
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/7104d4-7414-49d2-9b84-8b1a093c8c5c/1/TVP4paBndE6P43yXwcxLiH7axyA.mft
File: TVP4paBndE6P43yXwcxLiH7axyA.mft (raw, json)
Hash identifier: nvG7lwnodJdhqhBMMTbJWVZ2geq2Y3KONbKhBeUMlmA=
Subject key identifier: 36:49:AF:37:4A:EF:51:C9:66:36:9F:0E:E6:A6:18:C2:B0:B6:27:8B
Authority key identifier: 4D:53:F8:A5:A0:67:74:4E:8F:E3:7C:97:C1:CC:4B:88:7E:DA:C7:20
Certificate issuer: /CN=4d53f8a5a067744e8fe37c97c1cc4b887edac720
Certificate serial: 0198744FEE6C29AC6F058DC2C550DD86CDD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TVP4paBndE6P43yXwcxLiH7axyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/7104d4-7414-49d2-9b84-8b1a093c8c5c/1/TVP4paBndE6P43yXwcxLiH7axyA.mft
Manifest number: 1557
Signing time: Mon 04 Aug 2025 09:00:51 +0000
Manifest this update: Mon 04 Aug 2025 09:00:51 +0000
Manifest next update: Tue 05 Aug 2025 09:00:51 +0000
Files and hashes: 1: TVP4paBndE6P43yXwcxLiH7axyA.crl (hash: FFklEWmSx3a1Ao+xQux3Znpn021pXYHbHpaGc5kiHIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/7104d4-7414-49d2-9b84-8b1a093c8c5c/1/TVP4paBndE6P43yXwcxLiH7axyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/7104d4-7414-49d2-9b84-8b1a093c8c5c/1/TVP4paBndE6P43yXwcxLiH7axyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/TVP4paBndE6P43yXwcxLiH7axyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 09:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:4f:ee:6c:29:ac:6f:05:8d:c2:c5:50:dd:86:cd:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d53f8a5a067744e8fe37c97c1cc4b887edac720
Validity
Not Before: Aug 4 09:00:51 2025 GMT
Not After : Aug 5 09:00:51 2025 GMT
Subject: CN=3649af374aef51c966369f0ee6a618c2b0b6278b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:3c:8b:dc:9c:cb:5a:7f:7f:f0:71:4b:99:79:
bb:8e:79:5a:7e:c6:5d:a3:57:fe:ec:22:96:7f:8d:
09:7c:01:41:f5:2d:11:4a:a8:14:94:a4:30:27:43:
e6:7f:4a:7f:9b:0d:c7:ec:66:6b:89:a3:0e:c4:1c:
b3:28:00:a6:92:cb:30:3d:a0:6a:ef:56:59:50:cc:
f0:5e:ab:d0:e7:da:99:4f:d3:35:96:55:c7:98:e0:
de:51:cc:b2:53:5e:9d:04:a2:37:d6:fc:91:a4:0e:
e9:5b:71:89:37:ce:31:7b:00:3c:c7:51:53:9a:01:
f5:6e:88:24:3c:75:45:e3:4c:f5:3c:f2:37:93:32:
de:0c:c5:05:03:39:8d:2a:d2:8a:c3:fb:79:4d:7c:
de:44:1e:5e:18:4e:77:0f:f0:85:6b:52:3a:d7:19:
14:d5:4a:a0:ea:37:b3:a1:6f:ef:8d:40:de:be:c1:
3d:43:c7:e1:48:00:de:45:27:59:cc:c2:b9:a6:88:
bb:e3:b8:18:11:59:02:b0:a3:3b:34:ab:99:c3:a9:
12:73:db:33:a3:f3:89:e2:09:fa:31:c9:49:e5:f5:
43:7c:f4:87:2f:e1:36:44:29:e8:ed:7d:5d:e5:2c:
d7:d6:08:6b:e1:1b:7b:c4:1f:45:0e:b1:7d:fa:6a:
a3:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:49:AF:37:4A:EF:51:C9:66:36:9F:0E:E6:A6:18:C2:B0:B6:27:8B
X509v3 Authority Key Identifier:
keyid:4D:53:F8:A5:A0:67:74:4E:8F:E3:7C:97:C1:CC:4B:88:7E:DA:C7:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TVP4paBndE6P43yXwcxLiH7axyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/7104d4-7414-49d2-9b84-8b1a093c8c5c/1/TVP4paBndE6P43yXwcxLiH7axyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/7104d4-7414-49d2-9b84-8b1a093c8c5c/1/TVP4paBndE6P43yXwcxLiH7axyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:ad:1a:15:3a:bf:f4:80:86:b5:b5:be:db:cc:75:82:25:28:
48:c5:95:e6:ba:55:0f:79:32:42:b6:71:dc:5f:1f:db:1b:2f:
d0:e4:fc:8c:a7:bb:d5:2c:5f:37:ce:86:9d:3b:56:a7:ab:2c:
89:9d:3a:ab:be:d9:d2:6c:bc:9c:2b:c4:cf:52:84:b3:6a:47:
7a:bf:e5:f7:1c:72:da:e5:eb:7a:23:37:e1:28:e6:02:53:59:
45:22:a7:22:cb:de:74:e3:7f:d7:15:cb:12:ed:59:22:38:71:
91:72:fa:15:01:fa:6a:05:43:4c:ad:75:cd:be:55:0a:1f:38:
ae:48:e4:47:92:0c:85:32:67:19:91:5b:fb:a8:86:04:5b:76:
a4:79:66:f1:84:95:af:8a:1d:9a:d8:41:ff:9b:49:6b:b7:ae:
27:0f:66:6f:2c:9b:b7:77:d5:98:b9:c0:4c:11:9f:b8:a6:4a:
02:05:40:25:bc:35:31:76:df:39:ed:55:b3:32:b7:88:37:59:
b9:ea:30:b6:b6:cb:25:4c:1a:0a:9b:9d:f1:4c:de:5a:cb:b4:
60:40:a5:91:30:67:71:57:db:d5:5c:6a:d7:3c:af:0d:fd:26:
78:50:15:02:07:69:b0:2f:5a:ff:39:31:3f:b7:fa:7d:70:fe:
bc:e7:e8:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:10:48 2025 by rpki-client