Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/6e000e-e755-47e6-99a8-354871a85c7a/1/tt41SvltyILzXBLU9fpnUHY6tyA.mft
File: tt41SvltyILzXBLU9fpnUHY6tyA.mft (raw, json)
Hash identifier: TTzXxHFxXgyAMknX173mHtY6dmOcqwx4620qI7echNY=
Subject key identifier: 97:2D:9E:09:B1:B5:CD:6C:85:A9:BE:DF:0F:9A:48:9F:49:00:2E:4F
Authority key identifier: B6:DE:35:4A:F9:6D:C8:82:F3:5C:12:D4:F5:FA:67:50:76:3A:B7:20
Certificate issuer: /CN=b6de354af96dc882f35c12d4f5fa6750763ab720
Certificate serial: 019896A6ED68709DDD66EDA249C98B58CA6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tt41SvltyILzXBLU9fpnUHY6tyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/6e000e-e755-47e6-99a8-354871a85c7a/1/tt41SvltyILzXBLU9fpnUHY6tyA.mft
Manifest number: 0D4F
Signing time: Mon 11 Aug 2025 01:02:58 +0000
Manifest this update: Mon 11 Aug 2025 01:02:58 +0000
Manifest next update: Tue 12 Aug 2025 01:02:58 +0000
Files and hashes: 1: tt41SvltyILzXBLU9fpnUHY6tyA.crl (hash: qh06lIyw9HYNFQFYeHxmCKjcbESlC5hfaEEU4lp7tKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/6e000e-e755-47e6-99a8-354871a85c7a/1/tt41SvltyILzXBLU9fpnUHY6tyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/6e000e-e755-47e6-99a8-354871a85c7a/1/tt41SvltyILzXBLU9fpnUHY6tyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tt41SvltyILzXBLU9fpnUHY6tyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 01:02:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:a6:ed:68:70:9d:dd:66:ed:a2:49:c9:8b:58:ca:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6de354af96dc882f35c12d4f5fa6750763ab720
Validity
Not Before: Aug 11 01:02:58 2025 GMT
Not After : Aug 12 01:02:58 2025 GMT
Subject: CN=972d9e09b1b5cd6c85a9bedf0f9a489f49002e4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:39:e9:74:5b:a8:83:60:1a:f8:0a:b0:cf:71:
60:67:ce:10:f4:0b:b3:92:93:fe:a4:2d:4c:d0:ca:
e5:ca:f5:a9:4a:69:9d:16:ff:77:71:6f:88:51:93:
c6:44:59:76:e3:46:4c:45:fa:65:b4:97:26:33:fa:
1c:54:b9:42:c8:85:9e:8b:e8:52:7d:cd:a4:a1:09:
55:f3:a9:f5:b4:d0:bc:82:10:9e:13:ec:03:f6:f0:
2b:c6:74:4c:a6:6f:d7:ae:82:45:88:6b:22:5e:42:
47:34:07:4a:90:67:b0:ab:29:37:b5:05:f7:2c:1e:
37:ca:12:3d:a9:1c:77:40:bf:8a:b9:87:f0:de:4d:
09:5c:74:05:9c:47:d0:d5:4d:cb:31:f2:d7:89:fe:
52:82:84:a1:29:39:57:76:f9:bc:62:23:9f:c7:b1:
36:c8:4b:41:43:92:d4:f9:18:be:d4:f1:1d:36:ad:
d1:31:db:7c:d2:bd:78:7e:dc:b4:36:4c:26:8c:32:
7a:b2:fb:e1:38:bb:56:a9:b4:d3:3a:04:e2:c7:53:
cc:14:63:f3:db:ff:af:3d:1e:5b:ed:c3:91:cd:a4:
0c:36:4b:3e:b3:6e:75:d2:d8:0a:d1:85:2c:af:65:
78:ad:1c:73:f6:44:5f:0f:49:b3:b1:99:91:1e:30:
c4:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:2D:9E:09:B1:B5:CD:6C:85:A9:BE:DF:0F:9A:48:9F:49:00:2E:4F
X509v3 Authority Key Identifier:
keyid:B6:DE:35:4A:F9:6D:C8:82:F3:5C:12:D4:F5:FA:67:50:76:3A:B7:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tt41SvltyILzXBLU9fpnUHY6tyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6e000e-e755-47e6-99a8-354871a85c7a/1/tt41SvltyILzXBLU9fpnUHY6tyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6e000e-e755-47e6-99a8-354871a85c7a/1/tt41SvltyILzXBLU9fpnUHY6tyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:07:9b:39:8e:18:61:94:31:14:40:c7:ca:3e:10:6b:d0:47:
6d:90:eb:0e:c7:f0:bc:3a:ae:77:5e:8d:60:db:14:9d:55:b5:
9f:90:9d:d3:50:dc:1c:c3:83:ca:c1:b6:a5:b2:1d:7e:91:40:
0a:d9:96:38:4d:ca:9d:bb:f4:6a:e0:1c:1a:ee:13:1b:74:a0:
12:29:64:a3:01:38:ef:34:e2:91:5d:74:3c:b2:7f:b3:46:55:
59:28:a0:9d:c3:14:eb:d9:c8:c7:e5:09:67:37:84:0f:fa:3f:
58:4e:c6:a9:88:9c:a0:a4:a3:90:79:8b:d4:44:14:30:aa:79:
d0:32:82:0c:fb:b5:10:d8:79:9d:9a:d6:78:fb:fb:af:44:fd:
7e:b1:8d:8e:28:18:45:4e:2f:66:7a:e3:82:68:d7:ca:78:dd:
63:62:5d:f8:09:98:7b:3b:a8:17:38:71:7c:44:ca:a9:fa:00:
fb:34:fe:80:a9:7d:77:8d:92:2e:96:09:b1:49:15:f1:de:2f:
f4:aa:3c:58:cd:99:1d:d6:69:35:13:fb:d4:bc:e1:da:24:a7:
16:ce:06:31:57:a5:81:86:2e:68:5e:87:91:c4:d3:ff:dc:fb:
b9:04:3f:f2:2e:0c:ef:04:3e:46:55:5e:10:a1:89:ef:19:d7:
5d:32:f0:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 05:52:26 2025 by rpki-client