Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/fdff01-762f-43a9-a4be-7bb1844014d6/1/tT8fJDLiJL3km_qxn2dTYpq1cH8.mft
File: tT8fJDLiJL3km_qxn2dTYpq1cH8.mft (raw, json)
Hash identifier: kWiH9D3aeZHZZOpOORWbuG060BjYYlO6kQb3jc1QWiI=
Subject key identifier: C9:8E:3F:DE:60:98:D1:4F:B6:E9:EA:5E:9C:63:1E:11:D9:A1:38:68
Authority key identifier: B5:3F:1F:24:32:E2:24:BD:E4:9B:FA:B1:9F:67:53:62:9A:B5:70:7F
Certificate issuer: /CN=b53f1f2432e224bde49bfab19f6753629ab5707f
Certificate serial: 019873E2B4432D59FA68D8695862C86DE346
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tT8fJDLiJL3km_qxn2dTYpq1cH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/fdff01-762f-43a9-a4be-7bb1844014d6/1/tT8fJDLiJL3km_qxn2dTYpq1cH8.mft
Manifest number: 0C74
Signing time: Mon 04 Aug 2025 07:01:33 +0000
Manifest this update: Mon 04 Aug 2025 07:01:33 +0000
Manifest next update: Tue 05 Aug 2025 07:01:33 +0000
Files and hashes: 1: tT8fJDLiJL3km_qxn2dTYpq1cH8.crl (hash: qLGmVpBbBc5W4Dkv0hhCSVMPBe4kCNBi1YT5hDFjgL4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/fdff01-762f-43a9-a4be-7bb1844014d6/1/tT8fJDLiJL3km_qxn2dTYpq1cH8.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/fdff01-762f-43a9-a4be-7bb1844014d6/1/tT8fJDLiJL3km_qxn2dTYpq1cH8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tT8fJDLiJL3km_qxn2dTYpq1cH8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 07:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:b4:43:2d:59:fa:68:d8:69:58:62:c8:6d:e3:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b53f1f2432e224bde49bfab19f6753629ab5707f
Validity
Not Before: Aug 4 07:01:33 2025 GMT
Not After : Aug 5 07:01:33 2025 GMT
Subject: CN=c98e3fde6098d14fb6e9ea5e9c631e11d9a13868
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:1c:3c:0f:23:30:83:b3:2e:f7:73:01:7a:9b:
48:c0:eb:92:eb:30:7b:fa:2a:9b:c5:bf:fe:7a:01:
3d:d4:4a:95:93:b8:f4:40:50:17:85:c8:d5:88:b1:
f5:f0:fe:4d:1a:b2:2d:d0:01:7f:a8:b2:91:0c:61:
33:14:27:33:89:90:79:63:30:d7:09:fc:29:15:f4:
50:ff:2b:7b:b3:b2:38:51:50:fe:28:c3:ff:64:5e:
4b:83:60:1c:d6:1e:17:e0:16:ee:8f:a9:e9:0f:2a:
16:6f:16:6f:31:b0:9a:bc:2d:4f:49:24:6e:1a:15:
d1:f3:47:48:cf:e4:d1:3e:9d:1c:05:06:09:37:ec:
2c:dc:f4:cd:eb:e0:27:70:31:82:85:a1:83:27:22:
f7:50:3c:42:46:40:0d:8a:f4:af:60:8e:e9:ab:a1:
4e:4c:91:40:e8:af:55:87:46:f8:36:90:99:bd:fc:
e0:0d:55:78:df:0c:a0:31:3d:09:76:55:aa:f6:35:
60:cc:3b:68:97:9b:9e:5f:64:ee:1a:23:12:bd:b4:
2d:bf:a1:e4:aa:58:19:2b:36:42:6f:a6:16:65:72:
99:de:8e:cf:6d:19:dd:6b:a0:93:6f:88:8e:7a:44:
5e:a1:66:9c:53:c9:cc:7a:80:ae:6e:3c:f3:b2:99:
4a:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:8E:3F:DE:60:98:D1:4F:B6:E9:EA:5E:9C:63:1E:11:D9:A1:38:68
X509v3 Authority Key Identifier:
keyid:B5:3F:1F:24:32:E2:24:BD:E4:9B:FA:B1:9F:67:53:62:9A:B5:70:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tT8fJDLiJL3km_qxn2dTYpq1cH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/fdff01-762f-43a9-a4be-7bb1844014d6/1/tT8fJDLiJL3km_qxn2dTYpq1cH8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/fdff01-762f-43a9-a4be-7bb1844014d6/1/tT8fJDLiJL3km_qxn2dTYpq1cH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:58:9d:51:4b:da:70:86:8c:74:43:c8:a2:78:ff:10:12:1e:
27:99:3d:9b:f8:9e:5a:67:d1:62:1d:01:be:71:81:b9:ed:88:
ea:5d:b1:0a:2e:e9:5b:e0:ed:0e:0d:59:cf:98:f6:b7:73:22:
4e:4b:14:78:4f:56:9b:ad:80:cc:69:28:b6:47:cf:4e:4e:0f:
b7:db:ed:59:95:d5:57:7a:08:5c:f1:be:57:cc:98:86:3e:54:
c4:37:7d:a1:00:37:d8:ce:d8:74:53:df:f8:25:41:c3:a3:3b:
14:88:ae:b0:6b:c9:1f:1a:3b:6c:ef:55:56:7c:b3:90:4e:3b:
f0:ee:a1:8a:0a:4e:f9:ff:b3:8c:a9:64:22:70:f0:b2:8a:21:
16:45:b1:1d:b0:b8:2f:81:f3:ba:2d:ec:d4:8d:86:82:a9:dd:
39:41:59:39:c5:ab:4b:b2:11:5b:18:b9:9c:be:09:76:01:b6:
59:8c:35:a3:91:48:24:55:12:db:75:f3:ac:a7:cf:4e:d7:36:
04:a5:06:a4:46:53:fd:1c:1b:1f:6f:ff:4d:d9:63:0d:69:3a:
ff:64:1e:02:ea:80:10:a6:06:8d:f7:26:b5:d6:d9:7c:d9:b9:
69:49:f6:be:f2:af:d8:62:8c:1c:68:8b:42:69:23:8f:1f:05:
ea:91:d2:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:21:24 2025 by rpki-client