Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/02b7d6-269b-4bb2-b455-391768573496/1/TjS6bj4mlMezjkZRr-4GGwsh3q4.mft
File: TjS6bj4mlMezjkZRr-4GGwsh3q4.mft (raw, json)
Hash identifier: 268Efb1KXAQv1FPwTXkYFsUutUYuTo6t3fkJsXg8f4M=
Subject key identifier: EE:E4:E5:DE:D3:37:A3:71:03:C1:AB:50:2B:CC:D0:B2:D2:E5:2C:1B
Authority key identifier: 4E:34:BA:6E:3E:26:94:C7:B3:8E:46:51:AF:EE:06:1B:0B:21:DE:AE
Certificate issuer: /CN=4e34ba6e3e2694c7b38e4651afee061b0b21deae
Certificate serial: 01988544DF129A56D299B0341535ADEAA22E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TjS6bj4mlMezjkZRr-4GGwsh3q4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/02b7d6-269b-4bb2-b455-391768573496/1/TjS6bj4mlMezjkZRr-4GGwsh3q4.mft
Manifest number: 0141
Signing time: Thu 07 Aug 2025 16:02:19 +0000
Manifest this update: Thu 07 Aug 2025 16:02:19 +0000
Manifest next update: Fri 08 Aug 2025 16:02:19 +0000
Files and hashes: 1: TjS6bj4mlMezjkZRr-4GGwsh3q4.crl (hash: m4eeE4z4LkovOyxURoXj/vfBfE93xvj9twjFvHMwZ9Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/02b7d6-269b-4bb2-b455-391768573496/1/TjS6bj4mlMezjkZRr-4GGwsh3q4.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/02b7d6-269b-4bb2-b455-391768573496/1/TjS6bj4mlMezjkZRr-4GGwsh3q4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TjS6bj4mlMezjkZRr-4GGwsh3q4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 16:02:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:85:44:df:12:9a:56:d2:99:b0:34:15:35:ad:ea:a2:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e34ba6e3e2694c7b38e4651afee061b0b21deae
Validity
Not Before: Aug 7 16:02:19 2025 GMT
Not After : Aug 8 16:02:19 2025 GMT
Subject: CN=eee4e5ded337a37103c1ab502bccd0b2d2e52c1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:92:1c:9a:d8:1c:06:03:e2:7f:1f:78:24:e7:
0a:ac:45:c4:ca:02:00:6d:ed:ed:b8:ab:c5:7f:de:
ce:0a:3a:41:6b:6d:e1:e4:d0:41:32:ed:c2:b2:a8:
1d:87:05:07:55:a6:81:af:64:6f:70:ab:9b:d9:0c:
12:8e:41:94:a9:a5:09:0f:83:07:25:48:72:b5:dd:
81:7f:81:6a:92:03:9e:0e:32:c5:a8:a3:a5:10:6a:
42:f3:99:2e:7b:82:1d:c7:8d:08:42:8e:c1:ec:4c:
e0:f0:d7:3a:b4:fa:01:89:ea:d9:5c:60:69:b2:83:
ae:30:08:88:79:05:80:af:80:fd:11:26:40:a3:30:
e7:d6:60:14:73:c3:1b:a1:e3:14:af:fb:48:35:63:
4d:35:d7:4f:63:aa:86:ef:4d:2b:81:54:bf:91:cf:
06:88:2b:35:03:a3:8f:3f:25:c3:52:3d:d9:9a:05:
72:61:70:11:60:06:d2:86:b2:fa:8c:bf:c5:7b:4d:
b8:e1:16:0e:2d:95:f2:a8:f3:db:dc:3d:eb:6a:a7:
85:57:90:b6:33:f0:7e:b4:c6:82:f8:57:5a:3d:a5:
b7:69:92:9c:37:3e:e6:d9:ef:4f:c4:16:df:ee:7f:
50:87:69:e5:89:5d:54:c7:61:d4:f8:31:bc:40:97:
48:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:E4:E5:DE:D3:37:A3:71:03:C1:AB:50:2B:CC:D0:B2:D2:E5:2C:1B
X509v3 Authority Key Identifier:
keyid:4E:34:BA:6E:3E:26:94:C7:B3:8E:46:51:AF:EE:06:1B:0B:21:DE:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TjS6bj4mlMezjkZRr-4GGwsh3q4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/02b7d6-269b-4bb2-b455-391768573496/1/TjS6bj4mlMezjkZRr-4GGwsh3q4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/02b7d6-269b-4bb2-b455-391768573496/1/TjS6bj4mlMezjkZRr-4GGwsh3q4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:ec:37:88:ac:26:4a:53:50:b3:2f:cb:b6:46:eb:44:38:34:
14:03:eb:c8:b3:d9:f0:e9:5d:a7:2e:58:09:4f:6a:b0:76:71:
90:bc:f2:3e:00:bd:a9:89:2f:e4:69:bd:4b:2c:e9:fe:15:0b:
f4:5b:40:8a:20:d1:b5:0e:96:51:75:4a:be:cf:5a:7c:51:43:
6a:a5:6f:5c:7f:c2:5e:72:9a:68:67:fa:d8:52:cd:b1:aa:aa:
f7:f6:0a:e2:23:26:e5:e1:75:6e:21:c4:4d:08:30:5e:f9:fd:
79:12:a0:5d:c5:fd:0f:40:e8:01:6f:ff:19:12:4c:88:1f:e8:
d1:9f:7e:e3:4e:44:b4:7b:7b:dd:d3:b6:d5:32:c3:d6:3f:f1:
01:1a:8f:a9:49:b5:4e:44:b9:24:92:c6:71:4a:d2:ac:54:e7:
3c:f7:11:99:06:5a:e9:7e:51:55:74:5a:53:9e:f6:42:99:5d:
57:c0:dd:64:f3:19:3e:9b:b6:e7:2d:b1:a8:6b:cf:0b:5f:07:
59:c9:dc:26:5f:e8:6a:96:17:75:85:83:c1:4f:7c:ce:18:12:
a4:56:68:80:e3:ee:93:77:90:06:d7:57:09:b2:14:3f:68:19:
1b:30:00:e6:df:cd:b0:1d:20:5d:7d:eb:18:85:00:03:d2:55:
de:49:f9:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:38:27 2025 by rpki-client