
e0:e4:b9:6f:2b:85:d3:59:33:23:b5:8b:be:ab:47:
48:dd:f4:59:bf:40:16:6b:9b:bd:f4:28:70:21:d5:
d5:8c:ae:f1:8a:9b:e3:0c:dc:cc:82:be:c7:f5:37:
21:c2:5f:d8:d8:2a:b6:a7:18:ca:43:4c:80:9c:e7:
fb:47:89:b3:a3:c0:b2:bf:1c:ec:50:90:06:dd:c9:
a3:56:c9:1d:8c:98:bf:20:16:3f:e2:fe:c4:03:13:
d8:3a:a8:56:89:15:7b:67:8d:33:78:47:fa:0e:c8:
26:59:74:e8:bd:8e:f5:a3:84:73:6c:db:5c:72:63:
c4:36:d6:4e:1c:0b:16:4f:9b:fc:7e:b7:53:2f:3f:
44:3f:44:a8:63:24:ec:8f:ef:c8:0e:79:eb:1b:b3:
e8:c3:fc:dd:72:9a:69:a9:be:db:ab:b8:15:ab:16:
66:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:31:11:25:7E:C7:18:25:8B:C8:62:1F:EC:B6:FB:A5:BE:53:F4:49
X509v3 Authority Key Identifier:
keyid:4C:DE:7B:38:BE:AF:3C:63:87:9F:F9:30:97:3D:16:3F:1E:88:E7:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TN57OL6vPGOHn_kwlz0WPx6I5-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/32619c-76a0-4a5d-b5d8-375c6b689e2f/1/TN57OL6vPGOHn_kwlz0WPx6I5-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/32619c-76a0-4a5d-b5d8-375c6b689e2f/1/TN57OL6vPGOHn_kwlz0WPx6I5-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:f1:f2:50:28:22:02:6f:e2:90:1c:56:06:4a:96:2b:28:c9:
5c:72:7b:6f:be:fb:85:3d:17:cc:63:26:ca:17:71:44:94:61:
73:b6:db:90:78:41:7d:ec:cf:43:0c:76:5d:bd:43:b9:04:16:
84:37:a1:ba:be:7c:46:aa:0b:1b:50:84:96:7b:61:54:4b:12:
e7:32:07:d8:ba:77:55:44:e2:08:b9:3e:ef:31:ec:d6:8c:a4:
62:67:d3:66:15:8e:0d:76:f7:6d:0e:95:e1:e9:fe:01:c1:24:
9c:a2:10:c8:0f:79:03:77:39:f6:6d:cf:f6:f9:52:1d:9c:bf:
7d:d2:5a:f1:3b:6f:1c:a2:66:6c:9c:10:60:58:d9:c6:9d:20:
de:91:f3:43:03:45:83:e4:0e:4c:21:2e:1b:b8:3f:1a:23:c8:
a2:7b:d1:27:4a:c5:e9:27:07:d1:b1:19:ce:40:34:67:6e:95:
bf:ab:28:20:e0:3d:9f:80:fb:7f:80:cb:07:53:0f:0d:a1:3b:
6b:27:4f:a1:b9:da:2f:fd:d2:06:41:bf:26:7b:51:70:5d:1d:
dd:a8:74:79:b0:56:82:f5:5a:28:be:cb:dd:ae:4a:55:c1:dc:
5e:a2:d1:59:ce:47:da:20:de:4b:e9:e5:f9:8b:da:b5:bb:11:
d0:d3:15:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 09:53:49 2025 by rpki-client