Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/e2451c-e31c-4c30-86f2-0e516f9c4d45/1/_tvrNJcjK29ayaJodTchEBWihxA.mft
File: _tvrNJcjK29ayaJodTchEBWihxA.mft (raw, json)
Hash identifier: cZXQxQ/gDQx587vif9W5SthhVrOHF9kV1Lw5k9xlR68=
Subject key identifier: 6C:BB:03:3A:A4:6A:80:65:80:C8:4B:DB:C8:4D:79:84:09:E6:4A:7A
Authority key identifier: FE:DB:EB:34:97:23:2B:6F:5A:C9:A2:68:75:37:21:10:15:A2:87:10
Certificate issuer: /CN=fedbeb3497232b6f5ac9a2687537211015a28710
Certificate serial: 01989E5EF4596E0586137224A37B16583052
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_tvrNJcjK29ayaJodTchEBWihxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/e2451c-e31c-4c30-86f2-0e516f9c4d45/1/_tvrNJcjK29ayaJodTchEBWihxA.mft
Manifest number: 162B
Signing time: Tue 12 Aug 2025 13:01:19 +0000
Manifest this update: Tue 12 Aug 2025 13:01:19 +0000
Manifest next update: Wed 13 Aug 2025 13:01:19 +0000
Files and hashes: 1: _tvrNJcjK29ayaJodTchEBWihxA.crl (hash: uGlIB7L99BlzyyBr3d+AYa8YTOV13jW8GxrFGtq9Q3Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/e2451c-e31c-4c30-86f2-0e516f9c4d45/1/_tvrNJcjK29ayaJodTchEBWihxA.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/e2451c-e31c-4c30-86f2-0e516f9c4d45/1/_tvrNJcjK29ayaJodTchEBWihxA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_tvrNJcjK29ayaJodTchEBWihxA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 13:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9e:5e:f4:59:6e:05:86:13:72:24:a3:7b:16:58:30:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fedbeb3497232b6f5ac9a2687537211015a28710
Validity
Not Before: Aug 12 13:01:19 2025 GMT
Not After : Aug 13 13:01:19 2025 GMT
Subject: CN=6cbb033aa46a806580c84bdbc84d798409e64a7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:db:a8:eb:ed:a5:29:15:4b:35:1a:28:c6:bc:
f3:c6:f7:15:81:40:da:82:a2:19:45:0f:2b:0a:bd:
45:a8:b5:bf:fd:04:57:0c:1d:cb:b6:3b:5a:bb:d6:
10:e9:2f:05:fd:4f:e2:9f:e2:0b:80:6b:52:02:ae:
a2:da:40:8f:21:85:61:2b:16:7a:83:04:50:5e:14:
67:7a:01:42:b6:c3:4e:e3:2b:4f:69:50:a4:03:4c:
d2:c0:fb:8b:ee:2b:33:c1:6d:04:0d:04:02:4d:42:
59:80:8f:bc:2f:e0:3d:bf:b4:f1:c9:b0:a9:c8:f2:
33:fc:8d:99:7c:77:3b:f6:8c:c6:16:8d:d8:2e:40:
f7:de:4e:12:e2:be:cb:eb:d2:1f:8f:23:f5:69:c3:
5d:44:db:b1:de:45:a7:d1:b0:6f:a9:9a:b5:d7:8f:
2c:14:12:96:e4:16:3e:64:73:fb:64:ba:52:de:b9:
1e:e2:50:62:24:55:89:d6:68:26:76:e6:1e:21:5d:
e1:d1:01:19:3a:bc:0f:65:5c:98:11:30:f1:d2:be:
a3:24:a8:20:b5:c6:af:42:8a:25:2d:ab:33:de:5a:
c2:8e:64:4c:f3:c6:97:78:5e:3e:38:2b:24:0b:91:
30:52:44:6c:a5:c1:0d:8f:d6:7b:0f:21:90:c2:66:
ef:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:BB:03:3A:A4:6A:80:65:80:C8:4B:DB:C8:4D:79:84:09:E6:4A:7A
X509v3 Authority Key Identifier:
keyid:FE:DB:EB:34:97:23:2B:6F:5A:C9:A2:68:75:37:21:10:15:A2:87:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_tvrNJcjK29ayaJodTchEBWihxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e2451c-e31c-4c30-86f2-0e516f9c4d45/1/_tvrNJcjK29ayaJodTchEBWihxA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e2451c-e31c-4c30-86f2-0e516f9c4d45/1/_tvrNJcjK29ayaJodTchEBWihxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:93:b0:02:72:b2:21:e2:14:07:cb:ea:50:de:6a:bf:7e:66:
c3:7f:de:91:6d:59:23:4a:31:83:a8:1d:73:94:b7:cb:94:1e:
4b:8a:0a:eb:d8:3c:30:df:ab:dc:f9:be:82:19:1f:79:5c:80:
92:e0:24:95:00:40:06:8b:4a:fb:37:94:e4:c8:0a:48:71:17:
24:b2:18:98:c9:00:2b:fb:d7:cd:65:b6:63:72:4b:0e:09:a9:
42:5d:dd:1d:58:de:35:29:f8:08:dc:bc:3e:9e:06:56:af:b0:
c9:c9:d6:97:89:a9:62:db:77:2d:89:2e:59:ba:4f:35:6f:54:
6c:46:af:d0:f7:fb:b5:20:bb:01:bb:14:f4:2d:e6:8d:94:2d:
5b:7d:74:c2:b3:3d:dc:d5:ef:78:9f:b3:4f:89:a8:e4:c9:ba:
0a:95:4c:bc:f7:09:78:20:10:23:5f:2f:a1:53:c0:45:33:9d:
62:a3:43:36:a4:83:18:ad:7a:05:49:82:27:21:36:da:f5:5d:
f8:34:74:27:be:6d:37:75:af:7f:87:f9:ae:40:f3:b0:7e:a5:
8c:f4:4d:aa:9e:b0:9e:c3:be:88:87:63:31:7b:78:8a:36:74:
77:ae:27:94:95:ea:6e:31:e9:4c:40:43:b8:43:60:0e:ff:f2:
74:6e:dd:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 14:33:58 2025 by rpki-client