
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/c6994c-a8c0-47e0-a006-b086666e2ada/1/tpGf6MvvmrMgrH4ONGh51J0YV9Y.mft
File: tpGf6MvvmrMgrH4ONGh51J0YV9Y.mft (raw, json)
Hash identifier: zzp6FjMgAxuhuHG357CvCPSgXCLWY16ti57f8LSpTAw=
Subject key identifier: 98:23:89:14:EE:F5:97:CA:EE:90:F7:26:C1:76:49:96:BF:B4:85:F7
Authority key identifier: B6:91:9F:E8:CB:EF:9A:B3:20:AC:7E:0E:34:68:79:D4:9D:18:57:D6
Certificate issuer: /CN=b6919fe8cbef9ab320ac7e0e346879d49d1857d6
Certificate serial: 01988B0E913FC17D6259B2586E52D384E2CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tpGf6MvvmrMgrH4ONGh51J0YV9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/c6994c-a8c0-47e0-a006-b086666e2ada/1/tpGf6MvvmrMgrH4ONGh51J0YV9Y.mft
Manifest number: 06DA
Signing time: Fri 08 Aug 2025 19:00:44 +0000
Manifest this update: Fri 08 Aug 2025 19:00:44 +0000
Manifest next update: Sat 09 Aug 2025 19:00:44 +0000
Files and hashes: 1: tpGf6MvvmrMgrH4ONGh51J0YV9Y.crl (hash: UwZqX1G/zBrjsk56yHfPAP0BxtwytF55TqeCOC+uD/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/c6994c-a8c0-47e0-a006-b086666e2ada/1/tpGf6MvvmrMgrH4ONGh51J0YV9Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/c6994c-a8c0-47e0-a006-b086666e2ada/1/tpGf6MvvmrMgrH4ONGh51J0YV9Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/tpGf6MvvmrMgrH4ONGh51J0YV9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 19:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:0e:91:3f:c1:7d:62:59:b2:58:6e:52:d3:84:e2:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6919fe8cbef9ab320ac7e0e346879d49d1857d6
Validity
Not Before: Aug 8 19:00:44 2025 GMT
Not After : Aug 9 19:00:44 2025 GMT
Subject: CN=98238914eef597caee90f726c1764996bfb485f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:98:92:11:bd:52:a4:5a:98:aa:54:eb:ff:b3:
a6:a1:bd:ff:d3:f1:12:95:5d:ce:5f:da:2e:80:46:
2b:f7:37:64:fa:66:8a:df:aa:84:96:6f:52:bc:a7:
3f:25:57:0a:cd:3e:3f:a4:cb:3a:a5:75:71:49:37:
72:73:6e:19:f0:af:39:4f:d1:64:63:7c:f6:87:2e:
f7:7f:4d:82:14:9d:a5:90:39:d7:cd:69:85:96:fa:
17:03:7d:d8:e4:af:29:9b:cd:60:91:be:fe:54:1c:
bd:bc:2b:ab:c8:21:cb:f1:96:01:1a:cf:e7:07:85:
22:7e:05:f1:46:f0:ca:48:da:7b:f5:61:5c:01:48:
ec:6c:bf:54:81:81:fa:d1:cf:0d:93:2b:36:fa:2d:
02:e6:a6:46:f8:31:db:21:29:0f:80:f7:ac:44:06:
b8:90:ef:fa:3e:1c:53:91:86:e1:c5:1a:6b:39:1e:
b6:e4:6c:42:92:36:c6:8a:da:35:46:32:95:7d:88:
7c:37:6b:40:3f:2a:aa:cb:9a:32:cf:57:b2:85:0e:
31:42:a8:2a:10:3a:09:35:50:d0:f3:2d:8c:43:1d:
0e:92:22:26:b0:b6:40:c7:49:2b:49:22:28:ec:eb:
42:68:d4:a2:e7:24:98:79:e2:a8:9c:b5:fb:12:cc:
c9:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:23:89:14:EE:F5:97:CA:EE:90:F7:26:C1:76:49:96:BF:B4:85:F7
X509v3 Authority Key Identifier:
keyid:B6:91:9F:E8:CB:EF:9A:B3:20:AC:7E:0E:34:68:79:D4:9D:18:57:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tpGf6MvvmrMgrH4ONGh51J0YV9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/c6994c-a8c0-47e0-a006-b086666e2ada/1/tpGf6MvvmrMgrH4ONGh51J0YV9Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/c6994c-a8c0-47e0-a006-b086666e2ada/1/tpGf6MvvmrMgrH4ONGh51J0YV9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:09:26:cd:e5:c5:c2:aa:46:ed:34:33:c7:fa:ff:c8:da:17:
15:7e:7c:8c:d4:57:be:94:cb:5e:13:63:f9:24:d0:64:dd:37:
79:cf:c0:4b:13:57:31:7a:9f:0b:54:a4:2b:d8:ce:cc:ca:f3:
c7:eb:07:19:9a:c1:71:bc:1a:be:ec:cf:da:95:f3:4b:cf:e9:
d3:40:f1:61:9b:bb:f3:44:b2:41:29:aa:0a:52:58:8e:16:44:
6a:18:eb:ed:9d:89:c4:a5:dd:28:48:a0:88:f1:4e:d3:c9:72:
74:72:af:79:d6:c1:0e:25:f8:27:39:2a:36:83:8d:27:a4:88:
10:84:9c:7d:a1:7e:00:e7:30:5c:3e:5f:c3:c4:c7:84:b8:8b:
ac:54:2e:d5:b8:8d:02:48:6c:9c:db:4f:dc:b1:95:14:4c:58:
2d:44:c0:0a:76:da:5e:c8:2f:d5:e7:96:7d:39:c2:92:ed:da:
93:53:4f:01:21:48:73:de:ff:66:55:b6:ed:79:cd:f1:66:31:
01:7b:f2:bb:90:0b:47:b6:13:23:9c:a5:7b:be:d9:bd:66:36:
2e:39:bb:0b:3a:22:2c:96:a1:c5:e1:37:50:61:e8:5f:88:ae:
c4:82:b2:a3:02:01:2b:8c:b3:05:3f:1d:5e:4f:63:98:32:54:
ba:f8:03:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:00:58 2025 by rpki-client