Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft
File: tFmZiZ920uLkzN_IF_mHnPrAa74.mft (raw, json)
Hash identifier: PytFgzBoqN3k3AJwGzkhW6GPXIZIX8o0XS+xP3coEqs=
Subject key identifier: ED:CD:B1:83:79:5B:2F:EA:F4:41:99:68:9D:1E:B3:64:B8:3F:F1:69
Authority key identifier: B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
Certificate issuer: /CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Certificate serial: 019889213DB60B0B7534EAB0AFF63A223330
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft
Manifest number: 0EDD
Signing time: Fri 08 Aug 2025 10:01:53 +0000
Manifest this update: Fri 08 Aug 2025 10:01:53 +0000
Manifest next update: Sat 09 Aug 2025 10:01:53 +0000
Files and hashes: 1: tFmZiZ920uLkzN_IF_mHnPrAa74.crl (hash: RnCVCGR5UUen3hXSIngRyuJtQ5p4yzcJ53rsAOLQo0I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft
rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 10:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:89:21:3d:b6:0b:0b:75:34:ea:b0:af:f6:3a:22:33:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Validity
Not Before: Aug 8 10:01:53 2025 GMT
Not After : Aug 9 10:01:53 2025 GMT
Subject: CN=edcdb183795b2feaf44199689d1eb364b83ff169
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:dd:dc:ba:9e:af:94:59:96:a5:b8:80:43:44:
09:f9:5f:f7:1b:9d:aa:cc:35:d5:99:a6:e4:cc:d2:
17:84:24:89:2b:42:e0:18:db:8d:ba:f4:2b:e4:51:
0e:3e:0c:16:b3:fe:2d:e8:53:8f:37:33:ca:0b:69:
08:98:8c:d2:26:a1:38:83:f8:d3:3c:b7:60:ea:94:
2f:41:58:23:dc:90:55:ea:7a:08:96:10:c1:4c:e3:
5f:6b:13:88:3b:fd:d7:96:68:5f:46:58:8c:80:5a:
6d:03:05:b4:49:0e:7c:3f:7b:11:dc:c5:b1:61:86:
88:98:36:e8:d7:61:6a:80:b7:38:29:1f:96:aa:b1:
3e:f3:24:08:63:09:13:8a:70:c4:db:ed:25:2e:ec:
86:e8:43:ac:60:71:a7:56:10:4c:f4:28:53:bc:53:
a3:36:3e:40:48:28:d0:f6:32:c0:18:5a:46:3e:68:
86:40:8a:4c:87:5a:ed:bf:79:e9:9c:5b:82:af:34:
3b:95:fa:85:c2:15:c6:05:c9:cc:d9:09:5c:57:a2:
46:b5:bc:53:ee:a8:89:27:18:b2:03:fa:2c:84:0b:
cd:9b:9f:96:f8:77:93:0b:f7:1a:42:84:73:20:95:
7f:72:3c:9e:05:ea:9e:14:a6:a9:f1:76:8f:6c:2c:
c0:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:CD:B1:83:79:5B:2F:EA:F4:41:99:68:9D:1E:B3:64:B8:3F:F1:69
X509v3 Authority Key Identifier:
keyid:B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:db:c0:2d:d9:af:e8:4a:00:6e:b7:95:83:32:16:42:e7:d2:
f4:ca:80:1b:ab:67:6a:de:a2:f7:87:a5:97:ee:d7:c9:40:e4:
98:20:76:10:7c:bf:65:27:57:d7:58:44:f0:90:33:2f:26:de:
88:73:58:92:f4:6b:4d:2d:38:11:46:d1:50:5a:4b:7f:6c:1a:
c5:ab:66:2a:7b:c8:34:36:35:33:3b:1c:88:77:52:5c:09:31:
7e:e0:f4:01:5e:0b:1b:da:46:49:e4:30:35:5f:eb:24:b7:2c:
42:f1:15:8a:04:bf:a3:42:b4:83:66:1a:89:76:d5:b0:cd:be:
e8:a8:77:5e:81:ae:dc:74:6b:42:06:ca:12:25:da:67:a9:8d:
45:73:18:2f:f9:0e:00:73:c2:a0:25:ff:23:08:32:04:57:d9:
38:08:7a:ee:a6:88:94:59:5b:9d:b2:09:d8:c8:f4:67:12:00:
c8:fa:91:87:bf:a1:2f:c3:c6:15:8b:54:6b:f3:b8:87:3e:2d:
8c:1e:da:f2:d5:e2:50:fa:42:6e:3b:90:14:aa:4f:10:06:d6:
0f:f3:4b:52:0a:7b:76:3f:dc:a0:50:64:b9:15:78:dd:55:f4:
35:cf:2d:35:22:41:9d:6d:0e:3d:f0:ed:38:34:64:17:f8:1f:
33:2f:68:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 12:48:12 2025 by rpki-client