Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/e94ce1-0d7b-431b-9143-fc3f5ec14a5b/1/TsRiBLT4hZI6pKl4btWsr7HACd4.mft
File: TsRiBLT4hZI6pKl4btWsr7HACd4.mft (raw, json)
Hash identifier: xoIpjb74fGQZJnKjsqnqkeU5T2X7A/tF4eCyclMQqC0=
Subject key identifier: 8E:F9:10:FB:D0:90:1C:42:FB:D1:33:67:E7:66:2C:7C:CE:09:9F:2A
Authority key identifier: 4E:C4:62:04:B4:F8:85:92:3A:A4:A9:78:6E:D5:AC:AF:B1:C0:09:DE
Certificate issuer: /CN=4ec46204b4f885923aa4a9786ed5acafb1c009de
Certificate serial: 0198752B9517B99827DE393DD41F5E5F65CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TsRiBLT4hZI6pKl4btWsr7HACd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/e94ce1-0d7b-431b-9143-fc3f5ec14a5b/1/TsRiBLT4hZI6pKl4btWsr7HACd4.mft
Manifest number: 0AE7
Signing time: Mon 04 Aug 2025 13:00:47 +0000
Manifest this update: Mon 04 Aug 2025 13:00:47 +0000
Manifest next update: Tue 05 Aug 2025 13:00:47 +0000
Files and hashes: 1: TsRiBLT4hZI6pKl4btWsr7HACd4.crl (hash: lNzyZoGn0iwqSoeCwhluASNK80JDswxHKEFVE5LRZcY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/e94ce1-0d7b-431b-9143-fc3f5ec14a5b/1/TsRiBLT4hZI6pKl4btWsr7HACd4.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/e94ce1-0d7b-431b-9143-fc3f5ec14a5b/1/TsRiBLT4hZI6pKl4btWsr7HACd4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TsRiBLT4hZI6pKl4btWsr7HACd4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:2b:95:17:b9:98:27:de:39:3d:d4:1f:5e:5f:65:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ec46204b4f885923aa4a9786ed5acafb1c009de
Validity
Not Before: Aug 4 13:00:47 2025 GMT
Not After : Aug 5 13:00:47 2025 GMT
Subject: CN=8ef910fbd0901c42fbd13367e7662c7cce099f2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:30:3b:f1:dc:05:cf:0e:8e:d9:f5:58:cb:02:
b3:84:2d:9d:70:5b:5e:6c:29:3b:21:f6:d0:a8:a2:
0d:69:48:3a:39:a5:96:ce:5c:56:8e:12:54:51:06:
7c:36:ee:fc:11:30:f1:96:f7:d4:7d:72:d8:82:7d:
44:68:77:34:f3:77:6c:04:e6:45:4e:02:88:2f:ad:
70:44:21:4b:22:09:c3:fd:0d:ce:9f:6b:b7:9b:a0:
11:9a:a1:17:b2:3a:f9:9b:af:5c:73:30:c2:b7:57:
46:ba:c5:24:a7:86:5a:3c:e4:14:32:09:e5:de:2b:
1e:f3:2b:1a:10:ff:a6:92:20:5d:05:d9:23:e4:a8:
1f:02:aa:8c:98:46:64:3e:65:cf:81:d2:23:4d:57:
5b:4a:51:c6:0b:1e:6f:c8:1e:d7:a7:a0:81:c1:74:
1b:f9:67:3a:bb:a7:29:6b:23:6d:4c:48:74:af:7e:
7c:09:bd:a4:ac:49:93:ee:53:3b:ab:66:9d:75:23:
0e:27:29:09:40:99:eb:d3:3a:6c:1b:40:f8:87:d2:
fb:5f:98:f7:f8:de:b7:bd:19:44:bb:4a:b3:0d:bd:
14:44:87:e7:e2:be:29:ee:08:4a:dd:7b:30:63:cf:
65:51:fc:c4:f6:d1:0b:5e:e3:20:32:e6:55:0c:6e:
63:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:F9:10:FB:D0:90:1C:42:FB:D1:33:67:E7:66:2C:7C:CE:09:9F:2A
X509v3 Authority Key Identifier:
keyid:4E:C4:62:04:B4:F8:85:92:3A:A4:A9:78:6E:D5:AC:AF:B1:C0:09:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TsRiBLT4hZI6pKl4btWsr7HACd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/e94ce1-0d7b-431b-9143-fc3f5ec14a5b/1/TsRiBLT4hZI6pKl4btWsr7HACd4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/e94ce1-0d7b-431b-9143-fc3f5ec14a5b/1/TsRiBLT4hZI6pKl4btWsr7HACd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:d2:83:5f:5a:e4:c7:69:5b:d2:ca:49:88:bc:cc:3f:3b:64:
e1:1b:6c:00:04:a5:c6:1c:2b:25:c8:a7:9a:bb:08:6d:5f:03:
cb:ba:6e:ff:8c:3f:bd:16:39:6a:95:3e:33:2a:78:3f:fc:cc:
e6:27:32:c9:7d:21:40:66:45:f3:ff:30:41:1d:c5:58:39:b6:
5d:55:5c:57:9c:da:dc:04:b5:91:03:1d:3c:41:f9:25:6d:86:
89:0b:a6:1c:45:a5:ba:3a:3c:3d:9b:98:bf:a4:a4:69:9d:d6:
65:29:5d:73:ed:2c:44:9a:fa:1d:12:ea:b8:4a:2b:01:87:ac:
96:c3:2c:aa:66:c6:d6:05:74:ec:38:fb:34:cb:84:39:80:8d:
00:16:7d:8c:26:7b:ed:df:38:8b:c8:b6:f6:85:f3:9b:f2:ab:
fd:02:f5:54:90:e0:fc:87:95:52:cb:b2:b0:33:9b:1d:76:6c:
68:aa:d8:4a:bc:26:92:0f:7d:43:05:75:5c:cb:b9:09:38:80:
ef:56:c3:9f:ce:e4:5e:c3:3b:f7:85:db:d2:7f:33:6b:a9:8a:
e5:c7:d8:3d:a2:aa:e9:d1:fe:ec:94:8c:7e:a5:80:68:6c:8b:
21:7d:e8:a3:3a:fc:d6:fd:56:15:cd:4e:4c:38:ae:2b:b3:c5:
49:97:90:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:38:05 2025 by rpki-client